last executing test programs: 51.96153228s ago: executing program 2 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1b}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x2a, 0x3, 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@delchain={0x24, 0x65, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xa}, {0xfff2, 0x9}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x121001, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000440)={0x6, 0x1}) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x22020600) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x4) r12 = openat$cgroup_ro(r11, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r12, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r13], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 51.517286126s ago: executing program 2 (id=175): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x6, 0x106, 0x8, @buffer={0x0, 0x8d, &(0x7f0000000500)=""/141}, &(0x7f00000005c0)="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", 0x0, 0x2, 0x2, 0x4, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) 51.516116692s ago: executing program 2 (id=177): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 51.446144209s ago: executing program 2 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="9ef762b0", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c2c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x400000000000003, 0xfffffffd, 0x0, {0x0, 0x8, 0x0, 0x1, 0xd1, 0x2, 0x6, 0x2, 0x4, 0x2000, 0x0, r4, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='\x00', &(0x7f00000001c0), 0x1101080, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize}], [{@fowner_eq={'fowner', 0x3d, r4}}]}}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r7, @ANYBLOB="4000100a14000100000000000000000000000000000000010a000200"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 50.576484846s ago: executing program 2 (id=191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x240488c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x240488c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setfsgid(0xee01) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$packet(r1, &(0x7f00000000c0)={0x11, 0xf5, 0x0, 0x1, 0xfa, 0x6, @random="99592de75872"}, 0x14) setresgid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xec, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xbdf2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5b, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8c}]}, 0xec}, 0x1, 0x0, 0x0, 0x2}, 0x8000) getsockopt$SO_COOKIE(r3, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8) syz_emit_ethernet(0xff76, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x2c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 50.477727125s ago: executing program 1 (id=192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x4, [0x3, 0x2, 0x0, 0x0]}, &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r4 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f00000001c0)={0x8, 'syzkaller1\x00', {'vxcan1\x00'}, 0xfff7}) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x3, &(0x7f0000006380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x9e}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @exit, @alu={0x7, 0x0, 0x8, 0x3, 0x3, 0x6, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0xfffffffffffffe7c, 0x10, &(0x7f00000002c0)={0x0, 0x3, 0x4, 0x80c}, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r6, &(0x7f00000002c0), &(0x7f0000000840)=""/165}, 0x20) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 50.387765449s ago: executing program 1 (id=193): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x45, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x81, 0x0, 0x400000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4]}) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000020900020073797a3200000000090001007379903000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0xf684}, 0x16, 0x1) 50.387176867s ago: executing program 1 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076003008b050000008650", 0x0, 0xfe8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000980), 0x298240, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xc0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000250001"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0xd0) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2d, 0x3, {0x0, 0x0, 0x0, r14, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0xa, 0x0, 0x4, 0xa}, 0x51}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) syz_usb_connect$cdc_ecm(0x4, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x1, 0x1, 0x9, 0x10, 0x9, "", [{{0x9, 0x4, 0x0, 0x90, 0x3, 0x2, 0x6, 0x0, 0xf2, {{0x8, 0x24, 0x6, 0x0, 0x0, "8f3541"}, {0x5, 0x24, 0x0, 0xc5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x7, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6, 0x87}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x3, 0xc5}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x87, 0x3, 0x72, 0x20, 0x5}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x180a}}]}) close(r12) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000a00002000ff1100000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 50.227568188s ago: executing program 2 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x11, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xa}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20040054) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r8, 0x0, 0x1) write$vhost_msg_v2(r8, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/241, 0xfffffffffffffeb0, 0x0, 0x1, 0x4}}, 0x48) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 50.212234481s ago: executing program 32 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x11, &(0x7f00000002c0)={0x0, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x0, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0xa}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20040054) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r8, 0x0, 0x1) write$vhost_msg_v2(r8, &(0x7f0000000340)={0x2, 0x0, {&(0x7f00000003c0)=""/241, 0xfffffffffffffeb0, 0x0, 0x1, 0x4}}, 0x48) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 49.656728758s ago: executing program 1 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f00000021c0)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x10, 0x40009975, r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 49.153733527s ago: executing program 1 (id=206): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000340)=0xb0a, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x400) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r3, 0x8044610a, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x101301, 0x0) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f00000006c0)={0xfffffffffffff954, 0x9, 0x9, 0xfd, 0x4, 0x9, "e5f23d28506fd97fced098e399354457", 0xfe, 0x0, 0xf, 0x3, 0x81, 0x2, 0x83}) r5 = syz_pidfd_open(0x0, 0x0) process_mrelease(r5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000200)={'caif0\x00', 0x80000000, 0x5}) ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000040)={0x1d, 0xf8, 0x1, 0x3}) syz_genetlink_get_family_id$devlink(0x0, r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, 0x0, 0xffdd) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) process_madvise(r5, &(0x7f0000000640)=[{&(0x7f0000000380)="2b322f73ac60b214aeda33841337145814750250821552a9ea08c562c4e13db745b29203b2066c42e2ddb55337055494116f0ff83f9321657f2f222d35d643b87d0112e7a5d77247c797e5eb436f1941b687221121bd8e2cee10048c115ed936a926a787ec485078b4a13b098f2522ce8816ee15ff7d4d149e22209f1da57b1b3e54fcd6b2c0cece44b8f7bc337352e8cf19807ac0a649a503db3d85c410fefd7b46eba8cbcac285c60420e15d3a9695da91c97f14f00c62c26beda34c0b370c9aeb4d3b517d081b2d77c894af5baf96a759", 0xd2}, {&(0x7f0000000480)="23dd34d27f7c5246acb93bea8620d4a482c7874aa5228e42ca9877c98d4f6b859983763cd12e96148a42f54c3e60f202731bfc1b03671953534a368e60348f2ea0f4b398ec8f42a35b6d988892c3122708b2642c6250a40897d9217f35530f5d4169377678a3b83b2a66a8ecd27f97fd4ed8cdf94184f60279b35e708705cc40c38ec20f01872c7892d87a4ca26e104753b3", 0x92}, {&(0x7f0000000140)="9f8b6347525367457e5e8051dfbf29744b94b223ee6c4752bdf7eb1ec4bb0dbfbebefb950e", 0x25}, {&(0x7f0000000540)="eedb7a5a658915e27f0497b39e0f263784bfca9147dd914de1b6376c92e19325b3c0308af87efcf4b72c4365d507062ae675ef13b24cb8e0b12b1dc85ae14781eb59c766ee6295419d8d06092cdc13dc7de93e6637d96f8bed443e4c6fa559b787c0fafaf445549d02559921326d4d0cd4ebfb71f561331470fe2507efe1e720497c7c9b12eaa31db1d756b590a71d345675058484661a8a94e693159f5dfc194a7ec1f1a137ec71b01c006206e7f1c8e607edefde9e5f1977f16c69905cff0f355f337291de657c686eaf524cde919ffbb22df3d73d9d43869a648ceaedef4ff2f1259afc9daafd87636da0ff9805fa493064ec", 0xf4}], 0x4, 0x4, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x1000}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x470, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xffe0}, {}, {0x4, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x440, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x18}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x10}, @TCA_ROUTE4_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xaec8, 0xff, 0x4, 0xbc, 0x3, 0x401, 0x4, 0x1, 0x3, 0x8, 0x7fff, 0x3, 0x80000000, 0x6, 0x1, 0x2, 0x5, 0x7549, 0x0, 0x3, 0xb, 0x8, 0x4, 0x3, 0x1, 0x3, 0x40, 0x2, 0x1cf, 0x80, 0x400, 0x95fe, 0x6, 0x0, 0x6, 0x3, 0x8000, 0x8001, 0x4, 0x4, 0x9, 0x401, 0x4, 0x3ff, 0xf0, 0x8, 0x8, 0x4, 0x8, 0x1bdc, 0x8, 0x52b, 0xff, 0x0, 0x2, 0xffff, 0x1ff, 0x6, 0xffffffff, 0x4e, 0xe5f, 0xc46, 0x8, 0x0, 0x3eba, 0x1, 0x80, 0x7ff, 0x2, 0x8, 0x7, 0x5e3, 0x31, 0x5, 0xe, 0x3, 0x1, 0x8, 0x1, 0x8000, 0x7, 0x0, 0x4, 0x6, 0x1, 0x0, 0xff, 0x401, 0x2, 0x4, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x9, 0x9, 0x8, 0xd9, 0x9, 0x8001, 0x9, 0x7, 0x9, 0x4, 0x3, 0x9, 0x8, 0xfffffffe, 0xfffffffb, 0x4, 0x9, 0x1000, 0x101, 0x9, 0x6, 0x9, 0x3, 0xb1, 0x7, 0x5, 0xb, 0xffffff59, 0x1, 0x4, 0x5d, 0x9, 0x0, 0x5, 0x0, 0xe, 0xa, 0x83, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8, 0x4, 0xb, 0x0, 0x800, 0xffffffff, 0x30fa, 0x2, 0x2, 0x5, 0x3, 0x2, 0xe133, 0x1, 0x7f, 0xe17b, 0x1000, 0x5, 0x0, 0xfffffaec, 0x9, 0x81, 0x5, 0x2, 0x400, 0x8, 0x3, 0x5, 0x10001, 0x0, 0x4, 0x3, 0x10100000, 0x6, 0xf6, 0x0, 0x3, 0x80000000, 0x4, 0x4277, 0x6, 0x9, 0x5, 0x5, 0x4, 0x0, 0x9, 0x0, 0x3, 0x8, 0x7, 0x7fff, 0x2, 