last executing test programs: 5.257574617s ago: executing program 1 (id=1718): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pwritev(r3, &(0x7f0000002640)=[{&(0x7f0000000200)="fa", 0x1}], 0x1, 0x4, 0x5) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x3, 0x0, 0x3231564e, 0x0, 0x3, [{0x101, 0x9fd}, {0xb, 0x4}, {0x6, 0x1}, {0x3, 0x7fffffff}, {0x1, 0x8}, {0x7ff, 0x2007}, {0x7, 0x8}, {0x6, 0x2d19}], 0x1, 0x0, 0x0, 0x2, 0x1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xa002a0, 0x0, 0xf, 0x0, &(0x7f0000000100)=""/15, 0x6412, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_NAT_DST={0x90, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_FILTER={0x44, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x848}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa24}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x240}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xf8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffffe}]}, 0x108}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) connect$ax25(r0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) 4.041264482s ago: executing program 3 (id=1734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0xda, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xff, 0x0, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x30, 0x81, 0x80}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x8, 0x0, 0x80, 0x8, 0x6}, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="050f0c000107100200dc1ddf940900"/27], 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1052}}, {0x16, &(0x7f00000002c0)=@string={0x16, 0x3, "d19fe4a754912601365c5c536bf8f9e5be92df31"}}, {0x89, &(0x7f0000000440)=@string={0x89, 0x3, "e8618287209cf60e048b6b6a37a47a34022f8f1ccc3e4be61a6a2da4519912f51f4951c53c2eb837eb3c4465b65ebfb5bfd800b8c07afa169a9b3b119bb568c15e654353cb87dd22da5d5917a0bf1741a08d20e14e87cdaade07eeb4f79911dc88cc0d2223216ac1a03fa65f8dd01a325c0e7224efd829c755bba29ebb4e455880a7459f268775"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x5c2e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000540)={0x14, &(0x7f0000000740)={0x20, 0x8, 0xde, {0xde, 0x2, "c9400afd932e757546a69650fd6fbd60bbe1f6398b1295ca89d3a9e28a30d27fb3626467de1ffb423c1b58ab6d5ae076147ff548be8d9ab791789ec8bd0447db2350357b8f93f64634feb4fef3d22abc41a6ff0577b41248a2dd3833eba345eb1b30d7bf2a13d851df3d7893e3882da5743ef071a54f2e717f4874d4bcdd4408e6fc296ff5c2fe482a31e6afb202589379c03d7c4dc23ee252dc4aa27bb8b30c63939e2cd997b277f3e438a71a713f37e729963a8d0edaa0c446fb8473a5cddc6b63fe7d9487b1b9098faee284e5686d44d30966f68add516fdbdecf"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000840)={0x0, 0xe, 0xd4, "61e65212ecb6fc1a31c6c7f36a273026f2b0362c2350a4b2d219ec9c5f7ff754b6ba5cbb5aafa560b35090266267905e88039108d0a0dd3a212b4df9f6c693988707f0ae86320d9b39e2f89494ab040b33598584775d104cdb170a3ca105bde564125cf702062ac3fdadebf114cc90a961265f6d6ff63e351a27ad509d4063e1032d66603be1daa3852507eea2c5af7b451845fa7e6ac07f267f732244a55bc1ec5c78222ba5511e51b4222acc6e44e28a01cd5d6665af45c502eed259a607241d43070dd32e0826cf4331301ec2849fe488803b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000980)=ANY=[@ANYBLOB="200060000000005e23b33d6c876a79838ac57520207a08f93bcbc45bcd301cf6b801a92936fa9c9f20800e7065bc39c2bc29ebf20ac3587f63ef75830a3d54e831b40a67d6858080505e7f5f16d7c1f2154db43a99f37208a113db56eaffd9d8059bc3806131"], &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0xff}}) fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='statm\x00') read$FUSE(r4, &(0x7f0000001580)={0x2020}, 0x2020) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000580)=""/117, 0x75}], 0x1) socketpair(0xa, 0x1, 0x1, &(0x7f0000000ac0)) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x0, 0x5b7a, 0x800}], 0x2) semop(r6, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x49}, 0x94) 3.880855694s ago: executing program 2 (id=1737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x1114c2) (rerun: 32) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000100)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fe"], 0x18, 0x4000}}], 0x1, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000180)=0x2, 0x4) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.741196619s ago: executing program 2 (id=1738): unshare(0x62040200) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="14ba960fcb56697370dbc6e5690000001000010002000000000000000800000a9e44bebe000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000030900020073797a32000000000900010073797a34040c0009800800014000002080200000000b0a01030000000000000000020000090900010073797a31000000001400000010000100"], 0xb0}}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) syz_open_pts(r3, 0x400402) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.46016677s ago: executing program 2 (id=1742): fsopen(&(0x7f0000000240)='exfat\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0c00238005001e000100cf7ddce0e7eec78991b74ed85e00dd"], 0x28}, 0x1, 0x0, 0x0, 0x40004004}, 0x800) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 3.391252419s ago: executing program 2 (id=1743): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc}}, './file0\x00'}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000200)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_io_uring_setup(0x10002dda, &(0x7f0000000280)={0x0, 0xa5ca, 0x2, 0x10002, 0x283}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x1, 0xff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd700002dcdf25010000000c0002000100000001000100100007800c000180080001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x800) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x4, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0x0, 0xa, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x3, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0xff, 0x4, 0xb, '\x00', 0x33}, {0x1, 0x1, 0x57, '\x00', 0x5}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x4, '\x00', 0x2}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0xd, 0xfb, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x89, 0x6b, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0x6, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xa7, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x181440, 0x0) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x40046103, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r9, 0x3312, 0x7) 3.170144164s ago: executing program 1 (id=1744): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x18, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7f9aa88000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r4], 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, r2}, 0x14) socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3.090952325s ago: executing program 1 (id=1745): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xfffffbff, 0x4) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x101}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048041}, 0x40) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x10, 0x0, 0x200, 0x2, 0xe2, 0xd, 0x8, 0x5, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x8000, 0x3e, 0x2, r1}, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x0, [0x2, 0x3, 0x5]}, &(0x7f00000002c0)=0x44) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000300)=0x2a7) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r1, 0xf}, &(0x7f0000000380)=0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @multicast1}, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x98b, 0xfff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r1, 0xa7, "33d2b2b2cf8018060e3039f5abdac27f27b35f2dbed8b3e32c1de0e7e3e478f7cc378a0c499b05d5cf93e2cf21fde5e1cca2f32d7a715a5c5489be7a0d0f35202fd593a90a3780e2c24d9594ad86ef67083e913d8a9bab2fa4e03a9db2c450b908c908e2509882bcc554aa6fc0e6563c1115049003fc759b2cd054068437af2afdb8010fac83aa8d6a2e896197ecf07a71f0edfbf2b96f74b8f2fbe9a3d614665ebef81c25d4fc"}, &(0x7f0000000500)=0xaf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000006c0), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r1, @in6={{0xa, 0x4e20, 0xfffffffa, @local, 0x4}}, 0x8000, 0x3}, &(0x7f00000007c0)=0x90) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x6) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r6, 0x4010ae74, &(0x7f0000000800)={0x4, 0x6, 0x487}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x8, 0x24, [{0x30}, {0xcf4e44e6841e8605}, {0x4, 0x1}, {0xb}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48000) recvmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a00)=""/72, 0x48}, {&(0x7f0000000a80)=""/48, 0x30}, {&(0x7f0000000ac0)=""/56, 0x38}, {&(0x7f0000000b00)=""/252, 0xfc}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/40, 0x28}], 0x8, &(0x7f0000001d40)=""/113, 0x71}, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x40, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)={0x1b, 0x0, 0x0, 0x6, 0x0, r6, 0x8cd3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f00000020c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002380)={'erspan0\x00', &(0x7f0000002340)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x3, 0x9, {{0x7, 0x4, 0x0, 0x2, 0x1c, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty, {[@ra={0x94, 0x4, 0x1}, @end, @end]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002440)={0xd, 0x0}, 0x8) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002740)={0x6, 0x12, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x228f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x1, 0x1, 0x1, 0x5, 0x100}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002540)='syzkaller\x00', 0x6, 0x82, &(0x7f0000002580)=""/130, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002680)={0x0, 0x10, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000026c0)=[0x1, 0xffffffffffffffff, r5, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002700)=[{0x0, 0x1, 0xb, 0x9}, {0x1, 0x3, 0x7, 0xc}, {0x1, 0x2, 0x0, 0x1}], 0x10, 0x6}, 0x94) r14 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002800), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x12, 0x34, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x35}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ldst={0x2, 0x2, 0x6, 0xa, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x23}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0x0, 0xb, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002300)='syzkaller\x00', 0x4e3, 0x0, 0x0, 0x41000, 0x10, '\x00', r11, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000023c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002400)={0x5, 0x6, 0xe, 0xb}, 0x10, r12, r13, 0x0, &(0x7f0000002880)=[r14, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x960}, 0x94) 3.090549589s ago: executing program 1 (id=1746): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50020000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1000000000000006, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f00000002c0)=""/91) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2d4, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2a8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}, {0x4}, {0x120, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "9c833826786837cf34df88b946f5b7748b05325e959c0316307b968d6fc4afc16debccac0fbe7f09b760c46edac5bd76ded2953385673b5629e9ccadfa148618eab81d7ab869a5b70ec08366182f9128607c1291878a3c93b9f6c967bcb7b1b805058a8ab3284e5d84da799c0821c9d3f2a97b52ce48230b63fe5d5a4e1ec541c1906e325679fab44a5ea8cd171372c5fd1bb6ac7e1589b6c3b56f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x170, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x54, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x3e, 0x6, 0x1, 0x0, "0aeae5e1d10cc2217e5b1c86669d8583ca5a78dd6f9f2c8a87275461f5e443e86f08f22efce605842dec0cc243d1e906c2f065ef7c72d1e3e63b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xfffffffb}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7f}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x388}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@none, 0x6}}}, 0xb) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000000)=""/27, &(0x7f0000000340)=0x1b) 2.840494391s ago: executing program 1 (id=1747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000003f277268d156b1fd0a0000400000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@ifindex, 0x2, 0x1, 0x2, &(0x7f0000001400)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@cgroup=r8, r2, 0x2b, 0x16, r2, @void, @value, @void, @void, r7}, 0x20) r9 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) pwritev2(r9, &(0x7f00000000c0)=[{&(0x7f0000001240)="3ee424fe3d58b2bc38e4a273937ac49de844c03dfa6b90ebf4c0fdfa08dc3057b3b3c2609e3dfb1543b56b0d324f811f2efe704f", 0x34}], 0x1, 0x4, 0x2, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x4, &(0x7f0000000800)=0xffffffc0, 0x4) lseek(r2, 0x1000000, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = socket$unix(0x1, 0x1, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r16, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r17, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r18 = syz_clone(0x10000000, &(0x7f00000000c0)="98ea33c834862f734512b69f8615268d50785712ec2956f2f0d7788adc04765dd432d365557cfe95e5062f96efaaf75cce6e9d6c539f3b85ad2f870bd14be37c02313d9d01d285313ac995c9d979bede973f6f125d6c0c90a65d2cb933cf666010ff2a855d1557d8fdedd669f63fd5e6684e46cb4cfeff745110c15ab59b59e2a84cff4727c5950245d3642a3d6cc11960fcd729d420a77a61a9fe5d9189d91e62fb1a2e60bb0817be508b2779793ad4ba18d835c4113c47edd2358214832b656a6ed6e2498957c9c7c03542d8abeaebe58176e44142", 0xd6, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="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") readv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000001380)=""/89, 0x59}], 0x1) kcmp(r1, r18, 0x4, r0, r0) 1.011162342s ago: executing program 3 (id=1748): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 330.274011ms ago: executing program 1 (id=1749): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 278.096ms ago: executing program 0 (id=1750): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000600), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x7fffffff, 0x2, {{0x12, 0x4, 0x2, 0x3c, 0x48, 0x65, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@end, @noop, @ssrr={0x89, 0xb, 0x53, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}]}, @noop, @noop, @end, @timestamp_addr={0x44, 0x24, 0xdc, 0x1, 0x6, [{@broadcast, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x980}, {@local, 0x7}, {@loopback, 0x589a9f2f}]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000232560cea1df13007b8af8ff00000000bf0000010000000000020000f8ffffffb703000008000000b70400000100000085000000150000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)=@bridge_setlink={0x1c8, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0xc880, 0x24008}, [@IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_VF_PORTS={0x158, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "cd1bbce1cd976f093d339c5ad67975c7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eb57c54d2f907560f499406838a76401"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f846ca7eed16fa6ef64103d65e93b183"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3397289de6610b5e8092bfa0fb3631ab"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, ':\x8f%\x00'}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "5e665ea62d3d646e2ccb0086a7bbb5bb"}, @IFLA_PORT_PROFILE={0x19, 0x2, 'cpuacct.usage_percpu\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "036dcb24f3070f9e333248d640bcdbf4"}, @IFLA_PORT_PROFILE={0x6, 0x2, '#\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '}k%:\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9005e1b0419e96c74e1d2fe3f26f9f71"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6016a304bea6f434b9dbb5bd462b7ab2"}, @IFLA_PORT_VF={0x8, 0x1, 0x29}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a6f0d8dc07a052341164d8ac25d4530c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ab9308789f845c1f12e36920ba84c35b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1c0f355bd417ce239eeac016d9155af3"}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xac96}, @IFLA_MAP={0x24, 0xe, {0x2, 0x10000, 0x3ac, 0x6, 0x4, 0x87}}, @IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4002}, 0x8880) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xd, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x400073, 0xffffffffffffffff}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9, 0x10010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x0, @fd, 0x8001, 0x0, 0x0, 0x2}) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="96bced8af9c8", 0x6}], 0x2, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1d}}}}], 0x20}, 0x42090) getpeername$netlink(r0, &(0x7f0000000640), &(0x7f0000000680)=0xc) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITEV={0x2, 0x20, 0x2007, @fd=r0, 0x5, &(0x7f0000000580)=[{&(0x7f0000000180)="fe7e7998e0a3abda3629ffbc9fdff2b14b7f2d86b96d5ccd9a38ff3d7d2240b85b210347fb7aaa1e0c94434ef374d244aba7cf00917ce5a07339718de468055c0db7a68d87d0e09e9ba20019c9bc4a9533b0d9f7d3eebca1270ebb301fb8c2038f38b45f26", 0x65}, {&(0x7f0000000200)="1614acde22942a0c2957b4503beb3bac5f95e3bb91998579855a7284f88492d907220e826eb10c9eea882a5369d99968819d9dc7e48d28dc19e2ec86f8b50c5a91f3a96d6788fca5622bf89869b05d32b41a34c897e044a6ab0051e4d5d5d86835cc4faba1ab46c60c2f3e1671a5ab8ee893b1e498293de91b533d0e460eceea22b768017a74f46da5c404ae258a8735afb754e766f44419554300e6af8b8c117d9dfdd085296de0bdba0797dc971a20d00e6ac07d2877e2129f18a6ae601deb5792", 0xc2}, {&(0x7f0000000300)="6af4be18616fcbaab532436b85ced32c32066418cb99070b7e6c64ed68fe76df33e2a89926290b3b6982d1d3da2f6d3576521f563a2113beb6eb866e916fa390d44aec82ac17e569f925c9798ba51f82facb462955ab9a4cd464b00a67b82d243ed8938a66c56348fcf634a31b49d5553e7670e67b2df29af1f98f34c8ec8ada1b6d83662d250390c523a9d57a4f20e4a220ca62c670130b2388c38600a73891bcfe0c0563dc", 0xa6}, {&(0x7f00000003c0)="e4f519322353c02284f02ff8767a653fbbef3c7d96c42db36aa9fde83afd360679074ca3b3d93bd5c7c79448d5275b1c4be0b6f02b488823fddca3db6564e8059c96bc4747fe861bd9421940d3db9498fb90d065af621cbe911fc2b9f003f52247a8407da439c2b71b48e8423f0efd", 0x6f}, {&(0x7f0000000440)="f8689f99bc28c5daa69d56b767d6ece16a767ab831d399e12612be09afe644b8fad297cf4d28279d9f84c1db811b8386be6ecfedc5d08da50e86f313601418325dbdda9894553f77eef9563c163174d8e97cf59c96299ae54b31f44d34", 0x5d}, {&(0x7f00000004c0)="d7a33513929fd3a920bf7301e15792219deff90c439c1ffcbb1b8d4c286b873abe825872b50faf4a221617acfe46cfe7596abb38d11635846778e8d5221548ec1827b59105ccc06f78594be053ffa73d8cd9447a51558f838cea6f33b342610bfbf5101b61377b29f28ce13fd8b94f00faeab9c328cdcaa8dcf4bf3a3ac06ed2630cf3e9a9cce2e571575745813f27e324", 0x91}], 0x6, 0x8, 0x1, {0x0, r9}}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) 218.44729ms ago: executing program 2 (id=1751): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="1f", 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000)='jfs\x00', 0x8080, &(0x7f00000001c0)='discard') write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000018c0), 