0xffff, 0x9, 0x8, 0xb6, 0x8, 0xfffffffd, 0x6, 0x7f, 0x3, 0xd, 0x14d1, 0xffffffff, 0x0, 0x1, 0x2, 0x6, 0x5, 0x69, 0x6, 0x20001, 0xffffcb0d, 0x40, 0x5, 0x6, 0x9, 0x2, 0x0, 0x7, 0x5396, 0x8, 0x1000, 0x8000004, 0x2, 0x9, 0x86e, 0x0, 0x0, 0x2, 0x1, 0x7, 0xfffffffa, 0xd, 0x7ff, 0x80000000, 0x3ff, 0x4, 0x8001, 0x81, 0x4, 0x9, 0x7b4, 0xa, 0x600000, 0x8000, 0xff52, 0x4, 0x10, 0x1, 0x8, 0x1, 0x70a, 0x2, 0x5, 0xfffeffff]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xf9}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 48.962182867s ago: executing program 1 (id=209): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x2040) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x4, {0xffffffff, 0xbde, 0xf, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0x9, 0x7, 0x8, 0x0, [{0x10, 0x5, 0x3, '\x00', 0xf}, {0xe, 0x4, 0x6, '\x00', 0x2}, {0xd, 0x6, 0x1, '\x00', 0x6}, {0x7, 0x36, 0x0, '\x00', 0xd}, {0xb, 0x6, 0x4, '\x00', 0x4}, {0x84, 0xf1, 0x6}, {0x7, 0x8, 0x7f, '\x00', 0x5}, {0x7, 0x7, 0x4e, '\x00', 0x9}, {0x0, 0x2, 0x7, '\x00', 0x7}, {0xd, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x8, 0xd, '\x00', 0x4}, {0x9, 0x4, 0xff, '\x00', 0x1}, {0x4, 0x5, 0x9, '\x00', 0x4}, {0x7, 0x8, 0xfb, '\x00', 0x1}, {0x3, 0x71, 0x1, '\x00', 0x1}, {0x8a, 0x0, 0x1, '\x00', 0x7f}, {0x6, 0x1, 0x3, '\x00', 0x4}, {0x9, 0x6, 0x8, '\x00', 0x3}, {0xc, 0xe, 0xfc, '\x00', 0xc0}, {0x2, 0x7, 0x4, '\x00', 0xd}, {0x7, 0x5, 0x3, '\x00', 0x7}, {0x2a, 0xf9, 0x1, '\x00', 0xc8}, {0x8, 0x25, 0x4, '\x00', 0x6}, {0xf, 0x8, 0x1, '\x00', 0xfd}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0xaa42, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0xc, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000008c0)={'das16m1\x00', [0x401, 0x7, 0x7c3f, 0x5, 0xfb31, 0x3, 0x239, 0x6, 0x3, 0x5, 0xff, 0xc, 0x1, 0xb, 0x6, 0xc, 0x57, 0x2, 0x3, 0xf, 0x224a, 0x7f, 0x5, 0x8, 0x6, 0x3, 0x1a7, 0x9, 0xdb0, 0x6, 0x1]}) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000280)=0x4) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7f630100000000000000140000000e0005000000000000000100000008000000000000f73b9f76c637d70000ff070000"], 0x44}}, 0x4004811) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) dup(r11) 33.665460709s ago: executing program 33 (id=209): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x100000001, 0x2040) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x4, {0xffffffff, 0xbde, 0xf, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x2000, 0x9, 0x7, 0x8, 0x0, [{0x10, 0x5, 0x3, '\x00', 0xf}, {0xe, 0x4, 0x6, '\x00', 0x2}, {0xd, 0x6, 0x1, '\x00', 0x6}, {0x7, 0x36, 0x0, '\x00', 0xd}, {0xb, 0x6, 0x4, '\x00', 0x4}, {0x84, 0xf1, 0x6}, {0x7, 0x8, 0x7f, '\x00', 0x5}, {0x7, 0x7, 0x4e, '\x00', 0x9}, {0x0, 0x2, 0x7, '\x00', 0x7}, {0xd, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x8, 0xd, '\x00', 0x4}, {0x9, 0x4, 0xff, '\x00', 0x1}, {0x4, 0x5, 0x9, '\x00', 0x4}, {0x7, 0x8, 0xfb, '\x00', 0x1}, {0x3, 0x71, 0x1, '\x00', 0x1}, {0x8a, 0x0, 0x1, '\x00', 0x7f}, {0x6, 0x1, 0x3, '\x00', 0x4}, {0x9, 0x6, 0x8, '\x00', 0x3}, {0xc, 0xe, 0xfc, '\x00', 0xc0}, {0x2, 0x7, 0x4, '\x00', 0xd}, {0x7, 0x5, 0x3, '\x00', 0x7}, {0x2a, 0xf9, 0x1, '\x00', 0xc8}, {0x8, 0x25, 0x4, '\x00', 0x6}, {0xf, 0x8, 0x1, '\x00', 0xfd}]}}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi2\x00', 0xaa42, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x1a, 0x0, 0x1, [@nested={0xc, 0x47, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x7e}]}]}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000008c0)={'das16m1\x00', [0x401, 0x7, 0x7c3f, 0x5, 0xfb31, 0x3, 0x239, 0x6, 0x3, 0x5, 0xff, 0xc, 0x1, 0xb, 0x6, 0xc, 0x57, 0x2, 0x3, 0xf, 0x224a, 0x7f, 0x5, 0x8, 0x6, 0x3, 0x1a7, 0x9, 0xdb0, 0x6, 0x1]}) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000280)=0x4) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7f630100000000000000140000000e0005000000000000000100000008000000000000f73b9f76c637d70000ff070000"], 0x44}}, 0x4004811) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r11 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) dup(r11) 14.625067091s ago: executing program 5 (id=669): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x33, &(0x7f0000001240)=[{0x1f, '\x00', @data=0xc, 0x7}, {0x6, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) 14.537861316s ago: executing program 5 (id=670): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbc, 0x0, 0x7}) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@rdmsr={0x66, 0x18, {0x857}}], 0x18}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='wlan0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010000119c1000b000300000000000000f36f26b1993fa8a8f9705f3584f2dc0b19e9cb04b22581c6a4e09b40107dd6de031b0300000000000000e5386be2722727dc954b9c4dbf0a000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c0005800500040001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 14.474995687s ago: executing program 5 (id=672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x42) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000580)) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0xe) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', r6, 0x29, 0x1, 0x0, 0x8000, 0x21, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0x8, 0x9, 0x6}}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xa, 0xa}, {0x0, 0x6}, {0x6, 0xa}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8080) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0xc0089364, &(0x7f00000000c0)=0x4) write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r9 = dup3(r0, r0, 0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x101400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="10002dbd7000fedbdf256500000008000300", @ANYRES32=r12, @ANYBLOB="0c0099000d000000450000000800010000160000"], 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x40081) accept$netrom(r4, &(0x7f0000000500)={{0x3, @netrom}, [@bcast, @bcast, @rose, @bcast, @null, @netrom, @null, @rose]}, &(0x7f00000003c0)=0x48) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000005400010026bd7001ffdbdf2507000000", @ANYRES32=r13, @ANYBLOB="20000100", @ANYRES32=r13, @ANYBLOB="01020400e002000200000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20008011}, 0x4040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r9, 0x942e, 0x0) 14.407313996s ago: executing program 5 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x8002000a, 0x804, 0x407, 0xf, 0x120000, 0x100000005, 0x0, 0x8, 0x8000000000000001, 0x200000000000002, 0x0, 0x102, 0x3, 0xffffffffffffffff], 0x8000000, 0x1203}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0xd1, 0x82, '\x00', 0x1}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) sysinfo(&(0x7f0000000000)=""/196) 14.187097068s ago: executing program 5 (id=675): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x482080, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000340), &(0x7f0000000380)={'L-', 0x3}, 0x16, 0x3) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSGCAUSE(r4, 0x89e0, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x48a3b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000003c0)={0x1, 0x8001}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x1403, 0x400, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x60}}, 0x10) 14.186848085s ago: executing program 5 (id=676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 5.377776019s ago: executing program 4 (id=772): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040']) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES8=r5, @ANYRES64=r4, @ANYRESOCT=r6], 0xe8}}, 0x4000000) 5.078479249s ago: executing program 4 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x40000000) syz_usb_connect$midi(0x0, 0x33, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x3, 0x80, 0x92, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x40, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x40, 0x1, [{0x0, 0xe}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x4, 0x9, 0x81}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xe8, 0x6, 0x2, 0x20}, 0x3f, &(0x7f00000000c0)={0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x5, 0x0, 0x1000, [0x0, 0xf, 0xff0f, 0xffc0cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "69ec48acbaab86b8555b2d59bf40bf35"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x5, 0x5}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41f}}]}) 3.835776134s ago: executing program 0 (id=789): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x3, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close(r0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') (async) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) 3.752989023s ago: executing program 0 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) r1 = socket$inet6(0xa, 0x3, 0xff) sendto(r1, 0x0, 0x0, 0x4004014, &(0x7f0000000000)=@nl=@unspec, 0x80) 3.752778282s ago: executing program 0 (id=791): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ptype\x00') r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x18}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) socket(0xf, 0x5, 0x7fffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x7, 0x1000, 0x2000, &(0x7f00009b2000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='net/ptype\x00') (async) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x18}}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) (async) socket(0xf, 0x5, 0x7fffffff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x7, 0x1000, 0x2000, &(0x7f00009b2000/0x2000)=nil}) (async) 3.752368994s ago: executing program 0 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'batadv_slave_1\x00', &(0x7f0000000540)=@ethtool_cmd={0x1e, 0xdd, 0x8394, 0xfa0d, 0x6, 0xfc, 0x2, 0xa, 0x5, 0x11, 0x5, 0x2, 0xb49d, 0xfa, 0x0, 0x10, [0x5, 0x8]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_read_data_block_size={{0x6}, {0x2, 0x401, 0x6, 0xc9}}}}, 0xd) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r4 = socket(0x28, 0x801, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000004c0)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x9, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10010000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.64530547s ago: executing program 0 (id=793): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r1, 0x40045431, &(0x7f0000000040)) ioctl$EVIOCGREP(r0, 0x80084523, &(0x7f0000001f40)=""/231) r2 = io_uring_setup(0x6396, &(0x7f0000000000)={0x0, 0xc977, 0x100, 0x0, 0x2e4}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000300)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x35) 3.642831143s ago: executing program 0 (id=795): request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0xfffffffffffffffd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000506010100000000000000000a0000010900020073797a31000000000900030073797a32000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x2004c045}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) 1.846286626s ago: executing program 4 (id=817): syz_emit_vhci(&(0x7f000001b140)=ANY=[@ANYBLOB="043506aa"], 0x9) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a40), 0x4a0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000002a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a80040004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x40) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000100)=0x8) 1.846090964s ago: executing program 4 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80080c4}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x40402) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000020601010000000000000000010000000c00078005001500efffffff050005000a0000000900020073797a3000000000050004000100000005000100060000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000102c0)={0x0, 0x19, 0x8, &(0x7f0000010280)={0x1d, "048cfc7619a6c3ee13cc20cf790e25cf0d3ef2d4e8b51d6e3ff16d6ce6b5e5343c"}}) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000040), 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='team_slave_0\x00', 0x10) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000020, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc010) 1.165880118s ago: executing program 3 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESHEX=r1]) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 1.165474188s ago: executing program 3 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="010029bd7000fcdbdf25140000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x240c0881}, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000126bd700000", @ANYRESDEC=r3, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="0800010003000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000c, 0x12, r2, 0x100000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x525080) ioctl$DRM_IOCTL_AGP_ALLOC(r10, 0xc0206434, &(0x7f0000000200)={0x5, 0x0, 0x10001}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r8, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r11, 0x0, 0x0}, 0x10) (rerun: 64) 1.090918197s ago: executing program 3 (id=827): fsopen(&(0x7f0000001240)='nfs4\x00', 0x1) (async) r0 = fsopen(&(0x7f0000001240)='nfs4\x00', 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8083) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) 1.089741683s ago: executing program 3 (id=828): syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.080523298s ago: executing program 3 (id=829): r0 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r1 = dup(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x90}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="d002000000000000", @ANYRES64=0x0, @ANYBLOB="0300000000000000010000000000000009000000000000006b0400000000000d0000010009000000010000000000000000000000000000000000050000000000000047b3f066d8edcc587bdca559fd9113080000000000000008000000b200000002000000004000000500"/123, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0500000009000000000000000200000000000000ff0000000000000021020000000000002d42d54e49c56a9a707070f00884a26d000b180034a64579dbd1a7b153f13a2900cad7557700bcfa32b3bb8dacacbee17d6b6e6823cf290fc8c0229c631064eea98b06966bdec5e936dd5529c9384dcdfbcc826e3d7f3dcd4a78aacf7eb93061a9b2041da1ce8b19eaefe300000000000000000016ebafaaee2774be9b0d6c6e7fab8dac06000000000000009b59d9d4c641849d5cc40ef4084f80aa0d08c0b984d02c27c570b6200312caef0266a29d96a77b9df0e22c5413c4572ad5ea588cb3810d3d22e1f2c95e90c1aab6b8ad0413e7041b35714d6e492dea411ad92d25210f07621eab07e4d445f98fd205fda749f92338f662631b6cb2cbf9726329261dce973001bbcb40d859b9933d370c39e560b3f33d3be3455b123fe26ed005981c36463b6670cecf48af931e8e88fd78d9032c42d14c3aaf21810318a1f3871883c07f4a2be04ea83e377d6191791913f6ee2e6adb68002624f86501a60e07cfae71aebc948865696445f9b9aa145509f4e237f9f5b22fa3af58d1f376857a1b3f290cf83ea743df5780c5edbb504d9b1b2a274f7f4025518c987fff64c25659f49bf380ed136d15869da1a8aea966734c701f2e11834b186bf48ec63e4221cae4d41fe0460108b20f4b8efb760059683cd085cb6e179a8ba40470e1fdf1b9f29481e576f68d59d90d5fe400fc62ff3d9f5143cf8c97d140ee6d99325501b51500fa11a1fce4c80b90bf1f11c474915abb5be03fa67056a3babededab37e267e5d00000000000000"], 0x2d0) execveat(r1, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 994.437154ms ago: executing program 3 (id=830): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x78, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x80, 0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x870}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3, 0x25, 0x744]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000805}, 0x8010) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x2, 0xbc15, 0x6, 0xca, 0x44e1, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x34}}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0xe000, 0x117000, 0x1}) 302.286µs ago: executing program 4 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendto$packet(r1, &(0x7f00000006c0)="05030502d3fc03000007008880050910112864afac0882e1437be1d16e732a94807b4c382da1c682bf95555ab239a6af76e9455f0c229b0bc5ebe524ae98ab45d6f3781b01cf5e152a727b15693cba087142e5cb01813fac26dc6048c2cf391b336dcd4a8650a8d97c13a35c4759219f45148653e682f9ee6a811c93440a32391efbe477f36ad5499221dd6ada798bfa847f90dbba3bb11c4655c9a0fe8c7d5fd3fb304b", 0xa4, 0x4004004, &(0x7f0000000140)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="110725bd7000fbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="165fb7e8c7e4617000ec00", @ANYRES16=r10, @ANYBLOB="ffff2abd7000f8dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 0s ago: executing program 4 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e28, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x10000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x40009d4) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}}}}}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newchain={0x24, 0x64, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x2}, {0x4, 0xe}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x801) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f0000000100)=""/213, 0xd5) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000040)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): 8] debugfs: 'hsr0' already exists in 'hsr' [ 53.800465][ T5938] Cannot create hsr debugfs directory [ 53.867246][ T5934] hsr_slave_0: entered promiscuous mode [ 53.870347][ T5934] hsr_slave_1: entered promiscuous mode [ 53.872727][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 53.874520][ T5934] Cannot create hsr debugfs directory [ 54.038104][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.057250][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.064487][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.086598][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.124645][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.130963][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.137039][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.142702][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.185299][ T5937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.190908][ T5937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.195098][ T5937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.199601][ T5937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.252661][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.272481][ T5934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.282379][ T5934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.298090][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.302334][ T5934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.308887][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.311173][ T5934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.324967][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.328186][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.341483][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.351696][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.354082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.358444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.360722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.378707][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.381035][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.409904][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.444285][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.455037][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.458269][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.467551][ T40] audit: type=1400 audit(1774148542.576:91): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.468848][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.489812][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.492129][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.529253][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.541233][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.543466][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.549703][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.551977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.605755][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.649551][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.656803][ T5931] veth0_vlan: entered promiscuous mode [ 54.666611][ T5931] veth1_vlan: entered promiscuous mode [ 54.693210][ T5931] veth0_macvtap: entered promiscuous mode [ 54.693575][ T5941] Bluetooth: hci0: command tx timeout [ 54.702102][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.710342][ T5931] veth1_macvtap: entered promiscuous mode [ 54.736144][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.749402][ T5938] veth0_vlan: entered promiscuous mode [ 