0x0, 0x20040014}, 0x0) 217.392649ms ago: executing program 2 (id=1752): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000680)={@mcast2, 0x0}, &(0x7f00000006c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x9, 0x1, 0x2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x17848, 0xfffff3e9, 0x4}}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ac020000", @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf25010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000300780001801400020076657468305f746f5f626174616476001400020076657468305f746f5f6261746164760008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="080003000200000014691b80000000000000000008001100", @ANYRES32=r2, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="280002802400018008000100050000000800010007000000080001000e0000000800010005"], 0x2ac}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007001000df7f00006e45000041010000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b7", @ANYBLOB=',rootmo']) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 187.899843ms ago: executing program 0 (id=1753): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0xc850) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) 187.532212ms ago: executing program 3 (id=1754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r2}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r1, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x4d4, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) 101.061237ms ago: executing program 0 (id=1755): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) r0 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x1, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x135, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f00000003c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0x4b, 0x0, &(0x7f0000000100)) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="7df6d112f6ed0ef3a088960b406295110fcd5672d5e38f458662b2fc3347afeba240953e94d258347f6f5ea55616a42d005c34d116c7eac156dd349adb8cf8d8d9fdbb27acc5910b7299a123e649eecc13c4", 0x52}, {&(0x7f0000000100)="1cddebcb4aef041e0636470a055de57c519c8056cb9693e27a212c6712065c553d3d449be3c175cb96dbb51d28ab1b81aec9ce77e8426629d5c3806a8eca11db8d7ea3e837f5252740cbf42742b8efd8d8d3bd784e22bbb21fdaffc763ec1f228fdace2c97ef78c114798cba153e1da644dfc82ba7ab2d2a8bffeb206393e99399c113f8372e03af8989bc1e4209fcd2a2d40b9c495653117729f2c94fc90e2d7d2a36bdddb8", 0xa6}, {&(0x7f00000001c0)="95cb9f239a73ada49824b486602d24f5e7eb0493ab09464dcf2c7b84e578ebd74aefb90b12311c8ef67ddf7105ea406528f6f2e0bb505915c53e79109794969c7188d71e0758fd67163519a4b8b672a58ddbede6d7ad8809b546c663cf927f61bc1fb95122e8fc98b8b45472b3591210fc9546c3abbe455449524347900cecc19e879010f7effa06831a88c44a64465f77739cec337f778eaba3704c0aa39d02dbd137d6f292111b958c46d273bb22d297279e3a9866fdcc1b2072683d44aa4a", 0xc0}], 0x3, 0x7, 0x1) ioprio_set$pid(0x3, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x72, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/90}}}}}}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r3, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) (async) io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x1, 0x20001, 0x2d6}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) (async) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x135, 0x0, r0}) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f00000003c0), 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt(r2, 0x1, 0x4b, 0x0, &(0x7f0000000100)) (async) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="7df6d112f6ed0ef3a088960b406295110fcd5672d5e38f458662b2fc3347afeba240953e94d258347f6f5ea55616a42d005c34d116c7eac156dd349adb8cf8d8d9fdbb27acc5910b7299a123e649eecc13c4", 0x52}, {&(0x7f0000000100)="1cddebcb4aef041e0636470a055de57c519c8056cb9693e27a212c6712065c553d3d449be3c175cb96dbb51d28ab1b81aec9ce77e8426629d5c3806a8eca11db8d7ea3e837f5252740cbf42742b8efd8d8d3bd784e22bbb21fdaffc763ec1f228fdace2c97ef78c114798cba153e1da644dfc82ba7ab2d2a8bffeb206393e99399c113f8372e03af8989bc1e4209fcd2a2d40b9c495653117729f2c94fc90e2d7d2a36bdddb8", 0xa6}, {&(0x7f00000001c0)="95cb9f239a73ada49824b486602d24f5e7eb0493ab09464dcf2c7b84e578ebd74aefb90b12311c8ef67ddf7105ea406528f6f2e0bb505915c53e79109794969c7188d71e0758fd67163519a4b8b672a58ddbede6d7ad8809b546c663cf927f61bc1fb95122e8fc98b8b45472b3591210fc9546c3abbe455449524347900cecc19e879010f7effa06831a88c44a64465f77739cec337f778eaba3704c0aa39d02dbd137d6f292111b958c46d273bb22d297279e3a9866fdcc1b2072683d44aa4a", 0xc0}], 0x3, 0x7, 0x1) (async) ioprio_set$pid(0x3, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x94, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x72, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/90}}}}}}, 0x0) (async) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) (async) preadv(r3, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) (async) 100.713824ms ago: executing program 3 (id=1756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008845) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r9, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008845) 100.313593ms ago: executing program 0 (id=1757): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.29682ms ago: executing program 0 (id=1758): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r0, r0, 0x0, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061115896830000000000180700000000000000000000000000009500000000000000a52f7ec728ad884f33ba5186144b71e53d671056cd43be0d32fee7ec430ab338b018d59c1e60d67561181fa030527a62eadb48e286b4bf4560fbdb85e39d89c1e5b7f923e9b7275ff61067d1bce8a6b1413821550cc0b87f4f0f9f"], &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10041, 0x4) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x2) 939.7µs ago: executing program 3 (id=1759): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fdfffd0122050009058103"], 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) close(r1) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="2f878c", @ANYBLOB="ea3169650482d0e6e843e7c792474bf2661faaa9d352224c1906c16057986aef764e66281e1db2ccc8a90804ec8ad40f5525bf2f75be563534260ee03cbc2c1751d776d08ae5e6d401cce2487c44fcb71639a8aebfc61370bd7c4d115af3f7298791f7eb17c7a6fbc207301062c484480357026e83d82aa57480148bf33ea4da3730c2784cdcefe3fbb714a776b96b10d2ee32528bebbd633e15360110089fe456de3ab1a116a565f3f3e975084f2956c3cd430383304ccc7b84e8647e", @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES32, @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2281, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x29) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x2721, 0x0, &(0x7f00000000c0)) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) shutdown(r6, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8815}, 0x0) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x4) (async) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) mq_open(0x0, 0x43, 0x8, &(0x7f00000000c0)={0x7e, 0xca0, 0xe6cb, 0x9}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000001c0)={0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 301.469µs ago: executing program 0 (id=1760): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @private2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x2, 0xc, 0x1, 0x9, 0x49, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e23, 0x8, @local, 0x4c}}, @sadb_x_sec_ctx={0x1a, 0x18, 0x0, 0x2, 0xc2, "11b70e698aac5e1240a97be41ded43302bd2e6eb67c001d9ab86285694fe2b4e4a4669ffe8171d187de6cd73f5df157c7b897b41262c68ac07fdbec8878e3e3c076ef3b2bfe4d2a1d47241140021a5772452f82c45c1c81e16cf6b4367034b887c1aac2e0066fe01cdf25a2ff8bb77dda07a3b7f3d87d8628c376f00358c1b920cd7dc3270556247d6ca9e3b5f74f82498e2ce3ca692c7528eab9e6ed3b930a1347b74a3773f7fde1422321dd7d2fdbfedc3396ed9fa6c44ef04969aa937f64ef39d"}, @sadb_lifetime={0x4, 0x5, 0x101, 0x0, 0x36, 0xffffffffffff3bff}, @sadb_key={0x20, 0x9, 0x7c0, 0x0, "5e94f9bce8c12bdcb6779e5065741626b406fce98cab36c874fc587c2055a0afe9f2a49cec1555812bf5872ea83afb1c8a73967cedfbce3398e62e53630101a1c2ee20d1f18099f463334516ae63f09b86d408978cc4051e43d718a4c880c6a5a8e7313199b4585f0075db0a8776afe0333e2ae8fc7e4ac887e091d33a0f8c16adb419e7b72afff5dbfd46cfff27afe4722d87b6139fba3a70c6f65e1deb759252b480b554d09e0e20ec86142885e27a237db7b7fca2c4058903bfbb7afa222aee2b736d3644c7c282d29137715a99d6af3354f74ff61f05305b070b1a2251f4d4666989ee0c301b7734ddec360c63f71452354782f7b2f0"}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2c, 0x3500}]}, 0x248}}, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x50, 0xffffffffffffffff, 0x10000000) r6 = io_uring_setup(0x669, &(0x7f00000002c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(0x0, r5, &(0x7f0000006b80)=@IORING_OP_FADVISE={0x18, 0x5a, 0x0, @fd=r2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, r7}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x2, 0xcb04, 0x401, 0x3, 0x20000000003, 0x8000000000000004, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x1, 0xa, 0xfffffffffffffffe, 0x1, 0x9, 0x9], 0x0, 0x80402}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x9, 0xe, 0x1, '\x00', 0x8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = fcntl$dupfd(r0, 0x406, r0) write$binfmt_elf64(r8, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x80, 0x12, 0x8, 0x100, 0x3, 0x6, 0x1, 0x28f, 0x40, 0x3a8, 0x5, 0x4, 0x38, 0x0, 0x9, 0xfff7, 0x2f}}, 0x40) read$FUSE(r0, &(0x7f00000010c0)={0x2020}, 0x2020) r9 = socket$nl_route(0x10, 0x3, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000140)="2c8aa4eaa5be5ea53d493bb26b2f5bb56969c9d2206c8882d0dba5b5ce8161bb7b", 0x21}, {&(0x7f0000000180)="8ef59e23b53d55a61234154644e8531f773d8350831c01dfd741758be314fa024f34bc42b4daa08ce9863f413356d91b672f6d40411e58b4add38398044ae916b7acb251dcf9490bcdcbc7304704bd9dff790d40bdd58bcfe5f7aaff0b3e9a19e0925ae6f390b14354040dd3abfeec03f2a03b6a5b34166b695a983da9136ace4f283e905bf5403f659847422ba43fb09957528cf3245bf4f53d72d1d5609e6bf083049b67ea7f2ce5f55a849876092af73b82b4d5bbb64b4b6456c8260e4173b75a8b25c8d950a389c76e781d", 0xcd}, {&(0x7f0000000280)="43b423d0bb9d982ad08fd032a02287be8cd29534a7c17c44c8e9dc94", 0x1c}, {&(0x7f0000000380)="f342a06a454d871ce6b419b1d44bd49bb08ec89e21871ff7320b170bb1418bc667fe44abb852b6d1f94871d90821e49134cf53e53f6113215f36086c6b3445aeb67089b62359d9a14b38acc9f844679e839332179b1af2d957bfa4cd17c6482d814e01b743a83ec2b4aab6ed55e2549be088d6e5dd4c1721b81d41a42faabc1fd0974112fe4ebaa737a1dcf24211519b451237d8df2dbe1eb3c7e8895134d6a710022b7e26d08521d9aa40f20b0048fd5a45145e8430b650a4a5354cc5c86cb52da38a3f8b5089a8031c5ff26a65857fbedab7d84a37703abf94e7c8c4b5af15617298df2f8826e1ed8d838aa92218", 0xef}, {&(0x7f0000000480)="c31c0ed95948c49601930d31be3ba82a0c6d027673a3d967f29881d64bb55f493b6e108609587e1c4a9ed8b596cf1be500f938666bdfc33ee6f5748c5ea069c973758d3abb1ad7f0cf3888ff69c9c168f6a789ca2537fe3b892999f6d9305474cf2ff46c948c0c7b936132610e39beef1cb5e877c0a7a8d8216048abd916bc76ed256d81fee4d4e8bffc323e3674131d0c2668f94df7f8f992cd8743a4be6e045383c6d9ef4691bee01d2598eb6c03747f78", 0xb2}], 0x5) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0}) sendmmsg$inet6(r10, &(0x7f0000007180)=[{{&(0x7f00000005c0)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x996}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000000900)="e9b78d85873616417f478ecd5c4837bd6412626637c800f9651a038b8163ce73824ca36c60285ca50bc9126ae5372eb1c0b4c25adc4aaad270bda1c521e365114c46aee69714a260c7ef3f8466fb99ae04782a24", 0x54}, {&(0x7f0000000980)="d75e8aff2f09b4d11f29b1ddb3515ca24f501d5ddd62e9c9669feaffea2d990925d36a04b70005fa044e189fa6377cb6c210e46312d848d25234dff28b2a9ffaecd20440897320909f2c3182e1f2c7e6c5a6ec3a6abeac932ae064a31d904606f78258bdf6f52f7f7d6bc86fd7bf9385fa1f2d998cda84a6588724d8", 0x7c}, {&(0x7f0000000600)="e71f466f7298b31f322e5c9ed77d8678e9dbd657a331070555981f4ec0de95771efbc6cfa778a05ff5004f5abf37346d0a", 0x31}, {&(0x7f0000000a00)="8d6a91dcc0b99b815e3edbb4effe4e6b5a871fb079c08f30c80dbc60308fb7ab6de45bc39dccef4f32864ae15c69c5aa4810b6122331b8804c0a6954b3176a79cb1b1796fa131d3470bfcb424b8510b8cb813ec51276936c5347f3e450d02b1424ee10251c28d1473028b96cb5d0795b743ba0e966b1b70614e80786e60bdbb761d195780d5b1939022a4bfb01c43a4746383f0d772cb0cd6a3bd317c770a8384b85f42d58bfd0ed7cbee8ca0cf3ccd9f0e7aeb14166d326b504ec49d588738d14a67610f0757e64f25411872394d5de7d46e0da556beb64ecd29b904b8b9c648e5776780f68ab7d844b157be5615b29dd1d7fc7768789", 0xf7}, {&(0x7f0000000b00)="d9d3c556341d4146813ad3c030e79f2cb87e0db71a1a62f9024aea6202fcdcea8b1ecffea913e0bfa69f250ea4546e0809bd20a4d1f3a0f72b4996e4457ba54b54789c64d491c3fe2de18ab33f029642bdeeb55793f93adf5020ebe4cbabbaf8f6e283cbcd9e8527ca75837788f5d38a0ff4ddb6eb2ea0a651de989e7474b390511612c09a8cc55a72cf9b27657961f133b25956c87c7c82b5fb8a59a1c81f993eed5bc8b47acbad33d8bc7ca4daf277f14fef26faa868543ac64c8271ada0cd1b8a1a5c1029b652d07718e051d211e29df66ea8f2774515ab70143f8d1e0a29d1c84a337839f0", 0xe7}], 0x6}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x52}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000007340)="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", 0x1000}, {&(0x7f0000000dc0)="8565563c3729cfe766bb186883014a5f5449da8eb8cc2e798f485525d28d847abf722f6307dfdd58b518c32e3a062556db61e32fd0c6e82916ec47421fef0d653e7e414c0a79c57da23195a202683dd6c4988a47677636a27bf5d0e6e3d14e0a62fb8817d4148dd673ac922066fed97afb73220bee4179ff31c7e7706554f420da91a46f73086b40faec330f89caa78075c28b9f31e312c1ad2bf249be7f5a55b11a6715a673db82421475b37be38ae516e7cd44fd52da67", 0xb8}, {&(0x7f0000000cc0)="12f256ec2da9582ddfca48aff114367600b83e88a0be5ec03d782ce5b4a73d7ea9a27286daf68f1b733d166d1cab93dfd9ce81ad7bd1f480f298f6fc7425a7fd80e1b53205593bc3737362337b0a645d22e1da0eff3acab0c83f3a4e2164cbbc10d9866529e995ace5e0d2362726a4d8433612a750038feb408494625812fb69efaa88eea7fbfe72ad7fd76be29c7b6d950054a8b284cb46e7c9c3d094989319b00ea88e1288ebdb8a726c807ffb0972464f4fe8f722e65c42201a3a1f96787a56ee1ec9a1d65a3ad0", 0xc9}, {&(0x7f0000000ec0)="760e1154692fe1c95cf8493f563ff442b9fb3f5dbd0b73e8b40494da53480a7ecd5f553f0a05a7c57ff6bdd845bb8232db39f80b48dbc5e85712f563927c3227704c91f5207de0d725d75f8f494957", 0x4f}, {&(0x7f0000000e80)="4c0ce5558802503e4400d3ef03", 0xd}], 0x5, &(0x7f0000004280)=[@dstopts_2292={{0x0, 0x29, 0x4, {0x2, 0x0, '\x00', [@hao={0xc9, 0x0, @local}, @pad1, @generic={0x1, 0x0, "a8dea63c74359790719176f47d09dbaef1d250ab69c965113964c121d59ced028f39d68ad38342f916ba4f6855aefbbca4010883937fffab61a82e0b4574e5f2"}]}}}, @dontfrag={{0x14}}], 0x30}}, {{&(0x7f0000001000)={0xa, 0x4e24, 0xb5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000005300)=[{&(0x7f0000001040)="2624250bde20355fb22309a801a88ad340a9214bd3fca7302db7d2607d6d66471cb3a9baba911151bda709e606ed", 0x2e}, {&(0x7f0000001080)="ec23312eb0985f5d3ac71df95fca065599595ef0fdc3a12558928c2ad749cadd547d7054dadc4451f72577dbf77fc938", 0x30}, {&(0x7f0000005100)="feac88b443b95608e3cadff09b6b8a343bc417b0e87034dfe1b0b9ab5510abdb58fd475468295a5f3e2daba4bae846400ecb2f3720088ba15d6f516386074068d9eb20cd1e0a90d19cbda37438a37358c089c199e112a705ebe99eb5dc92bf618aba8dbd99646587862fedd2ea01b7410471543ed4fec83db753132ecb072fba8e9c2290e60fe80a77dc34dd45a5967165ce6227d5506120bab0d4807b70f117d33a53b81685fd3657651c1730fb912fab048b73cde8a1022f85476056914d37c6f5dfef6cb4a05c743cb8c6742484b60064f31972a93df385d9bd16d3b892b9dd2c6ba3", 0xe4}, {&(0x7f0000005200)="94e65aa66b41dccaacad72d9741887b5a599f73c359266f00b5a489c3023d8fb9a2a986bf97dd786fafa8f086555fd4faabba144764f3ac8d21b3c78679c5fb57999b0be12f815c42a16ee308d8efd5b2679f70a6bff7d384df9924fe9f6d41b5c179a2c0f955153d9d9c929fa7ed0cf719812f039735ad2b57ec58ac2fc3b4d70f8561eda7093372fd11756844edc831635caea7cfb9d3bcff92490d954b2433fde993c68b3b161eb5dbc1861b09e99fcb64f6c701af3ca02d62f072e022d9ad43fd050b56c07cb0a49efd1e20e3692f83af3211166e6f62540337493c4d259e347f54c4472cd3841", 0xe9}], 0x4, &(0x7f0000005340)=[@dstopts={{0x110, 0x29, 0x37, {0x3b, 0x1e, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0xeb, 0x7, [0xfffffffffffffffb, 0x3, 0xe, 0x6cf0bd77]}}, @pad1, @ra={0x5, 0x2, 0x5}, @generic={0xce, 0x92, "408b0ce1c60d5fe45697e4017562726cf682b49cd5a1637caed864b713ac5174b428da9055e6218986fec3c2e7c07ded8d27d6d7a0e01c4cf754966464ad2b355185627e6cb3d5d8b33b78038ba5fd8f0d7996757232311a2e20b10174ea1b6f902c196cbfaea83bc143e16fa46442dd4a9a285bb0e1e053a1af2ffdc270f4193bd77d8a376c406f35ba5ac4a5138d4c8a8b"}, @generic={0x6, 0x2d, "472c6855c4d6ad6b4674bd182827c50c121e28fb96957148928d0f11365a23184ba188c6dde2b363a6d3273f4a"}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffff}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x62, 0x8, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @loopback}, @pad1]}}}, @dstopts={{0x18, 0x29, 0x37, {0x32}}}], 0x198}}, {{&(0x7f0000005500)={0xa, 0x4e24, 0xd9e, @mcast1, 0xa}, 0x1c, &(0x7f0000005840)=[{&(0x7f0000005540)="92a57e25546f4b526a3055fbd42ef52b4922ee57b2338bf863087fcff9f076fe2127024ea9dc9bc7237d3bf8544db18848d5c406fb79dcb6778fbf90e13c332630e18ec8d46a037f94557fee52c66dd0aa4af2fd11d1e8aab4dfdec4fa89af46857f5da7fbbc09cfb5b94d4c6f229d90d7dde9115285fd3c6a3bdb3e9314c3cdf304007708073bb10848aa9438ffe643cb4f155ac4248e1a2adddcb8f6c07e5b3a6d1a5bfc47c98af3e312a4c0a94eed2120276ec6fad5cceeab73c3d6c9ad8de582f643630140d0de8eb749de4e60dee398d4e5ee2c606834bdcff6a8", 0xdd}, {&(0x7f0000005640)="58bd27e42de4786075beb3a09e9fbe45d6c721ec1a70ce1c6b5488d9f7ee476dab9a367edc0146f7f793cab19eefb0303157cff35828a218bf25f284a8cb2810dab0bb4fc1b6a6b66a83914b5e5fd81fcc03f88ee6cb0c53144848b8d709ff7490494d8eeef1b255be0970473d08cf74b13cc354d6334f5a177957f551c43264535ee7c79f754e96831997f2714cfe636f600fb38d1d4690cd797b340dec0f2bb8adb48af26ed2f490", 0xa9}, {&(0x7f0000005700)="ecbf4a155356836c2bdddfefec804b3539358ef4bd61c5878df53fbd3bdcde50a312300e8853d9d909a4838bcdd452b709038798884a7cd850a64e767c1ea936", 0x40}, {&(0x7f0000005740)="e864620c2dafa371768a38535c5d6c9aeb6a7b61bd25995ee6261244fc3dd4aec06d2e6a922ba1a291889d83bfb3bcc8badc6c39697ea780e053c677a02599770e4b8d4d9925b0298541d05725477bfb1afde744ceb9ec1e8f970060302447daf666dccf6a3529f17147f9bb4a137ff56ccc2459960420ef6b8fa9cd69c703f4772e773b320c77445f0a7f61c5f36fe56119306217c42185b98a6c742b2346f07b8641b69afb2a6db19f02e890e2e84b1f8a71aeb89029e46a0e0971d082be7557007cb3af03ce2549845091817d1fe57af7e21e57d62f5c73446c6f9dfca606393eaf", 0xe3}], 0x4, &(0x7f0000004100)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x5e, 0xd, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x48, {0x1, 0x10, 0x5, 0xfff, [0x595f, 0x9, 0x6, 0x6, 0x9, 0x80000001, 0x2, 0x21a0]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0xfff, [0x6]}}]}}}, @hopopts_2292={{0xb8, 0x29, 0x36, {0x52, 0x13, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x400}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x7ff, [0xd, 0xe, 0xfe, 0x400, 0x3ff, 0x0, 0x7, 0x6]}}, @hao={0xc9, 0x0, @private0}, @calipso={0x7, 0x30, {0x0, 0xa, 0xfc, 0x2, [0x80000000, 0xd, 0x4, 0x5ad0, 0x5]}}, @jumbo={0xc2, 0x4, 0xff}]}}}], 0x140}}, {{&(0x7f00000059c0)={0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000006ac0)=[{&(0x7f0000005a00)="f2dda441b1bf502eaee8d24b0b2afc4e3d2f4173ba519848fc950cec2d70d106f214da42fa0a6a06c1eb376dc8ff08621c2171ee65a2526e4dedcbb93c0761930b5c80fa6ac7524a47f099323456dc2aa6b2caf08d35febc184dbb8abe9e7080540cdc0b40675677a20e93c45a148ef2cc59007a64926334dd24505e611e20ed9ef13f1203b3ba4c", 0x88}, {&(0x7f0000005ac0)="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", 0x1000}], 0x2, &(0x7f0000006b00)}}, {{&(0x7f0000006b40)={0xa, 0x4e20, 0x3, @empty, 0x2}, 0x1c, &(0x7f0000006b80), 0x0, &(0x7f0000006bc0)=[@rthdrdstopts={{0x130, 0x29, 0x37, {0x1, 0x22, '\x00', [@ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0xfffff231}, @enc_lim={0x4, 0x1, 0x20}, @generic={0x4, 0x91, "dcbd5ee293f1782370148b0d92004f6dac8dd689a88230b77fdbd8a4df35bcdbc7d029c8e7f47514ea3245d0f7235ded7174f5910c38cbe3cac8e4b82a81ee1b9f69cac7db36f25e21c02a116bb77c7f01352f86ad9abe2c94c798f09a96ea171b1bc87b637aa121d7eb40e41a5bebe09c54685ab0d1bc6277083bd9426ce8df35f6058e73d999b7e85001f779b1c1c97d"}, @jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x58, {0x1, 0x14, 0x9, 0x10, [0x70c, 0x4, 0x7, 0xc, 0xfffffffffffffff8, 0x0, 0x0, 0x7, 0x400, 0xcae]}}]}}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x1d, 0x21, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x0, 0xf8, "1d8722decd8ba3edb3cc42f572bcabf6838210415e2116cf9da456aec87a4a98e0989a60a2f4c3c6230a470d6acfd784487ec4e090f2b821c222244b04d9e6ca53875e81d1829a1812a2cf29d1091efc78e88d7d4f9c137ad46b209f41a3f35db8fba437ec1fed8664312a1c91a14a294da87959f1b9244851ae768df96c1305a357fb304952bbd02635ad68c712209de71d72fb365d049349ff637b67136180d7caf2936b122a9e5d9474f5e2448c4f49487e17be9c2ff6f30cd514479435893a41877049459c7da0a350820d95a964d832cb7c23f00c6db0d897af9cdeb36820e2d91b3ba1dd33758264908bb5bca3867d6473acaaf228"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x81}}], 0x288}}, {{&(0x7f0000006e80)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000007100)=[{&(0x7f0000006ec0)}, {&(0x7f0000006f00)="25ca5fb260b4cf4ded3c102dd448a1ece298553b3e968dfd40f110ec539f478c3567dc6f3d030107432e552274b9b066bc53fb098f39515e73bdf1d78c0599d947c460dd029239cf594bcb8e7e8db317e9efc534701bb7e7d13f8fb21838300a14f128de6bb8137a4e5abd66f30dfaa1428b50f2ba5cde1a54c1c1cb9880e32ee9184b98141c0d494478645b4e5c0468c9db879caff6e31a6577a0005cd4173a91debc2218cea7ed31ed6cbe97ddc469eaabb6f1c0009128c5e22cd1b2d2d55332665cf4771044ead1fa6c4f735968d9e1b58c221204ccb1cd3f4810be03", 0xe9}, {&(0x7f0000007000)="931ca94c0dfa5d4ae87eed14c0b7ede5ce30b9986f2c84a2a6226eff9893e07b370b766d7e9079174e543dd39d93248e4df208d6cf54b04b6a9a6ff3e37319cf7d2b228e1b7b182d3dfddfa9a70520c3c6becdc06b3affe144532ab02957a9844476dad71add3e113fffe74a48b1905dcad5a23b24a8086dfea17957f8d74cf8818926d664df7d0bdc869c1de80fb55392b6086e5e70343c717e086accf4c5f5caead1c43cf7f62cf790ea9da29edfa7d1a5c8e7b130881daf99039df14f6121c580bf89cee3697e96a2bd91fe1e418839571614d1f2ef3edf64fab804f0ca0c42a6e63a13bc624efa909498c5", 0xed}], 0x3, &(0x7f0000007140)=[@hopopts={{0x18, 0x29, 0x36, {0x73}}}], 0x18}}], 0x7, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x9}, {0x10, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x5725}]}, 0x2c}}, 0x4000) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x0) 0s ago: executing program 3 (id=1761): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}], {0x95, 0x0, 0x0, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0xfffffffff, 0xa2c65) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): rval 0, changing to 7 [ 77.371021][ T1346] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.374811][ T1346] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.378381][ T1346] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.382753][ T1346] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.385889][ T1346] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 77.388611][ T1346] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 77.392040][ T1346] usb 7-1: config 0 interface 0 has no altsetting 0 [ 77.395681][ T1346] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 77.399099][ T1346] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 77.402069][ T1346] usb 7-1: Product: syz [ 77.403429][ T1346] usb 7-1: Manufacturer: syz [ 77.404959][ T1346] usb 7-1: SerialNumber: syz [ 77.407607][ T1346] usb 7-1: config 0 descriptor?? [ 77.413056][ T1346] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 77.611222][ T7325] CUSE: unknown device info "" [ 77.612100][ T6018] usb 7-1: USB disconnect, device number 3 [ 77.613253][ T7325] CUSE: zero length info key specified [ 77.618878][ T6018] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 77.788336][ T7339] __nla_validate_parse: 9 callbacks suppressed [ 77.788347][ T7339] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.419'. [ 78.332440][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 78.332451][ T40] audit: type=1400 audit(1761326412.586:596): avc: denied { create } for pid=7374 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 78.343020][ T40] audit: type=1400 audit(1761326412.596:597): avc: denied { sys_admin } for pid=7374 comm="syz.1.431" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 78.375748][ T7383] ptrace attach of "/syz-executor exec"[5939] was attempted by ""[7383] [ 78.431851][ T7393] Unknown options in mask 22 [ 78.473637][ T40] audit: type=1400 audit(1761326412.726:598): avc: denied { accept } for pid=7396 comm="syz.1.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.475530][ T7397] Bluetooth: MGMT ver 1.23 [ 78.652394][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 78.655327][ T7408] IPVS: Error connecting to the multicast addr [ 78.686137][ T40] audit: type=1400 audit(1761326412.936:599): avc: denied { ioctl } for pid=7409 comm="syz.3.443" path="socket:[20648]" dev="sockfs" ino=20648 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.819847][ T40] audit: type=1400 audit(1761326413.066:600): avc: denied { write } for pid=7418 comm="syz.3.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.843796][ T7419] netlink: 1 bytes leftover after parsing attributes in process `syz.3.447'. [ 79.050131][ T40] audit: type=1400 audit(1761326413.296:601): avc: denied { mount } for pid=7433 comm="syz.3.453" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 79.062287][ T7439] loop5: detected capacity change from 0 to 7 [ 79.080261][ T2018] usb 40-1: device descriptor read/8, error -110 [ 79.117342][ T1098] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.120691][ T1098] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.124585][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.127708][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.131081][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.133898][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.136458][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.140945][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.143414][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.146143][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.148630][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.151547][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.154879][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.157779][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.160516][ T7439] ldm_validate_partition_table(): Disk read failed. [ 79.162615][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.165317][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.167736][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.170476][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.172945][ T7439] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.175736][ T7439] Buffer I/O error on dev loop5, logical block 0, async page read [ 79.178239][ T7439] Dev loop5: unable to read RDB block 0 [ 79.180163][ T7439] loop5: unable to read partition table [ 79.181974][ T7439] loop5: partition table beyond EOD, truncated [ 79.183867][ T7439] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 79.223196][ T40] audit: type=1400 audit(1761326413.476:602): avc: denied { connect } for pid=7454 comm="syz.1.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.237011][ T40] audit: type=1400 audit(1761326413.476:603): avc: denied { write } for pid=7454 comm="syz.1.459" path="socket:[20063]" dev="sockfs" ino=20063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.261263][ T40] audit: type=1400 audit(1761326413.506:604): avc: denied { write } for pid=7462 comm="syz.0.460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.276296][ T40] audit: type=1400 audit(1761326413.526:605): avc: denied { create } for pid=7457 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.324711][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 79.327408][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 79.332724][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 79.335373][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 79.376454][ T7480] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 79.398775][ T7480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.447547][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 79.471697][ T2018] usb usb40-port1: attempt power cycle [ 79.546319][ T7501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7501 comm=syz.1.470 [ 79.551164][ T7501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7501 comm=syz.1.470 [ 79.554970][ T7501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7501 comm=syz.1.470 [ 79.562572][ T7501] bridge2: entered promiscuous mode [ 79.569349][ T7501] bridge2: entered allmulticast mode [ 79.577419][ T7493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 79.627511][ T7514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 79.641961][ T5943] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 79.644725][ T5943] Bluetooth: hci2: Injecting HCI hardware error event [ 79.647912][ T5943] Bluetooth: hci2: hardware error 0x00 [ 79.791682][ T7540] Cannot find add_set index 1 as target [ 79.847509][ T7543] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 79.861575][ C3] vcan0: j1939_session_tx_dat: 0xffff888026287c00: queue data error: -100 [ 80.031004][ T2018] usb usb40-port1: unable to enumerate USB device [ 80.287213][ T7583] bond3: Removing last arp target with arp_interval on [ 80.349596][ T7593] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 80.365576][ T7593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.369425][ T7583] geneve1: entered allmulticast mode [ 80.385556][ T7593] bond1: (slave ip6erspan0): making interface the new active one [ 80.389079][ T7593] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 80.397014][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 81.331201][ T34] cfg80211: failed to load regulatory.db [ 81.691134][ T7713] Malformed UNC in devname [ 81.691134][ T7713] [ 81.693882][ T7713] CIFS: VFS: Malformed UNC in devname [ 81.731529][ T5943] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 82.070147][ T5999] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.220180][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.230233][ T5999] usb 7-1: Using ep0 maxpacket: 8 [ 82.233308][ T5999] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 82.233347][ T5999] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.233410][ T5999] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.233437][ T5999] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 82.233455][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.243602][ T5999] usb 7-1: config 0 descriptor?? [ 82.263585][ T5999] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 82.416018][ T7769] overlayfs: empty lowerdir [ 82.643333][ T7789] macvlan2: entered allmulticast mode [ 82.645067][ T7789] veth1_vlan: entered allmulticast mode [ 83.054995][ T7820] netlink: 'syz.0.551': attribute type 2 has an invalid length. [ 83.058178][ T7820] __nla_validate_parse: 19 callbacks suppressed [ 83.058190][ T7820] netlink: 68 bytes leftover after parsing attributes in process `syz.0.551'. [ 83.544034][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 83.550868][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 83.550879][ T40] audit: type=1400 audit(1761326673.808:620): avc: denied { ioctl } for pid=7839 comm="syz.1.556" path="socket:[23576]" dev="sockfs" ino=23576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 83.608355][ T7844] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 83.649131][ T7844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.653582][ T7844] bond1: (slave bond2): making interface the new active one [ 83.656988][ T7844] bond1: (slave bond2): Enslaving as an active interface with an up link [ 83.663722][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.558'. [ 83.668159][ T7844] bond1: entered promiscuous mode [ 83.670510][ T7844] bond2: entered promiscuous mode [ 83.672802][ T7844] bond1: entered allmulticast mode [ 83.674944][ T7844] bond2: entered allmulticast mode [ 83.678430][ T7844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.817961][ T7862] overlayfs: failed to clone upperpath [ 83.890386][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 83.900655][ T7866] 0ªî{X¹¦: entered promiscuous mode [ 83.963440][ T7874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.567'. [ 84.046684][ T7889] tmpfs: Cannot enable quota on remount [ 84.113273][ T7896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 84.116859][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.573'. [ 84.124936][ T7896] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 84.130308][ T7897] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 84.143469][ T7896] bond3: (slave geneve2): making interface the new active one [ 84.146802][ T7896] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 84.150165][ T61] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.154082][ T61] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.157871][ T61] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.161710][ T61] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 84.293771][ T7907] netlink: 'syz.3.577': attribute type 30 has an invalid length. [ 84.439652][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'. [ 84.681818][ T7932] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 84.685930][ T7932] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.904467][ T40] audit: type=1400 audit(1761326675.158:621): avc: denied { module_request } for pid=7937 comm="syz.1.586" kmod="net-pf-10-proto-256-type-10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.915705][ T53] usb 7-1: USB disconnect, device number 4 [ 84.989177][ T7953] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 85.003463][ T40] audit: type=1400 audit(1761326675.258:622): avc: denied { remount } for pid=7943 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.080721][ T7961] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 85.083255][ T7961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.086821][ T40] audit: type=1400 audit(1761326675.338:623): avc: denied { read write } for pid=7950 comm="syz.1.591" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.087000][ T7961] random: crng reseeded on system resumption [ 85.095894][ T40] audit: type=1400 audit(1761326675.338:624): avc: denied { ioctl open } for pid=7950 comm="syz.1.591" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 85.111989][ T7961] batadv_slave_1: entered promiscuous mode [ 85.112998][ T40] audit: type=1400 audit(1761326675.368:625): avc: denied { accept } for pid=7946 comm="syz.0.589" lport=35528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.205397][ T7978] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 85.226047][ T7980] netlink: 'syz.2.597': attribute type 18 has an invalid length. [ 85.229394][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 85.235265][ T7980] netlink: 'syz.2.597': attribute type 18 has an invalid length. [ 85.238220][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 85.310271][ T40] audit: type=1400 audit(1761326675.558:626): avc: denied { mounton } for pid=7982 comm="syz.1.598" path="/147/file0" dev="9p" ino=71827623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.318174][ T40] audit: type=1400 audit(1761326675.568:627): avc: denied { getattr } for pid=7982 comm="syz.1.598" name="/" dev="9p" ino=71827623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.350967][ T1127] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 85.355092][ T1127] sr 2:0:0:0: [sr0] tag#15 Sense Key : Illegal Request [current] [ 85.358681][ T1127] sr 2:0:0:0: [sr0] tag#15 Add. Sense: Invalid command operation code [ 85.362735][ T1127] sr 2:0:0:0: [sr0] tag#15 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 85.367087][ T1127] blk_print_req_error: 5 callbacks suppressed [ 85.367101][ T1127] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 85.374010][ T1127] buffer_io_error: 5 callbacks suppressed [ 85.374022][ T1127] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 85.507134][ T40] audit: type=1400 audit(1761326675.758:628): avc: denied { getopt } for pid=7992 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.839505][ T40] audit: type=1400 audit(1761326676.088:629): avc: denied { connect } for pid=8034 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.421592][ T8067] ufs: You didn't specify the type of your ufs filesystem [ 86.421592][ T8067] [ 86.421592][ T8067] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 86.421592][ T8067] [ 86.421592][ T8067] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 86.434211][ T8067] ufs: ufstype=old is supported read-only [ 86.451369][ T8069] bond4 (unregistering): Released all slaves [ 86.835826][ T8084] syz.3.628 (8084) used greatest stack depth: 19544 bytes left [ 87.224623][ T8114] could not allocate digest TFM handle cryptd(blake2b-160) [ 87.312933][ T8136] tmpfs: Unknown parameter 'grpquta_inode_hardlimit' [ 88.285730][ T8170] fuse: Unknown parameter 'ü~0x0000000000000003' [ 88.308228][ T8172] __nla_validate_parse: 4 callbacks suppressed [ 88.308244][ T8172] netlink: 56 bytes leftover after parsing attributes in process `syz.0.653'. [ 88.502085][ T8189] ip6erspan0: entered promiscuous mode [ 88.854589][ T8199] GUP no longer grows the stack in syz.1.662 (8199): 200000007000-20000000a000 (200000006000) [ 88.858703][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.1.662 Not tainted syzkaller #0 PREEMPT(full) [ 88.858727][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.858738][ T8199] Call Trace: [ 88.858759][ T8199] [ 88.858766][ T8199] dump_stack_lvl+0x16c/0x1f0 [ 88.858812][ T8199] gup_vma_lookup+0x1d2/0x220 [ 88.858835][ T8199] __get_user_pages+0x241/0x3530 [ 88.858858][ T8199] ? unwind_get_return_address+0x59/0xa0 [ 88.858886][ T8199] ? down_read_killable+0x220/0x4b0 [ 88.858905][ T8199] ? __lock_acquire+0x622/0x1c90 [ 88.858934][ T8199] ? __pfx___get_user_pages+0x10/0x10 [ 88.858958][ T8199] ? __lock_acquire+0x622/0x1c90 [ 88.858989][ T8199] __gup_longterm_locked+0xa92/0x17e0 [ 88.859020][ T8199] ? __pfx___gup_longterm_locked+0x10/0x10 [ 88.859043][ T8199] ? try_get_folio+0x255/0x730 [ 88.859061][ T8199] ? find_held_lock+0x2b/0x80 [ 