54.752395][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.760209][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.763386][ T5937] veth0_vlan: entered promiscuous mode [ 54.767241][ T5941] Bluetooth: hci2: command tx timeout [ 54.767837][ T5938] veth1_vlan: entered promiscuous mode [ 54.776986][ T5936] Bluetooth: hci1: command tx timeout [ 54.779819][ T5941] Bluetooth: hci3: command tx timeout [ 54.782678][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.785545][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.794533][ T5937] veth1_vlan: entered promiscuous mode [ 54.797646][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.800401][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.834644][ T5938] veth0_macvtap: entered promiscuous mode [ 54.839288][ T5938] veth1_macvtap: entered promiscuous mode [ 54.862272][ T5934] veth0_vlan: entered promiscuous mode [ 54.880569][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.885674][ T5937] veth0_macvtap: entered promiscuous mode [ 54.892471][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.897928][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.901134][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.908413][ T5937] veth1_macvtap: entered promiscuous mode [ 54.913121][ T5934] veth1_vlan: entered promiscuous mode [ 54.923124][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.937064][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.948085][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.951631][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.958521][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.963015][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.966318][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.979292][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.993978][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.003966][ T5934] veth0_macvtap: entered promiscuous mode [ 55.010240][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.013778][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.021295][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.027535][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.030715][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.031546][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.041191][ T5934] veth1_macvtap: entered promiscuous mode [ 55.080723][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.083843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.106557][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.138901][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.151620][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.154588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.166531][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.171131][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.174778][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.193316][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.214590][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.219529][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.238906][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.242159][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.253605][ T6023] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5'. [ 55.260844][ T6023] Zero length message leads to an empty skb [ 55.269306][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.272497][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.348423][ T6028] program syz.3.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.392324][ T6033] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.587868][ T6040] FAT-fs (sr0): bogus number of reserved sectors [ 55.589873][ T6040] FAT-fs (sr0): Can't find a valid FAT filesystem [ 55.657199][ T5981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.673950][ T6044] syzkaller0: entered promiscuous mode [ 55.675708][ T6044] syzkaller0: entered allmulticast mode [ 55.679036][ T6046] netlink: 'syz.0.11': attribute type 12 has an invalid length. [ 55.681575][ T6046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11'. [ 55.688182][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 55.698810][ T6046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6046 comm=syz.0.11 [ 55.820242][ T5981] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 55.822955][ T5981] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.826105][ T5981] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 55.829053][ T6051] ======================================================= [ 55.829053][ T6051] WARNING: The mand mount option has been deprecated and [ 55.829053][ T6051] and is ignored by this kernel. Remove the mand [ 55.829053][ T6051] option from the mount to silence this warning. [ 55.829053][ T6051] ======================================================= [ 55.829121][ T6051] cgroup: name respecified [ 55.842496][ T5981] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.847505][ T5981] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 55.850490][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 55.853017][ T5981] usb 6-1: Product: syz [ 55.854329][ T5981] usb 6-1: Manufacturer: syz [ 55.870404][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 55.872593][ T5981] cdc_wdm 6-1:1.0: skipping garbage [ 55.877525][ T5981] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 55.879515][ T5981] cdc_wdm 6-1:1.0: Unknown control protocol [ 56.070907][ T5981] usb 6-1: USB disconnect, device number 2 [ 56.344709][ T6063] tipc: Started in network mode [ 56.348642][ T6063] tipc: Node identity 1ec3bd68fee3, cluster identity 4711 [ 56.351834][ T6063] tipc: Enabled bearer , priority 0 [ 56.376556][ T6063] syzkaller0: entered promiscuous mode [ 56.379486][ T6063] syzkaller0: entered allmulticast mode [ 56.381609][ T6063] tipc: Resetting bearer [ 56.394921][ T6062] tipc: Resetting bearer [ 56.516917][ T5935] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.672539][ T6066] netlink: 'syz.0.19': attribute type 21 has an invalid length. [ 56.675710][ T6066] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19'. [ 56.695295][ T5935] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 56.699172][ T5935] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.704974][ T5935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 56.708956][ T5935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.714564][ T5935] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 56.718787][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 56.721983][ T5935] usb 6-1: Product: syz [ 56.723187][ T6065] netlink: 'syz.0.19': attribute type 21 has an invalid length. [ 56.723320][ T5935] usb 6-1: Manufacturer: syz [ 56.728986][ T6065] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19'. [ 56.742468][ T5935] cdc_wdm 6-1:1.0: skipping garbage [ 56.745206][ T5935] cdc_wdm 6-1:1.0: skipping garbage [ 56.748905][ T5935] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 56.750849][ T5935] cdc_wdm 6-1:1.0: Unknown control protocol [ 56.767676][ T5941] Bluetooth: hci0: command tx timeout [ 56.857055][ T5941] Bluetooth: hci3: command tx timeout [ 56.857094][ T5936] Bluetooth: hci1: command tx timeout [ 56.859422][ T5941] Bluetooth: hci2: command tx timeout [ 56.994483][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 57.082763][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 57.086060][ T6077] nbd: nbd64 already in use [ 57.130650][ T6062] tipc: Disabling bearer [ 57.138291][ T6066] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19'. [ 57.141329][ T6065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19'. [ 57.224357][ T6086] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 57.303778][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 57.304850][ T5301] usb 6-1: USB disconnect, device number 3 [ 57.306646][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 57.311509][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 57.423014][ T6102] Bluetooth: MGMT ver 1.23 [ 57.426922][ T40] kauditd_printk_skb: 97 callbacks suppressed [ 57.426933][ T40] audit: type=1400 audit(1774148545.526:189): avc: denied { ioctl } for pid=6101 comm="syz.0.30" path="socket:[11348]" dev="sockfs" ino=11348 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.439180][ T6098] syzkaller0: entered promiscuous mode [ 57.441382][ T6098] syzkaller0: entered allmulticast mode [ 57.448587][ T831] hid-generic 0005:4C4A:0C6E.0002: unknown main item tag 0x0 [ 57.452853][ T40] audit: type=1400 audit(1774148545.526:190): avc: denied { read } for pid=6101 comm="syz.0.30" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.460789][ T831] hid-generic 0005:4C4A:0C6E.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 57.465057][ T40] audit: type=1400 audit(1774148545.526:191): avc: denied { open } for pid=6101 comm="syz.0.30" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.472587][ T40] audit: type=1400 audit(1774148545.526:192): avc: denied { ioctl } for pid=6101 comm="syz.0.30" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.481856][ T40] audit: type=1400 audit(1774148545.526:193): avc: denied { bind } for pid=6101 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.488355][ T40] audit: type=1400 audit(1774148545.526:194): avc: denied { write } for pid=6101 comm="syz.0.30" path="socket:[11349]" dev="sockfs" ino=11349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.707559][ T6122] fuse: Bad value for 'rootmode' [ 57.735483][ T40] audit: type=1400 audit(1774148545.836:195): avc: denied { setopt } for pid=6121 comm="syz.1.35" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.883519][ T40] audit: type=1400 audit(1774148545.986:196): avc: denied { read } for pid=6127 comm="syz.0.37" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.891923][ T40] audit: type=1400 audit(1774148545.986:197): avc: denied { open } for pid=6127 comm="syz.0.37" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.899270][ T40] audit: type=1400 audit(1774148545.996:198): avc: denied { ioctl } for pid=6127 comm="syz.0.37" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 58.041282][ T6132] netlink: 64 bytes leftover after parsing attributes in process `syz.0.39'. [ 58.092987][ T6136] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 58.100852][ T5936] Bluetooth: hci3: Invalid handle: 0x2ec9 > 0x0eff [ 58.107519][ T6136] tmpfs: Group quota inode hardlimit too large. [ 58.188855][ T6141] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 58.207440][ T5981] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.254580][ T6146] xt_nfacct: accounting object `syz0' does not exist [ 58.356934][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 58.360101][ T5981] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.363271][ T5981] usb 6-1: config 0 has no interfaces? [ 58.365092][ T5981] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 58.368758][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.373435][ T5981] usb 6-1: config 0 descriptor?? [ 58.847451][ T5944] Bluetooth: hci0: command tx timeout [ 58.927137][ T5936] Bluetooth: hci3: command tx timeout [ 58.927165][ T5941] Bluetooth: hci1: command tx timeout [ 58.929521][ T5944] Bluetooth: hci2: command tx timeout [ 58.938845][ T6175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6175 comm=syz.1.38 [ 58.958659][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.156313][ T6177] misc userio: Begin command sent, but we're already running [ 59.197885][ T6179] binder: 6178:6179 ioctl 40045612 200000000200 returned -22 [ 59.437129][ T6184] syzkaller0: entered promiscuous mode [ 59.438827][ T6184] syzkaller0: entered allmulticast mode [ 59.519714][ T6187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6187 comm=syz.3.57 [ 59.679121][ T6196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.683652][ T6196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.687484][ T6196] bond0 (unregistering): Released all slaves [ 59.812387][ T6201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.364116][ T6219] orangefs: client-core tried to read wrong size [ 60.470311][ T6224] overlayfs: conflicting lowerdir path [ 60.654598][ T6237] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET) [ 60.907854][ T6261] netlink: 'syz.2.80': attribute type 21 has an invalid length. [ 60.911269][ T6261] __nla_validate_parse: 5 callbacks suppressed [ 60.911301][ T6261] netlink: 156 bytes leftover after parsing attributes in process `syz.2.80'. [ 60.924391][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 60.927014][ T5944] Bluetooth: hci0: command tx timeout [ 60.980416][ T5939] usb 6-1: USB disconnect, device number 4 [ 61.007003][ T5944] Bluetooth: hci1: command tx timeout [ 61.007409][ T5941] Bluetooth: hci2: command tx timeout [ 61.008803][ T5944] Bluetooth: hci3: command tx timeout [ 61.272056][ T6278] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 61.318669][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 61.330807][ T6284] team0: Failed to send options change via netlink (err -105) [ 61.333297][ T6284] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 61.336265][ T6284] team0: Port device team_slave_0 removed [ 61.445495][ T6287] syzkaller0: entered promiscuous mode [ 61.448022][ T6287] syzkaller0: entered allmulticast mode [ 61.496221][ T6289] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 61.502143][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'. [ 61.632886][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 61.636779][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 61.707577][ T6303] netlink: 'syz.3.97': attribute type 29 has an invalid length. [ 61.710666][ T6303] netlink: 'syz.3.97': attribute type 29 has an invalid length. [ 61.713547][ T6303] netlink: 500 bytes leftover after parsing attributes in process `syz.3.97'. [ 61.717235][ T6303] unsupported nla_type 58 [ 61.920620][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 61.928392][ T6314] bridge0: port 3(macvlan2) entered blocking state [ 61.930780][ T6314] bridge0: port 3(macvlan2) entered disabled state [ 61.933019][ T6314] macvlan2: entered allmulticast mode [ 61.945143][ T6314] macvlan2: left allmulticast mode [ 61.997370][ T6320] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 62.490310][ T6333] syzkaller0: entered promiscuous mode [ 62.492109][ T6333] syzkaller0: entered allmulticast mode [ 62.604958][ T40] kauditd_printk_skb: 92 callbacks suppressed [ 62.604969][ T40] audit: type=1400 audit(1774148550.706:291): avc: denied { ioctl } for pid=6334 comm="syz.1.104" path="socket:[12355]" dev="sockfs" ino=12355 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.615135][ T40] audit: type=1400 audit(1774148550.706:292): avc: denied { write } for pid=6334 comm="syz.1.104" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 62.832951][ T40] audit: type=1400 audit(1774148550.936:293): avc: denied { read } for pid=6342 comm="syz.1.106" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.840167][ T40] audit: type=1400 audit(1774148550.936:294): avc: denied { open } for pid=6342 comm="syz.1.106" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.950649][ T6347] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 62.953631][ T6347] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 62.959991][ T6347] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 62.960020][ T40] audit: type=1400 audit(1774148551.066:295): avc: denied { firmware_load } for pid=6346 comm="syz.3.107" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.012074][ T40] audit: type=1400 audit(1774148551.116:296): avc: denied { connect } for pid=6346 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.023230][ T40] audit: type=1400 audit(1774148551.116:297): avc: denied { setopt } for pid=6346 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.050488][ T40] audit: type=1400 audit(1774148551.156:298): avc: denied { prog_load } for pid=6355 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.118476][ T6361] tipc: Started in network mode [ 63.120547][ T6361] tipc: Node identity , cluster identity 4711 [ 63.122970][ T6361] tipc: Failed to set node id, please configure manually [ 63.125798][ T6361] tipc: Enabling of bearer rejected, failed to enable media [ 63.229517][ T40] audit: type=1400 audit(1774148551.336:299): avc: denied { ioctl } for pid=6365 comm="syz.1.113" path="socket:[13343]" dev="sockfs" ino=13343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.247524][ T40] audit: type=1326 audit(1774148551.356:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.0.112" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16839c799 code=0x0 [ 63.276344][ T6369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=6369 comm=syz.1.114 [ 63.281845][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'. [ 63.326337][ T6371] futex_wake_op: syz.1.115 tries to shift op by -1; fix this program [ 63.345495][ T6367] syzkaller0: entered promiscuous mode [ 63.347742][ T6367] syzkaller0: entered allmulticast mode [ 63.510426][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 63.567069][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 63.567440][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.623859][ T6385] netlink: 'syz.2.120': attribute type 9 has an invalid length. [ 63.626439][ T6385] netlink: 'syz.2.120': attribute type 11 has an invalid length. [ 63.629295][ T6385] netlink: 'syz.2.120': attribute type 12 has an invalid length. [ 63.633174][ T6385] program syz.2.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.667655][ T6385] nbd: nbd64 already in use [ 63.671876][ T5950] block nbd64: NBD_DISCONNECT [ 63.779566][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 63.833764][ T6395] program syz.2.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.971012][ T6409] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(3) [ 63.973174][ T6409] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.976539][ T6409] vhci_hcd vhci_hcd.0: Device attached [ 63.976891][ T6406] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(0) [ 63.980499][ T6406] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.982881][ T6406] vhci_hcd vhci_hcd.0: Device attached [ 63.990797][ T6411] vhci_hcd: connection closed [ 63.992048][ T12] vhci_hcd vhci_hcd.3: stop threads [ 63.996492][ T12] vhci_hcd vhci_hcd.3: release socket [ 63.999390][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 64.438806][ T6417] syz.2.127 (6417): drop_caches: 2 [ 64.487000][ T5801] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 64.499482][ T6410] vhci_hcd: connection closed [ 64.500665][ T46] vhci_hcd vhci_hcd.3: stop threads [ 64.504162][ T46] vhci_hcd vhci_hcd.3: release socket [ 64.506603][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 64.515976][ T6429] batadv_slave_1: entered promiscuous mode [ 64.523753][ T6428] batadv_slave_1: left promiscuous mode [ 64.549447][ T6427] mmap: syz.0.130 (6427) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.557772][ T5801] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 64.561482][ T5801] usb 43-1: enqueue for inactive port 0 [ 64.567957][ T6427] overlayfs: failed to resolve './file1': -2 [ 64.580995][ T6433] sctp: [Deprecated]: syz.3.132 (pid 6433) Use of int in maxseg socket option. [ 64.580995][ T6433] Use struct sctp_assoc_value instead [ 64.626964][ T5801] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 64.733069][ T6442] netlink: 'syz.3.135': attribute type 5 has an invalid length. [ 64.741944][ T6442] ip6erspan0: entered promiscuous mode [ 64.792770][ T6446] input: syz1 as /devices/virtual/input/input6 [ 64.861108][ T6448] syzkaller0: entered promiscuous mode [ 64.865135][ T6448] syzkaller0: entered allmulticast mode [ 65.163929][ T6466] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 65.400939][ T6482] binder_alloc: binder_alloc_mmap_handler: 6481 200000ff9000-200000ffb000 already mapped failed -16 [ 65.538105][ T6487] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 65.540349][ T6487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.542943][ T6487] vhci_hcd vhci_hcd.0: Device attached [ 65.547829][ T6488] vhci_hcd: cannot find the pending unlink 6 [ 65.555016][ T6488] vhci_hcd: connection closed [ 65.556722][ T93] vhci_hcd vhci_hcd.3: stop threads [ 65.562014][ T93] vhci_hcd vhci_hcd.3: release socket [ 65.564431][ T93] vhci_hcd vhci_hcd.3: disconnect device [ 65.648189][ T5801] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.808259][ T5801] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 65.810927][ T5801] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 65.814253][ T5801] usb 7-1: config 0 interface 0 has no altsetting 0 [ 65.828107][ T5801] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 65.830975][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 65.833554][ T5801] usb 7-1: Product: syz [ 65.834943][ T5801] usb 7-1: Manufacturer: syz [ 65.836460][ T5801] usb 7-1: SerialNumber: syz [ 65.840625][ T5801] usb 7-1: config 0 descriptor?? [ 65.844388][ T5801] hub 7-1:0.0: bad descriptor, ignoring hub [ 65.846341][ T5801] hub 7-1:0.0: probe with driver hub failed with error -5 [ 65.850894][ T5801] usb 7-1: selecting invalid altsetting 0 [ 66.048061][ T6480] __nla_validate_parse: 6 callbacks suppressed [ 66.048071][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 66.053743][ T6480] syzkaller0: entered promiscuous mode [ 66.055505][ T6480] syzkaller0: entered allmulticast mode [ 66.177035][ T5801] usb 7-1: USB disconnect, device number 2 [ 66.319979][ T6499] netlink: 108 bytes leftover after parsing attributes in process `À°ý£ [ 66.319979][ T6499] ú Ý!