88.859090][ T8199] gup_fast_fallback+0xee2/0x22a0 [ 88.859132][ T8199] ? __pfx_gup_fast_fallback+0x10/0x10 [ 88.859154][ T8199] ? get_page_from_freelist+0x1c7f/0x3a30 [ 88.859216][ T8199] get_user_pages_fast+0xa7/0xf0 [ 88.859241][ T8199] ? __pfx_get_user_pages_fast+0x10/0x10 [ 88.859262][ T8199] ? rcu_is_watching+0x12/0xc0 [ 88.859287][ T8199] ? trace_mm_page_alloc+0x11f/0x1a0 [ 88.859312][ T8199] __iov_iter_get_pages_alloc+0x818/0x20a0 [ 88.859349][ T8199] ? __pfx_stack_trace_save+0x10/0x10 [ 88.859382][ T8199] ? stack_depot_save_flags+0x29/0x9c0 [ 88.859406][ T8199] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 88.859429][ T8199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.859455][ T8199] ? kasan_save_stack+0x33/0x60 [ 88.859471][ T8199] ? kasan_save_track+0x14/0x30 [ 88.859487][ T8199] ? __kasan_kmalloc+0xaa/0xb0 [ 88.859502][ T8199] ? __kmalloc_noprof+0x32f/0x880 [ 88.859524][ T8199] ? tls_get_rec+0xfa/0x730 [ 88.859549][ T8199] ? tls_sw_sendmsg+0x106b/0x25f0 [ 88.859572][ T8199] ? inet6_sendmsg+0x11c/0x140 [ 88.859603][ T8199] iov_iter_get_pages2+0xa3/0x100 [ 88.859625][ T8199] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 88.859649][ T8199] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 88.859676][ T8199] sk_msg_zerocopy_from_iter+0x200/0x7b0 [ 88.859699][ T8199] ? alloc_pages_mpol+0x25a/0x550 [ 88.859729][ T8199] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 88.859749][ T8199] ? alloc_pages_noprof+0x23c/0x390 [ 88.859779][ T8199] ? sk_msg_alloc+0x65b/0x920 [ 88.859809][ T8199] tls_sw_sendmsg+0x876/0x25f0 [ 88.859844][ T8199] ? avc_has_perm_noaudit+0x3a1/0x3b0 [ 88.859871][ T8199] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 88.859897][ T8199] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 88.859924][ T8199] ? selinux_ip_forward+0x517/0x550 [ 88.859953][ T8199] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 88.859985][ T8199] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 88.860011][ T8199] inet6_sendmsg+0x11c/0x140 [ 88.860037][ T8199] sock_write_iter+0x437/0x610 [ 88.860080][ T8199] ? __pfx_sock_write_iter+0x10/0x10 [ 88.860117][ T8199] ? __pfx_file_has_perm+0x10/0x10 [ 88.860145][ T8199] do_iter_readv_writev+0x662/0x9e0 [ 88.860173][ T8199] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 88.860199][ T8199] ? selinux_file_permission+0x126/0x660 [ 88.860219][ T8199] ? bpf_lsm_file_permission+0x9/0x10 [ 88.860235][ T8199] ? security_file_permission+0x71/0x210 [ 88.860255][ T8199] ? rw_verify_area+0xcf/0x6c0 [ 88.860282][ T8199] vfs_writev+0x35f/0xde0 [ 88.860314][ T8199] ? __pfx_vfs_writev+0x10/0x10 [ 88.860341][ T8199] ? __get_user_nocheck_8+0x20/0x20 [ 88.860384][ T8199] ? __fget_files+0x20e/0x3c0 [ 88.860410][ T8199] ? do_writev+0x28c/0x340 [ 88.860436][ T8199] do_writev+0x28c/0x340 [ 88.860463][ T8199] ? __pfx_do_writev+0x10/0x10 [ 88.860489][ T8199] ? fput+0x9b/0xd0 [ 88.860514][ T8199] do_syscall_64+0xcd/0xfa0 [ 88.860541][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.860559][ T8199] RIP: 0033:0x7f2433d8efc9 [ 88.860574][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.860590][ T8199] RSP: 002b:00007f2431fee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 88.860608][ T8199] RAX: ffffffffffffffda RBX: 00007f2433fe5fa0 RCX: 00007f2433d8efc9 [ 88.860620][ T8199] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 88.860630][ T8199] RBP: 00007f2433e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 88.860640][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.860650][ T8199] R13: 00007f2433fe6038 R14: 00007f2433fe5fa0 R15: 00007ffe5bf989e8 [ 88.860675][ T8199] [ 89.161998][ T34] hid-generic 0008:478A:0000.0006: unknown main item tag 0x2 [ 89.164545][ T34] hid-generic 0008:478A:0000.0006: reserved main item tag 0xd [ 89.166972][ T34] hid-generic 0008:478A:0000.0006: ignoring exceeding usage max [ 89.169822][ T34] hid-generic 0008:478A:0000.0006: item fetching failed at offset 27/141 [ 89.174939][ T8218] syz.3.666 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 89.174953][ T34] hid-generic 0008:478A:0000.0006: probe with driver hid-generic failed with error -22 [ 89.252432][ T8222] netlink: 116 bytes leftover after parsing attributes in process `syz.2.667'. [ 89.255255][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.667'. [ 89.262686][ T8222] tipc: Started in network mode [ 89.264265][ T8222] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.266983][ T8222] tipc: Enabled bearer , priority 10 [ 89.530554][ T1346] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.690236][ T1346] usb 7-1: Using ep0 maxpacket: 32 [ 89.694093][ T1346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.698610][ T1346] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.702661][ T1346] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.705561][ T1346] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.710880][ T1346] usb 7-1: config 0 descriptor?? [ 89.714897][ T1346] hub 7-1:0.0: USB hub found [ 89.777235][ T8235] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 89.892011][ T8237] netlink: 'syz.1.672': attribute type 1 has an invalid length. [ 89.906925][ T8237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.925224][ T1346] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 89.929924][ T1346] usbhid 7-1:0.0: can't add hid device: -71 [ 89.931915][ T1346] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 89.937056][ T8237] veth3: entered promiscuous mode [ 89.943425][ T8237] bond1: (slave veth3): Enslaving as an active interface with a down link [ 89.951141][ T1346] usb 7-1: USB disconnect, device number 5 [ 89.952204][ T8237] vlan3: entered allmulticast mode [ 89.954921][ T8237] bond1: entered allmulticast mode [ 89.957249][ T8237] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 90.123618][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 90.123631][ T40] audit: type=1400 audit(1761326680.378:639): avc: denied { execute } for pid=8244 comm="syz.3.674" path="/file1" dev="ramfs" ino=26837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 90.139054][ T40] audit: type=1326 audit(1761326680.388:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8244 comm="syz.3.674" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8158efc9 code=0x0 [ 90.217341][ T8253] overlayfs: failed to clone upperpath [ 90.234016][ T40] audit: type=1400 audit(1761326680.488:641): avc: denied { read } for pid=8254 comm="syz.1.678" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.242603][ T40] audit: type=1400 audit(1761326680.488:642): avc: denied { open } for pid=8254 comm="syz.1.678" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.262910][ T40] audit: type=1400 audit(1761326680.518:643): avc: denied { ioctl } for pid=8254 comm="syz.1.678" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.270964][ T53] tipc: Node number set to 2886997162 [ 90.333234][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 90.367492][ T40] audit: type=1400 audit(1761326680.618:644): avc: denied { ioctl } for pid=8267 comm="syz.3.683" path="socket:[24283]" dev="sockfs" ino=24283 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.391651][ T8276] overlayfs: failed to clone lowerpath [ 90.475364][ T8283] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 90.482170][ T8283] netlink: 64 bytes leftover after parsing attributes in process `syz.3.687'. [ 90.520310][ T8287] vlan2: entered allmulticast mode [ 90.522192][ T8287] bond0: entered allmulticast mode [ 90.524402][ T8287] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 90.548649][ T8285] netlink: 'syz.2.686': attribute type 1 has an invalid length. [ 90.551265][ T8285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.561163][ T8292] xt_limit: Overflow, try lower: 271964/0 [ 90.605145][ T40] audit: type=1400 audit(1761326680.858:645): avc: denied { unmount } for pid=5942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 90.927243][ T40] audit: type=1400 audit(1761326681.178:646): avc: denied { create } for pid=8313 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.933624][ T40] audit: type=1400 audit(1761326681.178:647): avc: denied { ioctl } for pid=8313 comm="syz.2.696" path="socket:[26958]" dev="sockfs" ino=26958 ioctlcmd=0x89ec scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 90.941201][ T40] audit: type=1400 audit(1761326681.178:648): avc: denied { read write } for pid=8313 comm="syz.2.696" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.999715][ T8317] binder: 8316:8317 unknown command 0 [ 91.002697][ T8317] binder: 8316:8317 ioctl c0306201 200000000080 returned -22 [ 91.143119][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 91.276089][ T5943] block nbd0: Receive control failed (result -32) [ 91.368172][ T8336] Bluetooth: MGMT ver 1.23 [ 91.418191][ T8338] 9pnet_virtio: no channels available for device /dev/nullb0 [ 91.503229][ T8340] ip6t_srh: unknown srh invflags 4000 [ 91.505795][ T8340] BIDI support in bsg has been removed. [ 91.769603][ T8365] xt_l2tp: wrong L2TP version: 0 [ 91.896069][ T8370] netlink: 'syz.0.714': attribute type 5 has an invalid length. [ 92.472739][ T8390] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.485942][ T8390] netlink: 9 bytes leftover after parsing attributes in process `syz.0.720'. [ 92.489017][ T8398] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 92.586344][ T8398] bond2: entered promiscuous mode [ 92.588888][ T8398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.665007][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 92.877502][ T8425] netlink: 112 bytes leftover after parsing attributes in process `syz.3.732'. [ 92.960212][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 93.133845][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.138520][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.143254][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.148210][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.151393][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.168293][ T29] usb 6-1: config 0 descriptor?? [ 93.452229][ T8459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8459 comm=syz.3.743 [ 93.565829][ T8478] overlayfs: failed to resolve './file1/file0': -2 [ 93.579544][ T29] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 93.586667][ T29] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 93.694071][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 93.835657][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.838422][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.841268][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.843748][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.844148][ T8505] syzkaller0: entered promiscuous mode [ 93.846092][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.847899][ T8505] syzkaller0: entered allmulticast mode [ 93.850330][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.850346][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.850358][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.850370][ T34] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 93.851576][ T34] hid-generic 0000:0000:0000.0008: hidraw2: HID v0.03 Device [syz1] on syz1 [ 93.869726][ T34] usb 6-1: USB disconnect, device number 6 [ 93.940264][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.100151][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 94.103226][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.106965][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.110948][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 94.116402][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 94.121801][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.127274][ T9] usb 5-1: config 0 descriptor?? [ 94.497503][ T8513] /dev/nullb0: Can't open blockdev [ 94.500633][ T8512] /dev/nullb0: Can't open blockdev [ 94.557940][ T8517] netlink: 'syz.3.760': attribute type 13 has an invalid length. [ 94.617298][ T8528] fuse: Bad value for 'user_id' [ 94.618938][ T8528] fuse: Bad value for 'user_id' [ 94.756963][ T8549] fuse: Unknown parameter '000000000000000000050x0000000000000004' [ 94.786712][ T8553] mmap: syz.3.773 (8553) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.822834][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 94.824938][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.828466][ T9] usb 5-1: USB disconnect, device number 4 [ 94.916580][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.923555][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.930243][ T5999] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 94.938251][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.943983][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.081773][ T5999] usb 7-1: unable to get BOS descriptor or descriptor too short [ 95.084610][ T5999] usb 7-1: not running at top speed; connect to a high speed hub [ 95.087834][ T5999] usb 7-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.092486][ T5999] usb 7-1: config 1 interface 0 has no altsetting 0 [ 95.096617][ T5999] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.099738][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.102476][ T5999] usb 7-1: Product: syz [ 95.103807][ T5999] usb 7-1: Manufacturer: syz [ 95.105265][ T5999] usb 7-1: SerialNumber: syz [ 95.315488][ T5999] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 95.322524][ T5999] usb 7-1: USB disconnect, device number 6 [ 95.456988][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'. [ 95.486299][ T8582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.498676][ T8582] team0: No ports can be present during mode change [ 95.505544][ T218] tipc: Resetting bearer [ 95.531606][ T8588] xt_hashlimit: size too large, truncated to 1048576 [ 95.657726][ T8599] bridge2: entered promiscuous mode [ 95.659455][ T8599] bridge2: entered allmulticast mode [ 95.711916][ T8605] SELinux: policydb magic number 0x20 does not match expected magic number 0xf97cff8c [ 95.715105][ T8605] SELinux: failed to load policy [ 95.764077][ T8616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.791'. [ 95.797215][ T8618] raw_sendmsg: syz.3.792 forgot to set AF_INET. Fix it! [ 95.857270][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 95.857280][ T40] audit: type=1326 audit(1761326686.108:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.2.794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda678efc9 code=0x7ffc0000 [ 95.860838][ T8630] binder: BINDER_SET_CONTEXT_MGR already set [ 95.866504][ T40] audit: type=1326 audit(1761326686.108:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.2.794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda678efc9 code=0x7ffc0000 [ 95.868569][ T8630] binder: 8629:8630 ioctl 4018620d 2000000000c0 returned -16 [ 95.875574][ T40] audit: type=1326 audit(1761326686.108:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.2.794" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fbda678efc9 code=0x7ffc0000 [ 95.875633][ T40] audit: type=1326 audit(1761326686.108:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.2.794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda678efc9 code=0x7ffc0000 [ 95.875669][ T40] audit: type=1326 audit(1761326686.118:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.2.794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda678efc9 code=0x7ffc0000 [ 95.998833][ T8643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.280808][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 96.430143][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 96.434222][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 96.437121][ T34] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 96.441541][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.446908][ T34] usb 7-1: config 0 descriptor?? [ 96.855014][ T34] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 96.974343][ T40] audit: type=1400 audit(1761326687.228:674): avc: denied { associate } for pid=8674 comm="syz.3.808" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 96.981366][ T40] audit: type=1400 audit(1761326687.228:675): avc: denied { unmount } for pid=8672 comm="syz.3.808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 96.991933][ T40] audit: type=1400 audit(1761326687.248:676): avc: denied { execute } for pid=8675 comm="syz.0.809" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.011791][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 97.015340][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 97.018172][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 97.031463][ T40] audit: type=1400 audit(1761326687.288:677): avc: denied { read write } for pid=8680 comm="syz.0.811" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 97.039277][ T40] audit: type=1400 audit(1761326687.288:678): avc: denied { open } for pid=8680 comm="syz.0.811" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 97.054804][ T8683] fuse: Bad value for 'user_id' [ 97.056382][ T8683] fuse: Bad value for 'user_id' [ 97.058780][ T8683] overlayfs: failed to clone upperpath [ 97.126609][ T8689] netlink: 144 bytes leftover after parsing attributes in process `syz.0.815'. [ 97.143769][ T34] usb 7-1: USB disconnect, device number 7 [ 97.334151][ T8716] qnx6: unable to read the first superblock [ 97.337102][ T8716] qnx6: unable to read the first superblock [ 97.339618][ T8716] qnx6: unable to read the first superblock [ 97.379432][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 97.745012][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'. [ 97.748464][ T8759] netlink: 5 bytes leftover after parsing attributes in process `syz.2.835'. [ 97.776242][ T9] IPVS: starting estimator thread 0... [ 97.857574][ T8770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.880356][ T8763] IPVS: using max 45 ests per chain, 108000 per kthread [ 97.887411][ T8776] 8021q: VLANs not supported on vxcan1 [ 97.898093][ T8778] team_slave_0: mtu less than device minimum [ 98.124950][ T8798] Attempt to restore checkpoint with obsolete wellknown handles [ 98.215097][ T8802] syz.2.850: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 98.388118][ T8812] netlink: 'syz.2.854': attribute type 1 has an invalid length. [ 98.391077][ T8812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.395522][ T8812] fuse: Bad value for 'user_id' [ 98.397484][ T8812] fuse: Bad value for 'user_id' [ 98.610690][ T5943] Bluetooth: hci0: command 0x080f tx timeout [ 98.610840][ T8655] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 99.444209][ T8879] random: crng reseeded on system resumption [ 99.450364][ T8879] __nla_validate_parse: 5 callbacks suppressed [ 99.450372][ T8879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.875'. [ 99.494290][ T8888] vlan0: entered promiscuous mode [ 99.707889][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.884'. [ 99.712267][ T8908] netem: change failed [ 99.794237][ T8910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.797561][ T8910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.802375][ T8910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 99.854612][ T8910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.858200][ T8910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.861604][ T8910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 99.923167][ T8910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.926429][ T8910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.929638][ T8910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 99.950182][ T5999] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 100.006712][ T8910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.010194][ T8910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.013471][ T8910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 100.067404][ T8924] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 100.106540][ T218] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.109247][ T218] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 100.112482][ T218] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.121009][ T218] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.124365][ T218] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 100.125470][ T5999] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.127920][ T218] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.130645][ T5999] usb 7-1: config 0 has no interface number 0 [ 100.133247][ T841] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 100.135322][ T5999] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 100.137850][ T218] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.137868][ T218] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 100.137881][ T218] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.143772][ T1148] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.144479][ T5999] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 100.146784][ T1148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 100.146804][ T1148] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.160708][ T5999] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 100.163420][ T5999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.166983][ T5999] usb 7-1: config 0 descriptor?? [ 100.169060][ T8908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.174483][ T5999] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 100.181808][ T8932] /dev/nullb0: Can't open blockdev [ 100.260150][ T841] usb 6-1: device descriptor read/64, error -71 [ 100.462661][ T5943] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 100.465505][ T5943] Bluetooth: hci0: unexpected event for opcode 0x203e [ 100.467692][ T5943] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 100.520246][ T841] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 100.660130][ T841] usb 6-1: device descriptor read/64, error -71 [ 100.770311][ T841] usb usb6-port1: attempt power cycle [ 101.130169][ T841] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.151571][ T841] usb 6-1: device descriptor read/8, error -71 [ 101.390255][ T841] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 101.410596][ T841] usb 6-1: device descriptor read/8, error -71 [ 101.440181][ T2018] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.530455][ T841] usb usb6-port1: unable to enumerate USB device [ 101.600143][ T2018] usb 5-1: Using ep0 maxpacket: 8 [ 101.603336][ T2018] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 101.606681][ T2018] usb 5-1: config 0 has no interface number 0 [ 101.608983][ T2018] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 101.613485][ T2018] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 101.619267][ T2018] usb 5-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 101.622674][ T2018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.625793][ T2018] usb 5-1: Product: syz [ 101.627417][ T2018] usb 5-1: Manufacturer: syz [ 101.628911][ T2018] usb 5-1: SerialNumber: syz [ 101.632879][ T2018] usb 5-1: config 0 descriptor?? [ 101.837492][ T2018] iowarrior 5-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior1 [ 102.039025][ T841] usb 5-1: USB disconnect, device number 5 [ 102.648143][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 102.648155][ T40] audit: type=1400 audit(1761326692.898:688): avc: denied { write } for pid=8948 comm="syz.0.897" path="/204/file0/bus" dev="9p" ino=71827909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.812082][ T40] audit: type=1400 audit(1761326693.068:689): avc: denied { write } for pid=8950 comm="syz.0.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.836226][ T24] usb 7-1: USB disconnect, device number 8 [ 102.858937][ T8958] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 102.875421][ T40] audit: type=1400 audit(1761326693.128:690): avc: denied { map } for pid=8959 comm="syz.0.901" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 102.883797][ T40] audit: type=1400 audit(1761326693.128:691): avc: denied { execute } for pid=8959 comm="syz.0.901" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 102.889211][ T8962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=8962 comm=syz.2.902 [ 102.920579][ T40] audit: type=1400 audit(1761326693.178:692): avc: denied { setopt } for pid=8965 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 102.959323][ T8972] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 102.973834][ T8972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.996446][ T8972] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 103.006630][ T8972] vlan2: entered allmulticast mode [ 103.008928][ T8972] veth1: entered allmulticast mode [ 103.019506][ T8982] tmpfs: Bad value for 'mpol' [ 103.032155][ T8984] CIFS: Unable to determine destination address [ 103.082609][ T8990] netlink: 'syz.1.913': attribute type 20 has an invalid length. [ 103.199001][ T8996] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.915'. [ 103.216588][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 103.244890][ T9004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.919'. [ 103.251401][ T40] audit: type=1326 audit(1761326693.508:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9002 comm="syz.1.918" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2433d8efc9 code=0x0 [ 103.318289][ T9013] netlink: 104 bytes leftover after parsing attributes in process `syz.3.922'. [ 103.319374][ T40] audit: type=1400 audit(1761326693.568:694): avc: denied { mount } for pid=9012 comm="syz.3.922" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.322020][ T9014] netlink: 104 bytes leftover after parsing attributes in process `syz.3.922'. [ 103.407189][ T9020] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 103.407354][ T9020] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 103.974429][ T9030] delete_channel: no stack [ 104.006387][ T9033] netlink: 68 bytes leftover after parsing attributes in process `syz.0.929'. [ 104.144668][ T40] audit: type=1400 audit(1761326694.398:695): avc: denied { write } for pid=9039 comm="syz.1.931" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.260686][ T34] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 104.421646][ T34] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.424228][ T34] usb 5-1: config 0 has no interface number 0 [ 104.426130][ T34] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.429440][ T34] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 104.432964][ T34] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 104.436474][ T34] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 104.439835][ T34] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 104.443427][ T34] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 104.447402][ T34] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.450638][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.454449][ T34] usb 5-1: config 0 descriptor?? [ 104.457011][ T9033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.459382][ T9033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.463585][ T34] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 104.520903][ T5943] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 104.523699][ T5943] Bluetooth: hci0: Injecting HCI hardware error event [ 104.527569][ T5937] Bluetooth: hci0: hardware error 0x00 [ 104.664861][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.668631][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.752672][ T2018] usb 5-1: USB disconnect, device number 6 [ 104.757878][ T2018] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 104.837025][ T9061] input: syz1 as /devices/virtual/input/input9 [ 105.059617][ T40] audit: type=1400 audit(1761326695.308:696): avc: denied { mounton } for pid=9069 comm="syz.2.940" path="/205/file1" dev="autofs" ino=31764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 105.300764][ T9078] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 105.323627][ T9078] 8021q: adding VLAN 0 to HW filter on device bond4 [ 105.326872][ T9078] bond3: (slave bond4): making interface the new active one [ 105.329367][ T9078] bond3: (slave bond4): Enslaving as an active interface with an up link [ 105.344867][ T9078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.943'. [ 105.350420][ T9078] bond3: entered promiscuous mode [ 105.352068][ T9078] bond4: entered promiscuous mode [ 105.354560][ T9078] bond3: entered allmulticast mode [ 105.356185][ T9078] bond4: entered allmulticast mode [ 105.358476][ T9078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.396584][ T9078] "syz.3.943" (9078) uses obsolete ecb(arc4) skcipher [ 105.396676][ T40] audit: type=1400 audit(1761326695.648:697): avc: denied { connect } for pid=9090 comm="syz.1.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.523236][ T9102] nfs4: Bad value for 'source' [ 105.534291][ T9110] sit0: entered promiscuous mode [ 105.542120][ T9110] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 105.544647][ T9110] netlink: 1 bytes leftover after parsing attributes in process `syz.2.952'. [ 105.578697][ T9116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 105.734363][ T9132] delete_channel: no stack [ 105.791727][ T9138] hugetlbfs: syz.3.963 (9138): Using mlock ulimits for SHM_HUGETLB is obsolete [ 105.862503][ T9137] netlink: 32 bytes leftover after parsing attributes in process `syz.2.964'. [ 105.883162][ T9154] syzkaller1: entered promiscuous mode [ 105.884917][ T9154] syzkaller1: entered allmulticast mode [ 106.085671][ T9168] kvm: pic: non byte write [ 106.093960][ T9168] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 106.246002][ T9174] hugetlbfs: Bad value for 'uid' [ 106.246039][ T9175] hugetlbfs: Bad value for 'uid' [ 106.247625][ T9174] hugetlbfs: Bad value for 'uid' [ 106.250962][ T9175] hugetlbfs: Bad value for 'uid' [ 106.396681][ T9188] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.600147][ T5937] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 106.782558][ T9207] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.859187][ T9216] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 106.861903][ T9216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.990'. [ 107.170144][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 107.245734][ T9230] netlink: 48 bytes leftover after parsing attributes in process `syz.0.996'. [ 107.323058][ T9234] overlayfs: failed to clone lowerpath [ 107.323544][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 107.328643][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.331667][ T24] usb 7-1: Product: syz [ 107.333065][ T24] usb 7-1: Manufacturer: syz [ 107.334574][ T24] usb 7-1: SerialNumber: syz [ 107.388352][ T9240] overlayfs: failed to clone lowerpath [ 107.395317][ T9242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 108.173339][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 108.173352][ T40] audit: type=1800 audit(1761326698.428:709): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1003" name="nullb0" dev="tmpfs" ino=1022 res=0 errno=0 [ 108.196787][ T40] audit: type=1800 audit(1761326698.448:710): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1003" name="nullb0" dev="tmpfs" ino=1022 res=0 errno=0 [ 109.892808][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 109.896625][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 109.900089][ T24] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 109.912244][ T24] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 109.916945][ T24] usb 7-1: USB disconnect, device number 9 [ 109.926013][ C0] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 109.929633][ C0] sr 2:0:0:0: [sr0] tag#2 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 109.934107][ T40] audit: type=1400 audit(1761326700.188:711): avc: denied { read } for pid=9256 comm="syz.2.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.179339][ T9262] netdevsim0: mtu less than device minimum [ 110.203164][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 110.260994][ T9293] SET target dimension over the limit! [ 110.299686][ T9302] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1019'. [ 110.315927][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1020'. [ 110.316592][ T9305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9305 comm=syz.0.1020 [ 110.348180][ T9310] netlink: 'syz.3.1018': attribute type 13 has an invalid length. [ 110.350971][ T9310] netlink: 'syz.3.1018': attribute type 17 has an invalid length. [ 110.355582][ T9310] 0ªî{X¹¦: left allmulticast mode [ 110.384357][ T9310] tipc: Resetting bearer [ 110.387413][ T9310] tipc: Resetting bearer [ 110.392868][ T9310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.497305][ T40] audit: type=1400 audit(1761326700.748:712): avc: denied { watch } for pid=9328 comm="syz.1.1027" path="/234" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 110.504598][ T40] audit: type=1400 audit(1761326700.748:713): avc: denied { watch_sb } for pid=9328 comm="syz.1.1027" path="/234" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.565318][ T9341] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 110.693883][ T40] audit: type=1400 audit(1761326700.948:714): avc: denied { create } for pid=9343 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.702398][ T40] audit: type=1400 audit(1761326700.948:715): avc: denied { write } for pid=9343 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.711232][ T40] audit: type=1400 audit(1761326700.948:716): avc: denied { nlmsg_write } for pid=9343 comm="syz.3.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.727456][ T9352] netlink: 'syz.1.1032': attribute type 10 has an invalid length. [ 110.731330][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.737521][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.742177][ T9352] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 110.804409][ T9359] __nla_validate_parse: 1 callbacks suppressed [ 110.804420][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 110.851985][ T9365] xt_cluster: node mask cannot exceed total number of nodes [ 110.856353][ T40] audit: type=1400 audit(1761326701.108:717): avc: denied { listen } for pid=9368 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.865450][ T40] audit: type=1400 audit(1761326701.118:718): avc: denied { accept } for pid=9368 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.886309][ T9372] /dev/nullb0: Can't open blockdev [ 110.904147][ T9372] /dev/nullb0: Can't open blockdev [ 111.009721][ T9386] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 111.016185][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 111.061471][ T9394] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 111.066415][ T9394] bad cache= option: none [ 111.066415][ T9394] [ 111.068583][ T9394] CIFS: VFS: bad cache= option: none [ 111.073981][ T9394] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 111.078745][ T9394] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 111.232898][ T9403] veth1_macvtap: left promiscuous mode [ 111.235235][ T9403] macsec0: entered promiscuous mode [ 111.281972][ T9405] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 111.284286][ T9405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.287205][ T9405] vhci_hcd vhci_hcd.0: Device attached [ 111.291485][ T9406] vhci_hcd: unknown pdu 2 [ 111.293877][ T1147] vhci_hcd: stop threads [ 111.295240][ T1147] vhci_hcd: release socket [ 111.296612][ T1147] vhci_hcd: disconnect device [ 111.529914][ T9416] netlink: 'syz.0.1052': attribute type 4 has an invalid length. [ 111.727130][ T9427] SELinux: security_context_str_to_sid (ôÌÇ|]¦Ïaþ½ö¶) failed with errno=-22 [ 111.831402][ T9439] tipc: Enabled bearer , priority 0 [ 111.834051][ T9439] syzkaller0: entered promiscuous mode [ 111.835790][ T9439] syzkaller0: entered allmulticast mode [ 111.842215][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 111.857465][ T9438] tipc: Resetting bearer [ 111.875509][ T9438] tipc: Disabling bearer [ 111.897019][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 111.979857][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 112.139313][ T9461] overlayfs: conflicting options: userxattr,redirect_dir=on [ 112.325065][ T9471] ip6tnl1: entered promiscuous mode [ 112.326686][ T9471] ip6tnl1: entered allmulticast mode [ 112.763632][ T9507] dlm: no local IP address has been set [ 112.766141][ T9507] dlm: cannot start dlm midcomms -107 [ 112.867067][ T34] libceph: connect (1)[c::]:6789 error -101 [ 112.869911][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 112.941065][ T9530] vlan2: entered promiscuous mode [ 112.942779][ T9530] syz_tun: entered promiscuous mode [ 112.953162][ T9530] vlan3: entered allmulticast mode [ 112.955053][ T9530] bond0: entered allmulticast mode [ 112.956744][ T9530] bond_slave_0: entered allmulticast mode [ 112.958679][ T9530] bond_slave_1: entered allmulticast mode [ 112.959261][ T9523] ceph: No mds server is up or the cluster is laggy [ 113.157785][ T9542] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1094'. [ 113.162171][ T9542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1094'. [ 113.243825][ T9547] netlink: 'syz.2.1095': attribute type 1 has an invalid length. [ 113.247187][ T9547] netlink: 'syz.2.1095': attribute type 2 has an invalid length. [ 113.497310][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'. [ 113.646031][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 113.646045][ T40] audit: type=1400 audit(1761326703.898:777): avc: denied { bind } for pid=9575 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 113.650046][ T9576] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 113.662058][ T9576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1103'. [ 113.958840][ T9597] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 114.069681][ T9607] comedi comedi3: comedi_config --init_data is deprecated [ 114.120978][ T40] audit: type=1400 audit(1761326704.378:778): avc: denied { bind } for pid=9610 comm="syz.2.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.122335][ T9612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 114.149957][ T9613] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 114.153062][ T9613] SELinux: failed to load policy [ 114.443288][ T9637] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 114.447012][ T9637] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 114.460454][ T2018] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 114.620872][ T2018] usb 7-1: Using ep0 maxpacket: 16 [ 114.632081][ T2018] usb 7-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 114.635895][ T2018] usb 7-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.641144][ T40] audit: type=1326 audit(1761326704.888:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9658 comm="syz.3.1126" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf8158efc9 code=0xffff0000 [ 114.649924][ T2018] usb 7-1: config 1 interface 0 has no altsetting 0 [ 114.655656][ T2018] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.659091][ T2018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.663423][ T2018] usb 7-1: Product: syz [ 114.664768][ T2018] usb 7-1: Manufacturer: syz [ 114.666440][ T2018] usb 7-1: SerialNumber: syz [ 114.670713][ T9617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.676075][ T9667] input: syz0 as /devices/virtual/input/input10 [ 114.722289][ T40] audit: type=1400 audit(1761326704.978:780): avc: denied { map } for pid=9670 comm="syz.1.1130" path="socket:[34171]" dev="sockfs" ino=34171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 114.875757][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.880510][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.897032][ T2018] usb 7-1: USB disconnect, device number 10 [ 115.033421][ T9687] infiniband syz1: set active [ 115.036112][ T9687] infiniband syz1: added veth1_to_bridge [ 115.055725][ T9687] RDS/IB: syz1: added [ 115.057371][ T9687] smc: adding ib device syz1 with port count 1 [ 115.059399][ T9687] smc: ib device syz1 port 1 has no pnetid [ 115.085593][ T9697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.977264][ T9728] __nla_validate_parse: 3 callbacks suppressed [ 115.977277][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 116.013360][ T40] audit: type=1400 audit(1761326706.268:781): avc: denied { watch_reads } for pid=9729 comm="syz.2.1148" path="/257/file0" dev="tmpfs" ino=1396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.019598][ T9730] --map-set only usable from mangle table [ 116.065698][ T9734] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:19969 [ 116.111321][ T40] audit: type=1400 audit(1761326706.368:782): avc: denied { setopt } for pid=9733 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.173293][ T9739] smc: net device veth1_to_team applied user defined pnetid SYZ2 [ 116.178037][ T9739] smc: net device veth1_to_team erased user defined pnetid SYZ2 [ 116.223183][ T9744] input: syz0 as /devices/virtual/input/input11 [ 116.239184][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1153'. [ 116.383831][ T9759] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 116.386338][ T9759] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1158'. [ 116.389266][ T9759] NCSI netlink: No device for ifindex 0 [ 116.440205][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 116.536404][ T9763] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1160'. [ 116.540033][ T9763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1160'. [ 116.591174][ T29] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 116.595331][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.599595][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.605953][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.610164][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.613841][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.618167][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.626456][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.630243][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.634874][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.640625][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.644715][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.649137][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.653316][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.656910][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.662128][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.665861][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.669468][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.674326][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.678015][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.678060][ T9775] overlay: Bad value for 'workdir' [ 116.679015][ T9776] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1163'. [ 116.683050][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.693432][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.697277][ T29] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.701162][ T29] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.705553][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.710448][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.713967][ T29] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.717905][ T29] usb 6-1: Product: syz [ 116.719644][ T29] usb 6-1: Manufacturer: syz [ 116.721634][ T29] usb 6-1: SerialNumber: syz [ 116.730162][ T29] usb 6-1: config 0 descriptor?? [ 116.737903][ T29] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.786716][ T9784] 9pnet_fd: Insufficient options for proto=fd [ 116.899497][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 116.902845][ T9800] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 116.952148][ T2018] usb 6-1: USB disconnect, device number 11 [ 116.959225][ T2018] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 116.965237][ T9804] xt_CT: No such helper "pptp" [ 116.968468][ T40] audit: type=1400 audit(1761326707.218:783): avc: denied { write } for pid=9802 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 116.969264][ T9804] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 116.975993][ T40] audit: type=1400 audit(1761326707.218:784): avc: denied { ioctl } for pid=9802 comm="syz.2.1173" path="socket:[33421]" dev="sockfs" ino=33421 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.004381][ T40] audit: type=1326 audit(1761326707.258:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8158efc9 code=0x7ffc0000 [ 117.014339][ T40] audit: type=1326 audit(1761326707.258:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.3.1174" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf8158efc9 code=0x7ffc0000 [ 117.810131][ T9844] binder: 9843:9844 ioctl c0306201 200000000640 returned -22 [ 117.813728][ T9844] binder: 9843:9844 ioctl 530b 200000000040 returned -22 [ 117.854703][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1186'. [ 117.882840][ T9851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.216117][ T9881] overlayfs: unescaped trailing colons in lowerdir mount option. [ 118.227670][ T9881] syzkaller1: entered promiscuous mode [ 118.230028][ T9881] syzkaller1: entered allmulticast mode [ 118.509113][ T9907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.584803][ T9914] isofs_fill_super: bread failed, dev=sr0, iso_blknum=16, block=16 [ 118.632985][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'. [ 118.670310][ T9919] overlayfs: conflicting options: userxattr,metacopy=on [ 118.695605][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1211'. [ 118.756899][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 118.756910][ T40] audit: type=1400 audit(1761326709.008:851): avc: denied { view } for pid=9936 comm="syz.2.1216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 118.776158][ T9933] sit0: entered promiscuous mode [ 118.779562][ T9933] netlink: 'syz.0.1215': attribute type 1 has an invalid length. [ 118.832157][ T40] audit: type=1400 audit(1761326709.088:852): avc: denied { map } for pid=9941 comm="syz.0.1217" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.840403][ T40] audit: type=1400 audit(1761326709.088:853): avc: denied { execute } for pid=9941 comm="syz.0.1217" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.854085][ T9942] can: request_module (can-proto-0) failed. [ 118.974796][ T40] audit: type=1400 audit(1761326709.228:854): avc: denied { connect } for pid=9944 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.037285][ T9958] xt_hashlimit: size too large, truncated to 1048576 [ 119.088370][ T40] audit: type=1400 audit(1761326709.338:855): avc: denied { accept } for pid=9957 comm="syz.2.1222" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.110966][ T9959] 9pnet: Could not find request transport: xen [ 119.302839][ T9987] Invalid logical block size (-3) [ 119.304758][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.308738][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.313083][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.320396][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.324200][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.328097][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.332984][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.336885][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.340843][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.344633][ T9987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9987 comm=syz.2.1231 [ 119.665021][T10009] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 119.667330][T10009] binder: 10008:10009 ioctl 4018620d 200000000040 returned -1 [ 119.725502][T10009] 9pnet: Could not find request transport: vipi˜ [ 120.024884][ T40] audit: type=1400 audit(1761326710.278:856): avc: denied { listen } for pid=10021 comm="syz.0.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.244890][T10025] mkiss: ax0: crc mode is auto. [ 120.873988][T10045] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 120.981004][T10055] xfrm1: entered allmulticast mode [ 121.245776][T10066] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 121.249250][T10066] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 121.561116][T10070] __nla_validate_parse: 7 callbacks suppressed [ 121.561133][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 121.567064][T10070] netlink: 'syz.3.1258': attribute type 30 has an invalid length. [ 121.656643][T10073] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 121.758160][T10081] cgroup: fork rejected by pids controller in /syz2 [ 121.767051][T10111] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 121.784503][T10111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 121.815986][T10111] veth5: entered promiscuous mode [ 122.188080][T10277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1267'. [ 122.235068][ T40] audit: type=1400 audit(1761326712.488:857): avc: denied { getopt } for pid=10279 comm="syz.1.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 122.239925][T10282] 9pnet_virtio: no channels available for device syz [ 122.285902][T10284] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1269'. [ 122.289426][T10284] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 122.427103][T10293] cgroup: Name too long [ 122.429067][T10294] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 122.513906][T10302] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.535499][ T40] audit: type=1400 audit(1761326712.788:858): avc: denied { setattr } for pid=10306 comm="syz.3.1276" name="" dev="pipefs" ino=36939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 122.634837][T10316] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1278'. [ 122.637800][T10316] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 122.648899][T10302] infiniband syz!: set active [ 122.651274][T10302] infiniband syz!: added team_slave_0 [ 122.675528][T10302] RDS/IB: syz!: added [ 122.676884][T10302] smc: adding ib device syz! with port count 1 [ 122.677920][T10319] IPv6: addrconf: prefix option has invalid lifetime [ 122.678897][T10302] smc: ib device syz! port 1 has no pnetid [ 122.687731][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1279'. [ 122.763145][T10328] ip6t_srh: unknown srh invflags 51E8 [ 122.809390][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 122.830449][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 122.992507][ T24] usb 5-1: config index 0 descriptor too short (expected 8192, got 27) [ 122.995978][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.000507][ T24] usb 5-1: config 0 has no interfaces? [ 123.004453][ T24] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.008195][ T24] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.011595][ T24] usb 5-1: Manufacturer: syz [ 123.015737][ T24] usb 5-1: config 0 descriptor?? [ 123.088289][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 123.229943][ T24] usb 5-1: USB disconnect, device number 7 [ 123.384097][T10363] overlayfs: missing 'lowerdir' [ 123.457426][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 123.465554][T10372] xt_socket: unknown flags 0x20 [ 123.555765][T10380] netlink: 'syz.2.1298': attribute type 33 has an invalid length. [ 123.559300][T10380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1298'. [ 123.912738][T10388] random: crng reseeded on system resumption [ 123.918375][T10388] Unrecognized hibernate image header format! [ 123.920676][T10388] PM: hibernation: Image mismatch: architecture specific data [ 124.020235][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 124.179464][T10411] netlink: 'syz.3.1310': attribute type 1 has an invalid length. [ 124.194843][ T40] audit: type=1800 audit(1761326714.448:859): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1309" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 124.202370][ T9] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 124.206777][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.211738][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 24, changing to 8 [ 124.215231][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59010, setting to 1024 [ 124.219827][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.224012][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.226988][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.232753][ T9] usb 7-1: config 0 descriptor?? [ 124.234851][T10383] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.236738][T10411] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 124.284006][T10409] kvm: MWAIT instruction emulated as NOP! [ 124.669179][ T40] audit: type=1400 audit(1761326714.918:860): avc: denied { write } for pid=10422 comm="syz.0.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 124.704362][ T40] audit: type=1800 audit(1761326714.958:861): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1314" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 124.842545][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.845528][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.850443][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 124.853122][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 124.857990][ T9] usb 7-1: USB disconnect, device number 11 [ 124.887590][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 125.420865][T10459] fuse: Bad value for 'user_id' [ 125.421362][ T40] audit: type=1400 audit(1761326715.678:862): avc: denied { mounton } for pid=10458 comm="syz.2.1327" path="/293/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 125.422932][T10459] fuse: Bad value for 'user_id' [ 125.490892][T10463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.650457][T10475] bridge_slave_1: left allmulticast mode [ 125.652915][T10475] bridge_slave_1: left promiscuous mode [ 125.655651][T10475] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.663637][T10475] bridge_slave_0: left allmulticast mode [ 125.666189][T10475] bridge_slave_0: left promiscuous mode [ 125.668903][T10475] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.649943][T10497] overlayfs: failed to clone upperpath [ 126.696024][ T40] audit: type=1400 audit(1761326716.948:863): avc: denied { getopt } for pid=10498 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 127.090289][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053856000: rx timeout, send abort [ 127.094482][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034ee4400: rx timeout, send abort [ 127.096948][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053856000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.101841][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888034ee4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.236618][T10514] __nla_validate_parse: 3 callbacks suppressed [ 127.236634][T10514] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1345'. [ 127.240374][ T841] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 127.248921][T10514] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.249456][T10515] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.272451][T10515] netlink: 'syz.0.1345': attribute type 9 has an invalid length. [ 127.396646][T10522] netlink: ct family unspecified [ 127.398783][T10522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.400529][ T841] usb 7-1: Using ep0 maxpacket: 8 [ 127.406376][ T841] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.410563][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.414596][ T841] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.418685][ T841] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.424058][ T841] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.427815][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.435562][ T40] audit: type=1400 audit(1761326717.688:864): avc: denied { getopt } for pid=10521 comm="syz.1.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 127.635357][ T841] usb 7-1: GET_CAPABILITIES returned 0 [ 127.637130][ T841] usbtmc 7-1:16.0: can't read capabilities [ 127.751835][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 127.761610][T10538] : entered promiscuous mode [ 127.836669][ T24] usb 7-1: USB disconnect, device number 12 [ 128.160905][ T40] audit: type=1400 audit(1761326718.418:865): avc: denied { setopt } for pid=10547 comm="syz.0.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 128.300339][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 128.313830][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1358'. [ 128.428400][T10560] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1361'. [ 128.469050][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1362'. [ 128.533043][T10572] can0: slcan on ttyprintk. [ 128.601373][T10571] can0 (unregistered): slcan off ttyprintk. [ 128.682868][T10581] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1367'. [ 128.703205][T10577] mmap: syz.2.1366 (10577): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 129.110736][T10602] bond6: entered promiscuous mode [ 129.114329][T10602] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.118314][T10602] bond6: entered allmulticast mode [ 129.121891][T10602] bond0: (slave bond6): Enslaving as an active interface with an up link [ 129.187681][ T40] audit: type=1400 audit(1761326719.438:866): avc: denied { shutdown } for pid=10608 comm="syz.0.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.289599][T10615] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20001 [ 129.293519][T10616] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20001 [ 129.296668][ T40] audit: type=1400 audit(1761326719.548:867): avc: denied { ioctl } for pid=10614 comm="syz.1.1378" path="socket:[38150]" dev="sockfs" ino=38150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.349942][T10619] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.1379'. [ 129.372655][T10621] xt_hashlimit: size too large, truncated to 1048576 [ 129.398020][T10623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1381'. [ 129.405383][ T40] audit: type=1400 audit(1761326719.658:868): avc: denied { audit_write } for pid=10622 comm="syz.1.1381" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.413200][ T40] audit: type=1107 audit(1761326719.658:869): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='üIr'3ÒÁÀ0bêË"ˆ±Hé©QœÓ^µkaDs{ð…ÒŠ¡¥Ø+îlnèhò¢»ýs›¼ŸÂPlÒžó0•w¬¾²' [ 129.430205][ T841] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.491645][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 129.581218][ T841] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 129.591438][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.595390][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.600416][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.610617][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.614193][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.618565][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.621984][T10639] netlink: 'syz.2.1386': attribute type 1 has an invalid length. [ 129.622116][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.625037][T10640] netlink: 'syz.2.1386': attribute type 1 has an invalid length. [ 129.627665][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.627681][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.629532][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.641605][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.646046][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.647118][T10639] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 129.649089][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.656630][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.656829][T10639] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 129.662275][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.664568][T10639] bond5: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 129.672309][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.675648][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.679676][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.684129][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.687483][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.692317][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.695521][ T841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.698731][ T841] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.702303][ T841] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.706246][T10642] netlink: 'syz.2.1386': attribute type 4 has an invalid length. [ 129.712340][ T841] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.715773][ T841] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.716788][T10642] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 129.718923][ T841] usb 5-1: Product: syz [ 129.726564][ T841] usb 5-1: Manufacturer: syz [ 129.728454][ T841] usb 5-1: SerialNumber: syz [ 129.733402][ T841] usb 5-1: config 0 descriptor?? [ 129.740386][ T841] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 129.768998][ T40] audit: type=1400 audit(1761326720.018:870): avc: denied { connect } for pid=10644 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.770545][T10645] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 129.770545][T10645] program syz.2.1387 not setting count and/or reply_len properly [ 129.926772][T10661] macsec1: entered promiscuous mode [ 129.928597][T10661] bridge0: entered promiscuous mode [ 129.931467][T10661] bridge0: port 1(macsec1) entered blocking state [ 129.933667][T10661] bridge0: port 1(macsec1) entered disabled state [ 129.935947][T10661] macsec1: entered allmulticast mode [ 129.937862][T10661] bridge0: entered allmulticast mode [ 129.938441][ T841] usb 5-1: USB disconnect, device number 8 [ 129.942597][T10661] macsec1: left allmulticast mode [ 129.944752][T10661] bridge0: left allmulticast mode [ 129.945536][ T841] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 129.949331][T10661] bridge0: left promiscuous mode [ 129.972546][T10663] CIFS mount error: No usable UNC path provided in device string! [ 129.972546][T10663] [ 129.976780][T10663] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.981085][T10663] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 130.008744][T10665] selinux_netlink_send: 23 callbacks suppressed [ 130.008755][T10665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10665 comm=syz.3.1394 [ 130.097808][T10673] binder: 10672:10673 ioctl c0306201 200000000680 returned -14 [ 130.256269][T10686] /dev/nullb0: Can't open blockdev [ 130.290312][T10688] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.336681][ T40] audit: type=1400 audit(1761326720.588:871): avc: denied { mount } for pid=10689 comm="syz.2.1404" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 130.344838][ T40] audit: type=1400 audit(1761326720.588:872): avc: denied { search } for pid=10689 comm="syz.2.1404" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 130.352305][ T40] audit: type=1400 audit(1761326720.588:873): avc: denied { search } for pid=10689 comm="syz.2.1404" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 130.466684][ T40] audit: type=1400 audit(1761326720.718:874): avc: denied { setattr } for pid=10694 comm="syz.2.1406" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 130.497029][T10700] netlink: 'syz.1.1407': attribute type 21 has an invalid length. [ 130.667781][T10710] batadv0: entered promiscuous mode [ 130.767721][T10719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 130.771410][T10719] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 131.020343][ T841] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 131.156761][T10721] tipc: Enabled bearer , priority 0 [ 131.159671][T10722] syzkaller0: entered promiscuous mode [ 131.162168][T10722] syzkaller0: entered allmulticast mode [ 131.171801][ T841] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.175774][ T841] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.175802][T10723] tipc: Resetting bearer [ 131.179898][ T841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.186757][ T841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.192952][ T841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.198126][T10723] tipc: Disabling bearer [ 131.198549][ T841] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.204385][ T841] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.207704][ T841] usb 5-1: Product: syz [ 131.209487][ T841] usb 5-1: Manufacturer: syz [ 131.216077][ T841] cdc_wdm 5-1:1.0: skipping garbage [ 131.218258][ T841] cdc_wdm 5-1:1.0: skipping garbage [ 131.222182][ T841] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 131.224677][ T841] cdc_wdm 5-1:1.0: Unknown control protocol [ 131.319561][T10731] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 131.416862][ T2018] usb 5-1: USB disconnect, device number 9 [ 131.417702][ T40] audit: type=1400 audit(1761326721.668:875): avc: denied { read } for pid=10736 comm="syz.2.1422" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 131.429149][ T40] audit: type=1400 audit(1761326721.678:876): avc: denied { open } for pid=10736 comm="syz.2.1422" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 131.500907][T10709] batadv0: left promiscuous mode [ 131.567087][T10742] syzkaller1: entered promiscuous mode [ 131.568875][T10742] syzkaller1: entered allmulticast mode [ 131.676511][T10750] IPVS: set_ctl: invalid protocol: 29 172.30.1.3:20001 [ 132.362231][T10776] @: renamed from vlan0 (while UP) [ 132.373447][T10778] loop6: detected capacity change from 0 to 2640 [ 132.376354][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.383509][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.386872][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.390312][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.393087][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.395582][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.398056][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.400747][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.403879][T10778] ldm_validate_partition_table(): Disk read failed. [ 132.405909][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.409951][T10778] Buffer I/O error on dev loop6, logical block 0, async page read [ 132.412970][T10778] Dev loop6: unable to read RDB block 0 [ 132.414948][T10778] loop6: unable to read partition table [ 132.416832][T10778] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 132.534347][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.536878][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.557267][T10782] uprobe: syz.2.1437:10782 failed to unregister, leaking uprobe [ 132.805608][T10795] bridge3: entered promiscuous mode [ 132.808123][T10795] bridge3: entered allmulticast mode [ 132.848708][T10802] __nla_validate_parse: 5 callbacks suppressed [ 132.848724][T10802] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.1444'. [ 132.855717][T10802] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.1444'. [ 132.868029][T10803] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.1444'. [ 132.872043][T10803] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.1444'. [ 132.946944][T10810] /dev/nullb0: Can't lookup blockdev [ 133.209533][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 133.608714][T10837] syz_tun: entered allmulticast mode [ 133.770142][T10790] comedi comedi0: reset error (fatal) [ 134.567949][T10861] CIFS: Unable to determine destination address [ 134.607256][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 134.653980][T10878] geneve2: entered promiscuous mode [ 134.667647][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1467'. [ 134.676072][T10880] dvmrp0: entered allmulticast mode [ 134.710123][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1468'. [ 134.721860][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1469'. [ 134.731603][T10884] geneve4: entered promiscuous mode [ 134.858555][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 134.858565][ T40] audit: type=1400 audit(1761326725.108:882): avc: denied { read } for pid=10889 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.304862][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 137.014355][T11021] tipc: Enabling of bearer rejected, failed to enable media [ 137.087239][T11029] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 137.292634][ T40] audit: type=1400 audit(1761326727.548:883): avc: denied { compute_member } for pid=11047 comm="syz.0.1511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 137.536069][T11093] tmpfs: Cannot disable swap on remount [ 137.587591][T11096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.590657][ T40] audit: type=1400 audit(1761326727.828:884): avc: denied { remount } for pid=11095 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 137.673690][T11101] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.676684][T11101] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.590295][T11139] __nla_validate_parse: 8 callbacks suppressed [ 138.590309][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'. [ 138.656169][T11150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=11150 comm=syz.3.1547 [ 138.663417][T11155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=11155 comm=syz.3.1547 [ 138.695189][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1548'. [ 139.150333][T11182] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 139.150885][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'. [ 139.155374][T11184] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1555'. [ 139.191785][T11187] binder: 11185:11187 unknown command 0 [ 139.193703][T11187] binder: 11185:11187 ioctl c0306201 200000000080 returned -22 [ 139.198146][T11187] binder: 11185:11187 ioctl 8933 200000000540 returned -22 [ 139.403136][ T40] audit: type=1400 audit(1761326729.658:885): avc: denied { write } for pid=11204 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.468435][T11212] overlayfs: missing 'lowerdir' [ 139.496237][T11214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=11214 comm=syz.3.1565 [ 139.604892][T11221] 9pnet_virtio: no channels available for device 127.0.0.1 [ 139.805374][T11233] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 139.825371][T11233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 139.842293][T11233] bond4: (slave wlan0): Releasing active interface [ 139.847177][T11233] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 139.983130][ T40] audit: type=1400 audit(1761326730.238:886): avc: denied { transfer } for pid=11244 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.183368][ T40] audit: type=1400 audit(1761326730.438:887): avc: denied { bind } for pid=11264 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 140.198011][ T40] audit: type=1326 audit(1761326730.448:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11268 comm="syz.0.1580" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f761698efc9 code=0x0 [ 140.207320][T11258] 9pnet: Unknown protocol version 9p20\++} [ 140.246139][T11277] ufs: You didn't specify the type of your ufs filesystem [ 140.246139][T11277] [ 140.246139][T11277] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 140.246139][T11277] [ 140.246139][T11277] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 140.260561][T11277] ufs: ufstype=old is supported read-only [ 140.311615][T11282] bond3: Unable to set up delay as MII monitoring is disabled [ 140.316670][T11282] bond3 (unregistering): Released all slaves [ 140.348970][T11285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.352846][T11285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.442248][T11285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.446659][T11285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.528389][T11285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.531925][T11285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.593478][T11285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.596913][T11285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.707685][T10261] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.711340][T10261] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.726180][T10261] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.729204][T10261] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.737962][ T1150] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.740908][ T1150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.748449][ T1150] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.751165][ T1150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.818675][ T40] audit: type=1400 audit(1761326731.068:889): avc: denied { getopt } for pid=11301 comm="syz.2.1590" lport=45063 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 140.900010][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 140.960627][T11310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.073923][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 141.152603][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 141.357116][T11354] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1606'. [ 141.357214][T11356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1607'. [ 141.363588][ T40] audit: type=1400 audit(1761326731.618:890): avc: denied { shutdown } for pid=11355 comm="syz.3.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.365055][T11356] IPv6: Can't replace route, no match found [ 141.383277][T11356] netlink: 'syz.3.1607': attribute type 29 has an invalid length. [ 141.386076][T11356] netlink: 'syz.3.1607': attribute type 29 has an invalid length. [ 141.415031][T11362] netlink: 'syz.3.1609': attribute type 1 has an invalid length. [ 141.438008][T11362] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 141.443622][T11362] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 141.448788][T11362] bond7: (slave vcan1): making interface the new active one [ 141.453161][T11362] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 141.457309][T11362] bond7: entered allmulticast mode [ 141.459048][T11362] vcan1: entered allmulticast mode [ 141.490194][ T40] audit: type=1400 audit(1761326731.738:891): avc: denied { unlink } for pid=11370 comm="syz.2.1612" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 141.784446][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1620'. [ 141.840170][ T6017] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 141.862804][T11410] IPv6: Can't replace route, no match found [ 141.982389][T11416] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56672 sclass=netlink_xfrm_socket pid=11416 comm=syz.3.1625 [ 141.991977][ T6017] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.995589][ T6017] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.999761][ T6017] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 142.004987][ T6017] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.009467][ T6017] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8832, setting to 1024 [ 142.015621][ T6017] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 142.019422][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 142.021171][T11418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.023241][ T6017] usb 6-1: Product: syz [ 142.025762][T11418] overlayfs: missing 'lowerdir' [ 142.027513][ T6017] usb 6-1: Manufacturer: syz [ 142.036235][ T6017] cdc_wdm 6-1:1.0: skipping garbage [ 142.037147][T11417] [U]  [ 142.038453][ T6017] cdc_wdm 6-1:1.0: skipping garbage [ 142.039697][ T6017] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 142.043541][ T6017] cdc_wdm 6-1:1.0: Unknown control protocol [ 142.120142][ T24] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 142.126474][ T40] audit: type=1400 audit(1761326732.378:892): avc: denied { write } for pid=11421 comm="syz.0.1628" lport=52061 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.134154][ T40] audit: type=1400 audit(1761326732.388:893): avc: denied { setopt } for pid=11421 comm="syz.0.1628" lport=52061 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.292593][ T24] usb 7-1: config 0 has an invalid interface number: 213 but max is 1 [ 142.295479][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.299420][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.302906][ T24] usb 7-1: config 0 has no interface number 0 [ 142.305324][ T24] usb 7-1: too many endpoints for config 0 interface 213 altsetting 187: 201, using maximum allowed: 30 [ 142.309704][ T24] usb 7-1: config 0 interface 213 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 142.314929][ T24] usb 7-1: config 0 interface 213 has no altsetting 0 [ 142.317547][ T24] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 142.321087][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.325143][ T24] usb 7-1: config 0 descriptor?? [ 143.042548][ T40] audit: type=1400 audit(1761326733.298:894): avc: denied { read write } for pid=11440 comm="syz.0.1633" name="file0" dev="tmpfs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.051170][ T40] audit: type=1400 audit(1761326733.298:895): avc: denied { open } for pid=11440 comm="syz.0.1633" path="/364/file0" dev="tmpfs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.176624][T11448] binder: binder_mmap: 11447 200000ffc000-200001000000 bad vm_flags failed -1 [ 143.328048][T11462] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 143.330711][T11464] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 143.330726][T11464] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 143.333969][T11462] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 143.337730][T11464] overlayfs: conflicting options: userxattr,redirect_dir=on [ 143.345044][T11462] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 143.348295][T11462] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 143.354661][T11462] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 144.500358][ T841] usb 6-1: USB disconnect, device number 12 [ 144.536929][T11491] __nla_validate_parse: 1 callbacks suppressed [ 144.536942][T11491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1649'. [ 144.542576][T11491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.585449][T11491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.889511][ T24] usb 7-1: string descriptor 0 read error: -71 [ 144.894596][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 144.898393][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 144.905707][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 144.909950][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 144.914329][ T24] usb 7-1: media controller created [ 144.918914][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.935800][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 144.938549][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 144.945419][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input14 [ 144.954337][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 144.957364][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 144.963012][ T24] usb 7-1: USB disconnect, device number 13 [ 144.963546][T11525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.986743][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 144.993265][T11527] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 145.158806][T11540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1666'. [ 145.245598][T11547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11547 comm=syz.0.1668 [ 145.393529][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 145.393540][ T40] audit: type=1400 audit(1761326735.648:900): avc: denied { accept } for pid=11565 comm="syz.0.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 145.426527][T11564] binder: BINDER_SET_CONTEXT_MGR already set [ 145.429136][T11564] binder: 11563:11564 ioctl 4018620d 200000000040 returned -16 [ 145.531051][T11581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 145.541482][T11581] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1678'. [ 145.544955][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1679'. [ 145.557702][ T40] audit: type=1800 audit(1761326735.808:901): pid=11581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1678" name="file1" dev="overlay" ino=2098 res=0 errno=0 [ 146.184842][ T40] audit: type=1400 audit(1761326736.438:902): avc: denied { write } for pid=11626 comm="syz.2.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 146.247368][T11633] bond3 (unregistering): Released all slaves [ 146.279037][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1698'. [ 146.328150][T11641] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 146.342447][T11633] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 146.811950][T11692] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1712'. [ 147.019052][ T40] audit: type=1326 audit(1761326737.268:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2433d8efc9 code=0x7ffc0000 [ 147.029807][ T40] audit: type=1326 audit(1761326737.268:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2433d85e67 code=0x7ffc0000 [ 147.039593][ T40] audit: type=1326 audit(1761326737.268:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2433d2b099 code=0x7ffc0000 [ 147.050046][ T40] audit: type=1326 audit(1761326737.268:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2433d85e67 code=0x7ffc0000 [ 147.059228][ T40] audit: type=1326 audit(1761326737.268:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2433d2b099 code=0x7ffc0000 [ 147.067527][ T40] audit: type=1326 audit(1761326737.268:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2433d85e67 code=0x7ffc0000 [ 147.074955][ T40] audit: type=1326 audit(1761326737.268:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11700 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2433d2b099 code=0x7ffc0000 [ 147.386737][T11719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1721'. [ 147.410217][ T54] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 147.430285][ T6017] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 147.572531][ T54] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.575876][ T54] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 147.579316][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.582713][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 147.586236][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 147.592329][ T54] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.595866][ T54] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.598608][ T54] usb 6-1: Product: syz [ 147.599965][ T54] usb 6-1: Manufacturer: syz [ 147.603769][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 147.605463][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 147.607779][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 147.609658][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 147.766209][T11732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.804736][ T9] usb 6-1: USB disconnect, device number 13 [ 148.450299][ T54] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 148.603093][ T54] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 148.606835][ T54] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 148.611747][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 148.615522][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 148.620261][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 148.626722][ T54] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.630612][ T54] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.633996][ T54] usb 6-1: Product: syz [ 148.635786][ T54] usb 6-1: Manufacturer: syz [ 148.642515][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 148.644752][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 148.648211][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 148.650760][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 148.864558][ T24] usb 6-1: USB disconnect, device number 14 [ 148.889899][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 148.900489][T11795] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.022316][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 149.042745][T11797] kvm: kvm [11796]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 149.241783][T11807] QAT: failed to copy from user. [ 149.394803][T11809] validate_nla: 28 callbacks suppressed [ 149.394816][T11809] netlink: 'syz.1.1744': attribute type 1 has an invalid length. [ 149.412477][T11809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.425309][T11809] vlan3: entered promiscuous mode [ 149.427074][T11809] bond3: entered promiscuous mode [ 149.436275][T11809] gretap1: entered promiscuous mode [ 149.600329][T11814] __nla_validate_parse: 1 callbacks suppressed [ 149.600340][T11814] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1746'. [ 151.320237][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.320269][T11805] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 152.172051][T11805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.179852][T11805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.184444][T11805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.187343][T11805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.190732][T11805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.194366][T11805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.303669][T11833] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 152.308053][T11833] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 152.313141][T11833] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 152.317506][T11833] UDF-fs: Scanning with blocksize 1024 failed [ 152.321613][T11833] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 152.325679][T11833] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 152.329593][T11833] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 152.332909][T11833] UDF-fs: Scanning with blocksize 2048 failed [ 152.336622][T11833] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 152.336916][T11835] JFS: discard option not supported on device [ 152.340759][T11833] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 152.340797][T11833] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 152.340810][T11833] UDF-fs: Scanning with blocksize 4096 failed [ 152.344745][T11835] Mount JFS Failure: -5 [ 152.346830][T11833] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 152.491875][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 152.505788][ T53] IPVS: starting estimator thread 0... [ 152.506326][T11856] IPVS: nq: FWM 3 0x00000003 - no destination available [ 152.601491][ T6017] ================================================================== [ 152.601500][ T6017] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1b3f/0x1e60 [ 152.601536][ T6017] Write of size 8 at addr ffffc90005559170 by task kworker/0:5/6017 [ 152.601545][ T6017] [ 152.601550][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 152.601563][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.601570][ T6017] Workqueue: events_power_efficient fb_flashcursor [ 152.601582][ T6017] Call Trace: [ 152.601586][ T6017] [ 152.601590][ T6017] dump_stack_lvl+0x116/0x1f0 [ 152.601613][ T6017] print_report+0xcd/0x630 [ 152.601624][ T6017] ? __virt_addr_valid+0x81/0x610 [ 152.601641][ T6017] ? sys_imageblit+0x1b3f/0x1e60 [ 152.601654][ T6017] kasan_report+0xe0/0x110 [ 152.601665][ T6017] ? sys_imageblit+0x1b3f/0x1e60 [ 152.601680][ T6017] sys_imageblit+0x1b3f/0x1e60 [ 152.601696][ T6017] ? __pfx_sys_imageblit+0x10/0x10 [ 152.601713][ T6017] ? rcu_is_watching+0x12/0xc0 [ 152.601727][ T6017] ? trace_kmalloc+0x2b/0xd0 [ 152.601738][ T6017] ? __kmalloc_noprof+0x34f/0x880 [ 152.601751][ T6017] ? kfree+0x252/0x6d0 [ 152.601764][ T6017] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 152.601784][ T6017] soft_cursor+0x524/0xa10 [ 152.601798][ T6017] bit_cursor+0xe8c/0x17e0 [ 152.601811][ T6017] ? __pfx_bit_cursor+0x10/0x10 [ 152.601824][ T6017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.601838][ T6017] ? get_color+0x1da/0x450 [ 152.601847][ T6017] ? __pfx_bit_cursor+0x10/0x10 [ 152.601858][ T6017] fb_flashcursor+0x310/0x400 [ 152.601868][ T6017] process_one_work+0x9cf/0x1b70 [ 152.601881][ T6017] ? __pfx_e1000_watchdog_task+0x10/0x10 [ 152.601894][ T6017] ? __pfx_process_one_work+0x10/0x10 [ 152.601906][ T6017] ? assign_work+0x1a0/0x250 [ 152.601917][ T6017] worker_thread+0x6c8/0xf10 [ 152.601929][ T6017] ? __kthread_parkme+0x19e/0x250 [ 152.601943][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 152.601953][ T6017] kthread+0x3c5/0x780 [ 152.601963][ T6017] ? __pfx_kthread+0x10/0x10 [ 152.601972][ T6017] ? rcu_is_watching+0x12/0xc0 [ 152.601984][ T6017] ? __pfx_kthread+0x10/0x10 [ 152.601994][ T6017] ret_from_fork+0x675/0x7d0 [ 152.602002][ T6017] ? __pfx_kthread+0x10/0x10 [ 152.602012][ T6017] ret_from_fork_asm+0x1a/0x30 [ 152.602029][ T6017] [ 152.602032][ T6017] [ 152.602035][ T6017] The buggy address belongs to a vmalloc virtual mapping [ 152.602043][ T6017] Memory state around the buggy address: [ 152.602048][ T6017] ffffc90005559000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.602055][ T6017] ffffc90005559080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.602062][ T6017] >ffffc90005559100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.602067][ T6017] ^ [ 152.602073][ T6017] ffffc90005559180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.602079][ T6017] ffffc90005559200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 152.602085][ T6017] ================================================================== [ 152.602090][ T6017] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 152.602097][ T6017] CPU: 0 UID: 0 PID: 6017 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 152.602108][ T6017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.602115][ T6017] Workqueue: events_power_efficient fb_flashcursor [ 152.602125][ T6017] Call Trace: [ 152.602128][ T6017] [ 152.602132][ T6017] dump_stack_lvl+0x3d/0x1f0 [ 152.602146][ T6017] vpanic+0x640/0x6f0 [ 152.602161][ T6017] panic+0xca/0xd0 [ 152.602174][ T6017] ? __pfx_panic+0x10/0x10 [ 152.602190][ T6017] ? check_panic_on_warn+0x1f/0xb0 [ 152.602206][ T6017] check_panic_on_warn+0xab/0xb0 [ 152.602221][ T6017] end_report+0x107/0x170 [ 152.602231][ T6017] kasan_report+0xee/0x110 [ 152.602242][ T6017] ? sys_imageblit+0x1b3f/0x1e60 [ 152.602258][ T6017] sys_imageblit+0x1b3f/0x1e60 [ 152.602273][ T6017] ? __pfx_sys_imageblit+0x10/0x10 [ 152.602291][ T6017] ? rcu_is_watching+0x12/0xc0 [ 152.602303][ T6017] ? trace_kmalloc+0x2b/0xd0 [ 152.602313][ T6017] ? __kmalloc_noprof+0x34f/0x880 [ 152.602326][ T6017] ? kfree+0x252/0x6d0 [ 152.602340][ T6017] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 152.602354][ T6017] soft_cursor+0x524/0xa10 [ 152.602367][ T6017] bit_cursor+0xe8c/0x17e0 [ 152.602380][ T6017] ? __pfx_bit_cursor+0x10/0x10 [ 152.602393][ T6017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.602406][ T6017] ? get_color+0x1da/0x450 [ 152.602428][ T6017] ? __pfx_bit_cursor+0x10/0x10 [ 152.602440][ T6017] fb_flashcursor+0x310/0x400 [ 152.602451][ T6017] process_one_work+0x9cf/0x1b70 [ 152.602463][ T6017] ? __pfx_e1000_watchdog_task+0x10/0x10 [ 152.602475][ T6017] ? __pfx_process_one_work+0x10/0x10 [ 152.602488][ T6017] ? assign_work+0x1a0/0x250 [ 152.602498][ T6017] worker_thread+0x6c8/0xf10 [ 152.602510][ T6017] ? __kthread_parkme+0x19e/0x250 [ 152.602524][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 152.602534][ T6017] kthread+0x3c5/0x780 [ 152.602544][ T6017] ? __pfx_kthread+0x10/0x10 [ 152.602553][ T6017] ? rcu_is_watching+0x12/0xc0 [ 152.602566][ T6017] ? __pfx_kthread+0x10/0x10 [ 152.602576][ T6017] ret_from_fork+0x675/0x7d0 [ 152.602584][ T6017] ? __pfx_kthread+0x10/0x10 [ 152.602617][ T6017] ret_from_fork_asm+0x1a/0x30 [ 152.602639][ T6017] [ 152.603366][ T6017] Kernel Offset: disabled VM DIAGNOSIS: 17:21:27 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85294ea5 RDI=ffffffff9add6700 RBP=ffffffff9add66c0 RSP=ffffc90003237350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000079 R14=ffffffff9add66c0 R15=ffffffff85294e40 RIP=ffffffff85294ecf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbf82476f98 CR3=0000000065538000 CR4=00352ef0 DR0=0800000000000004 DR1=0000000000000418 DR2=0000000000000000 DR3=000000000000000b DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616bb74a8 00007f7616bb74a0 00007f7616bb7498 00007f7616bb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f761771d100 00007f7616bb7460 00007f7616bb7478 00007f7616bb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616bb74b8 00007f7616bb74b0 00007f7616bb74a8 00007f7616bb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff888000118000 RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a520000 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555bb5f500 ffffffff 00c00000 GS =0000 ffff8880d6b0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c301a8a CR3=0000000056c94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf81612fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf81612fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf81612fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf81612ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf8161307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf8161315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf817b74a8 00007fbf817b74a0 00007fbf817b7498 00007fbf817b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf8231d100 00007fbf817b7460 00007fbf817b7478 00007fbf817b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbf817b74b8 00007fbf817b74b0 00007fbf817b74a8 00007fbf817b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff88801b2b0000 RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a620000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c332bad CR3=000000000e182000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd06fa3fe0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbda6812fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbda6812fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbda6812fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbda6812ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbda681307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbda681315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81617a93 RDX=ffff88801b2b2480 RSI=ffffffff81617adb RDI=ffffffff93a67fe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff274cffc R10=ffffffff93a67fe7 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81617adc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6d0a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7614bec568 CR3=0000000065538000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000002800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616a1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616bb74a8 00007f7616bb74a0 00007f7616bb7498 00007f7616bb7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f761771d100 00007f7616bb7460 00007f7616bb7478 00007f7616bb74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7616bb74b8 00007f7616bb74b0 00007f7616bb74a8 00007f7616bb74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000