Ù'. [ 66.325000][ T6499] netlink: 108 bytes leftover after parsing attributes in process `À°ý£ [ 66.325000][ T6499] ú Ý!Ù'. [ 66.329567][ T6499] netlink: 84 bytes leftover after parsing attributes in process `À°ý£ [ 66.329567][ T6499] ú Ý!Ù'. [ 66.336918][ T71] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.487393][ T71] usb 8-1: Using ep0 maxpacket: 16 [ 66.491057][ T71] usb 8-1: config 1 interface 0 altsetting 60 bulk endpoint 0x1 has invalid maxpacket 1024 [ 66.494286][ T71] usb 8-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.500509][ T71] usb 8-1: config 1 interface 0 has no altsetting 0 [ 66.505152][ T71] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 66.508983][ T71] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.512174][ T71] usb 8-1: Product: à ¾ [ 66.514001][ T71] usb 8-1: Manufacturer: 昫橓䬞ᇑꂰ潠票èµà¢ á›á ¥ç¯¿å¥…ç‡ï ‚ﾽꗥ洔ⲋ鳮兰려㲮ㄣ觵翪ë‡á—Œì´ ì“ë–⚰ﳢࢥ氽仆î”掠ɀ깲쾟傞朜ì¹ãº®Û‹í•¶ [ 66.528215][ T71] usb 8-1: SerialNumber: Т [ 66.541147][ T6493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.754301][ T71] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 60 proto 1 vid 0x0525 pid 0xA4A8 [ 66.755330][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.758913][ T71] usb 8-1: USB disconnect, device number 2 [ 66.765618][ T71] usblp0: removed [ 66.776952][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.916974][ T5939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.936990][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 66.941211][ T24] usb 6-1: config index 0 descriptor too short (expected 8466, got 18) [ 66.944576][ T24] usb 6-1: config 94 has too many interfaces: 130, using maximum allowed: 32 [ 66.948396][ T24] usb 6-1: config 94 has an invalid descriptor of length 77, skipping remainder of the config [ 66.952654][ T24] usb 6-1: config 94 has 0 interfaces, different from the descriptor's value: 130 [ 66.959228][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 66.962993][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.966098][ T24] usb 6-1: Product: syz [ 66.967789][ T24] usb 6-1: Manufacturer: syz [ 66.969705][ T24] usb 6-1: SerialNumber: syz [ 67.068624][ T5939] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.072132][ T5939] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 67.076240][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.080136][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 67.084575][ T5939] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 67.092128][ T5939] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.095911][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.099366][ T5939] usb 5-1: Product: syz [ 67.101142][ T5939] usb 5-1: Manufacturer: syz [ 67.107761][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 67.109802][ T5939] cdc_wdm 5-1:1.0: skipping garbage [ 67.113255][ T5939] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 67.115737][ T5939] cdc_wdm 5-1:1.0: Unknown control protocol [ 67.177711][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.181998][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.185357][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.191966][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.195361][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.198274][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.201620][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.206946][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.209978][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.212816][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.235427][ T24] usb 6-1: USB disconnect, device number 5 [ 67.307532][ T5801] usb 5-1: USB disconnect, device number 2 [ 67.433541][ T6546] syzkaller0: entered promiscuous mode [ 67.435768][ T6546] syzkaller0: entered allmulticast mode [ 67.501524][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.503907][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.517870][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.526771][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.550376][ T6568] input: syz0 as /devices/virtual/input/input7 [ 67.557574][ T6572] binder: 6561:6572 ioctl c0306201 200000000680 returned -14 [ 67.648925][ T6580] netlink: 56 bytes leftover after parsing attributes in process `syz.0.171'. [ 67.679811][ T40] kauditd_printk_skb: 30782 callbacks suppressed [ 67.679828][ T40] audit: type=1326 audit(1774148555.786:31083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6581 comm="syz.0.174" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc16839c799 code=0x0 [ 67.761268][ T40] audit: type=1400 audit(1774148555.866:31084): avc: denied { ioctl } for pid=6586 comm="syz.2.175" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.792052][ T40] audit: type=1400 audit(1774148555.896:31085): avc: denied { create } for pid=6590 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 67.805647][ T6591] warning: `syz.2.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.809333][ T40] audit: type=1400 audit(1774148555.906:31086): avc: denied { ioctl } for pid=6590 comm="syz.2.177" path="socket:[15527]" dev="sockfs" ino=15527 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 67.852962][ T40] audit: type=1400 audit(1774148555.956:31087): avc: denied { getopt } for pid=6598 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 67.883998][ T40] audit: type=1400 audit(1774148555.986:31088): avc: denied { add_name } for pid=6597 comm="syz.3.179" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.898520][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.899806][ T40] audit: type=1400 audit(1774148555.986:31089): avc: denied { create } for pid=6597 comm="syz.3.179" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.901928][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.909579][ T40] audit: type=1400 audit(1774148555.986:31090): avc: denied { associate } for pid=6597 comm="syz.3.179" name="cpuset.memory_pressure_enabled" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.913335][ T6599] netlink: 'syz.3.179': attribute type 12 has an invalid length. [ 67.922186][ T40] audit: type=1400 audit(1774148555.996:31091): avc: denied { read append open } for pid=6597 comm="syz.3.179" path="/51/file0/cpuset.memory_pressure_enabled" dev="9p" ino=79954047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.936329][ T40] audit: type=1400 audit(1774148556.006:31092): avc: denied { mounton } for pid=6598 comm="syz.2.180" path="/49/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 67.963354][ T6609] netlink: 'syz.1.182': attribute type 21 has an invalid length. [ 67.982651][ T6609] netlink: 156 bytes leftover after parsing attributes in process `syz.1.182'. [ 67.992454][ T6615] netlink: 'syz.1.182': attribute type 21 has an invalid length. [ 67.995809][ T6615] netlink: 156 bytes leftover after parsing attributes in process `syz.1.182'. [ 68.093393][ T6619] syzkaller0: entered promiscuous mode [ 68.095383][ T6619] syzkaller0: entered allmulticast mode [ 68.636733][ T6634] process 'syz.1.189' launched './file1' with NULL argv: empty string added [ 68.953696][ T6643] syzkaller0: entered promiscuous mode [ 68.955579][ T6643] syzkaller0: entered allmulticast mode [ 69.045365][ T93] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.174401][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.183916][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.197891][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.201982][ T93] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.202637][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.210857][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.288475][ T93] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.366698][ T6650] chnl_net:caif_netlink_parms(): no params data found [ 69.419782][ T6666] 9pnet_virtio: no channels available for device syz [ 69.422111][ T6664] 9pnet_virtio: no channels available for device syz [ 69.445721][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.448930][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.452047][ T6650] bridge_slave_0: entered allmulticast mode [ 69.456045][ T6650] bridge_slave_0: entered promiscuous mode [ 69.460990][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.464252][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.467489][ T6650] bridge_slave_1: entered allmulticast mode [ 69.471508][ T6650] bridge_slave_1: entered promiscuous mode [ 69.543038][ T6650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.551026][ T6650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.554044][ T93] bridge_slave_1: left allmulticast mode [ 69.557027][ T93] bridge_slave_1: left promiscuous mode [ 69.559899][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.569822][ T93] bridge_slave_0: left allmulticast mode [ 69.571650][ T93] bridge_slave_0: left promiscuous mode [ 69.573485][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.672810][ T6681] evm: overlay not supported [ 69.918134][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.923402][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.927951][ T93] bond0 (unregistering): Released all slaves [ 69.968768][ T6650] team0: Port device team_slave_0 added [ 69.973573][ T6650] team0: Port device team_slave_1 added [ 69.988927][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.991201][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.003084][ T6650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.010870][ T6650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.014047][ T6650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.022407][ T6650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.033667][ T93] tipc: Left network mode [ 70.048201][ T6690] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 70.049613][ T6650] hsr_slave_0: entered promiscuous mode [ 70.054490][ T6650] hsr_slave_1: entered promiscuous mode [ 70.056649][ T6650] debugfs: 'hsr0' already exists in 'hsr' [ 70.058622][ T6650] Cannot create hsr debugfs directory [ 70.108362][ T6690] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 70.136747][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.258759][ T6650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.269621][ T6650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.278785][ T6650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.318136][ T6650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.326778][ T6709] ipt_REJECT: ECHOREPLY no longer supported. [ 70.384974][ T6717] ip6t_rpfilter: unknown options [ 70.426958][ T93] hsr_slave_0: left promiscuous mode [ 70.429923][ T6719] openvswitch: netlink: Key 26 has unexpected len 12 expected 16 [ 70.456502][ T93] hsr_slave_1: left promiscuous mode [ 70.459970][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.462482][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.465741][ T93] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.468815][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.480521][ T93] veth1_macvtap: left promiscuous mode [ 70.482539][ T93] veth0_macvtap: left promiscuous mode [ 70.484412][ T93] veth1_vlan: left promiscuous mode [ 70.486348][ T93] veth0_vlan: left promiscuous mode [ 70.623985][ T93] team0 (unregistering): Port device team_slave_1 removed [ 70.695643][ T6729] syzkaller0: entered promiscuous mode [ 70.698500][ T6729] syzkaller0: entered allmulticast mode [ 70.729607][ T6650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.741504][ T6650] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.746693][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.749783][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.762636][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.765141][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.850875][ T6741] netlink: 180 bytes leftover after parsing attributes in process `syz.0.212'. [ 70.900518][ T6650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.057697][ T6650] veth0_vlan: entered promiscuous mode [ 71.065006][ T6650] veth1_vlan: entered promiscuous mode [ 71.094658][ T6650] veth0_macvtap: entered promiscuous mode [ 71.100025][ T6650] veth1_macvtap: entered promiscuous mode [ 71.108867][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.114289][ T6650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.122771][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.125613][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.132106][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.135002][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.159869][ T5944] Bluetooth: hci2: Malformed Event: 0x13 [ 71.193985][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.196768][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.214815][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.217654][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.247511][ T5944] Bluetooth: hci0: command tx timeout [ 71.297212][ T6777] netlink: 7 bytes leftover after parsing attributes in process `syz.4.203'. [ 71.303458][ T6777] binder: BINDER_SET_CONTEXT_MGR already set [ 71.305991][ T6777] binder: 6776:6777 ioctl 4018620d 200000004a80 returned -16 [ 71.312208][ T6777] hfsplus: unable to find HFS+ superblock [ 71.340607][ T6779] SELinux: failed to load policy [ 71.370807][ T6782] Bluetooth: MGMT ver 1.23 [ 71.374363][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.595921][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 71.612486][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 71.915673][ T6797] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 72.006110][ T6797] kvm: kvm [6796]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb707 [ 72.017005][ T5301] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.019767][ T6797] kvm_intel: kvm [6796]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xafbe [ 72.052506][ T6798] netlink: 44 bytes leftover after parsing attributes in process `syz.4.221'. [ 72.146960][ T5301] usb 5-1: device descriptor read/64, error -71 [ 72.397184][ T5301] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.410625][ T6804] ip6gretap1: entered promiscuous mode [ 72.412885][ T6804] ip6gretap1: entered allmulticast mode [ 72.510415][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 72.546992][ T5301] usb 5-1: device descriptor read/64, error -71 [ 72.667845][ T5301] usb usb5-port1: attempt power cycle [ 72.828195][ T6819] zonefs (loop3) ERROR: Not a zoned block device [ 72.855479][ T6819] syzkaller0: entered promiscuous mode [ 72.857900][ T6819] syzkaller0: entered allmulticast mode [ 73.006969][ T5301] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.037343][ T5301] usb 5-1: device descriptor read/8, error -71 [ 73.286924][ T5301] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 73.317266][ T5301] usb 5-1: device descriptor read/8, error -71 [ 73.431565][ T5301] usb usb5-port1: unable to enumerate USB device [ 73.741442][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 73.741454][ T40] audit: type=1400 audit(1774148561.846:31126): avc: denied { watch } for pid=6821 comm="syz.3.228" path="/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.758506][ T40] audit: type=1400 audit(1774148561.846:31127): avc: denied { watch_sb watch_reads } for pid=6821 comm="syz.3.228" path="/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.800603][ T6824] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 73.833488][ T6827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6827 comm=syz.3.230 [ 73.840388][ T40] audit: type=1400 audit(1774148561.956:31128): avc: denied { read } for pid=6826 comm="syz.3.230" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.848416][ T40] audit: type=1400 audit(1774148561.956:31129): avc: denied { open } for pid=6826 comm="syz.3.230" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 73.949199][ T6832] netlink: 9 bytes leftover after parsing attributes in process `syz.3.232'. [ 73.952237][ T6832] 0·: renamed from hsr0 (while UP) [ 73.955575][ T6832] 0·: entered allmulticast mode [ 73.957938][ T6832] hsr_slave_0: entered allmulticast mode [ 73.961224][ T6832] hsr_slave_1: entered allmulticast mode [ 73.966682][ T6832] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 74.209349][ T6801] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 74.221083][ T6837] comedi comedi2: comedi_config --init_data is deprecated [ 74.224318][ T40] audit: type=1400 audit(1774148562.326:31130): avc: denied { map } for pid=6836 comm="syz.3.234" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 74.294407][ T6844] loop0: detected capacity change from 0 to 16384 [ 74.338095][ T6844] loop0: detected capacity change from 16384 to 16383 [ 74.432315][ T40] audit: type=1400 audit(1774148562.536:31131): avc: denied { connect } for pid=6845 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.761260][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.241'. [ 74.765253][ T40] audit: type=1400 audit(1774148562.866:31132): avc: denied { wake_alarm } for pid=6855 comm="syz.4.240" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.767397][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.241'. [ 74.836527][ T40] audit: type=1400 audit(1774148562.936:31133): avc: denied { shutdown } for pid=6865 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.880394][ T40] audit: type=1400 audit(1774148562.986:31134): avc: denied { shutdown } for pid=6871 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.919532][ T40] audit: type=1400 audit(1774148563.026:31135): avc: denied { write } for pid=6862 comm="syz.3.242" name="igmp" dev="proc" ino=4026533227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.992901][ T6880] netlink: 'syz.0.245': attribute type 21 has an invalid length. [ 75.050965][ T6881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 75.114540][ T6901] netlink: 'syz.4.248': attribute type 3 has an invalid length. [ 75.181998][ T6906] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 75.190937][ T6906] CIFS: Unable to determine destination address [ 75.244782][ T6905] afs: Unknown parameter '?' [ 75.484948][ T6933] openvswitch: netlink: Message has 4 unknown bytes. [ 75.488380][ T6933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.501641][ T6934] netlink: 'syz.0.256': attribute type 47 has an invalid length. [ 75.508169][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.516110][ T6936] netlink: 'syz.3.258': attribute type 83 has an invalid length. [ 75.520077][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 75.523055][ T6936] sit0: Master is either lo or non-ether device [ 75.616201][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.260'. [ 75.647498][ T10] usb 9-1: device descriptor read/64, error -71 [ 75.896920][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 75.978517][ T6953] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 76.010669][ T6956] netlink: 'syz.3.264': attribute type 14 has an invalid length. [ 76.014713][ T6956] netlink: 'syz.3.264': attribute type 14 has an invalid length. [ 76.037045][ T10] usb 9-1: device descriptor read/64, error -71 [ 76.157113][ T10] usb usb9-port1: attempt power cycle [ 76.290424][ T6960] tmpfs: Too small a size for current use [ 76.292317][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.294657][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.507294][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 76.528756][ T10] usb 9-1: device descriptor read/8, error -71 [ 76.767249][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 76.800999][ T10] usb 9-1: device descriptor read/8, error -71 [ 76.823205][ T6984] openvswitch: netlink: EtherType 0 is less than min 600 [ 76.917182][ T10] usb usb9-port1: unable to enumerate USB device [ 77.742073][ T7003] syzkaller0: entered promiscuous mode [ 77.744442][ T7003] syzkaller0: entered allmulticast mode [ 78.154354][ T7012] xfrm1: entered allmulticast mode [ 78.158789][ T7012] capability: warning: `syz.3.283' uses deprecated v2 capabilities in a way that may be insecure [ 78.251886][ T7020] __nla_validate_parse: 3 callbacks suppressed [ 78.251902][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.263343][ T7020] xfrm2: entered promiscuous mode [ 78.265476][ T7020] xfrm2: entered allmulticast mode [ 78.268169][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.272461][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.276639][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.282728][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.286463][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.290838][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.295330][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.298841][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 78.303380][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 79.123459][ T7028] 9pnet_virtio: no channels available for device 127.0.0.1 [ 79.280885][ T7032] 9p: Invalid uid '0x00000000ffffffff' [ 79.283789][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 79.283802][ T40] audit: type=1400 audit(1774148567.386:31162): avc: denied { write } for pid=7031 comm="syz.4.291" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.264333][ T40] audit: type=1400 audit(1774148568.366:31163): avc: denied { append } for pid=7044 comm="syz.4.294" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.276432][ T40] audit: type=1400 audit(1774148568.376:31164): avc: denied { map } for pid=7044 comm="syz.4.294" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.456121][ T6993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.618621][ T40] audit: type=1400 audit(1774148568.726:31165): avc: denied { setopt } for pid=7027 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.630633][ T7067] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 80.687098][ T40] audit: type=1400 audit(1774148568.796:31166): avc: denied { write } for pid=7027 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.833806][ T40] audit: type=1400 audit(1774148568.936:31167): avc: denied { mount } for pid=7084 comm="syz.3.308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 80.841822][ T7085] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.844939][ T40] audit: type=1400 audit(1774148568.946:31168): avc: denied { mounton } for pid=7084 comm="syz.3.308" path="/117/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.852787][ T40] audit: type=1400 audit(1774148568.956:31169): avc: denied { mounton } for pid=7084 comm="syz.3.308" path="/117/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.861326][ T40] audit: type=1400 audit(1774148568.956:31170): avc: denied { read } for pid=7084 comm="syz.3.308" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 80.869150][ T40] audit: type=1400 audit(1774148568.956:31171): avc: denied { read } for pid=7084 comm="syz.3.308" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 82.186423][ T7154] SELinux: failed to load policy [ 82.386679][ T7168] capability: warning: `syz.0.326' uses 32-bit capabilities (legacy support in use) [ 82.667248][ T7207] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 82.781048][ T7217] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 83.070523][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 83.140822][ T7240] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 83.143689][ T7240] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 83.155007][ T7239] program syz.0.350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.160491][ T7240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 83.223658][ T841] IPVS: starting estimator thread 0... [ 83.237551][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 83.240539][ T1115] ata1.00: irq_stat 0x40000000 [ 83.246906][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 83.249520][ T1115] ata1.00: cmd 9f/01:00:00:3c:00/00:00:00:00:00/40 tag 28 [ 83.249520][ T1115] res 41/04:00:00:3c:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 83.255914][ T1115] ata1.00: status: { DRDY ERR } [ 83.261016][ T1115] ata1.00: error: { ABRT } [ 83.262583][ T1115] ata1.00: device reported invalid CHS sector 0 [ 83.295032][ T7258] ntfs3(loop4): try to read out of volume at offset 0x0 [ 83.307823][ T7249] IPVS: using max 22 ests per chain, 52800 per kthread [ 83.334138][ T7262] syz.0.356 uses old SIOCAX25GETINFO [ 83.338725][ T7262] __nla_validate_parse: 31 callbacks suppressed [ 83.338735][ T7262] netlink: 84 bytes leftover after parsing attributes in process `syz.0.356'. [ 83.345499][ T7263] netlink: 84 bytes leftover after parsing attributes in process `syz.0.356'. [ 83.409280][ T7265] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 83.429671][ T7265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.474625][ T7268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 83.530688][ T7270] netlink: 'syz.0.359': attribute type 1 has an invalid length. [ 83.598734][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 83.601444][ T1115] ata1: failed to read log page 10h (errno=-5) [ 83.603837][ T1115] ata1.00: exception Emask 0x1 SAct 0x20000000 SErr 0x0 action 0x0 [ 83.606485][ T1115] ata1.00: irq_stat 0x40000000 [ 83.608748][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 83.611296][ T1115] ata1.00: cmd 61/48:e8:36:51:08/00:00:00:00:00/40 tag 29 ncq dma 36864 out [ 83.611296][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 83.618725][ T1115] ata1.00: status: { DRDY } [ 83.624432][ T1115] ata1.00: configured for UDMA/100 [ 83.627363][ T1115] ata1: EH complete [ 84.491367][ T7280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139632632 (8558530528 ns) > initial count (4400489236 ns). Using initial count to start timer. [ 84.591676][ T7284] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 85.703766][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.708534][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.712109][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.717703][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.720986][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.851057][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 85.926904][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.929936][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.933068][ T7290] bridge_slave_0: entered allmulticast mode [ 85.937901][ T7290] bridge_slave_0: entered promiscuous mode [ 85.942604][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.945621][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.949058][ T7290] bridge_slave_1: entered allmulticast mode [ 85.953114][ T7290] bridge_slave_1: entered promiscuous mode [ 85.983260][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.990722][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.008697][ T7290] team0: Port device team_slave_0 added [ 86.013059][ T7290] team0: Port device team_slave_1 added [ 86.037675][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.040402][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.051024][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.057002][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.059886][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.070809][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.113524][ T7290] hsr_slave_0: entered promiscuous mode [ 86.116758][ T7290] hsr_slave_1: entered promiscuous mode [ 86.221785][ T7248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.248133][ T7290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.279251][ T7290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.283480][ T7290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.291545][ T7290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.307725][ T7299] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 86.324210][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.327506][ T7290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.331614][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.334678][ T7290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.386681][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.401227][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.403845][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.413335][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.424201][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.426717][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.433403][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.435635][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.457294][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 86.458664][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 86.458678][ T40] audit: type=1400 audit(1774148574.566:31195): avc: denied { map } for pid=7318 comm="syz.0.370" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 86.530693][ T60] cfg80211: failed to load regulatory.db [ 86.581219][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.723890][ T7290] veth0_vlan: entered promiscuous mode [ 86.728013][ T71] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 86.729932][ T7290] veth1_vlan: entered promiscuous mode [ 86.744332][ T7290] veth0_macvtap: entered promiscuous mode [ 86.748581][ T7290] veth1_macvtap: entered promiscuous mode [ 86.758875][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.765591][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.771297][ T93] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.774787][ T93] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.779135][ T1171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.781895][ T1171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.821120][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.824186][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.842690][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.845478][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.866896][ T71] usb 5-1: device descriptor read/64, error -71 [ 86.880801][ T5936] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 86.880873][ T5936] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 86.886981][ T5936] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 86.934309][ T5936] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 86.976218][ T7358] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 86.982087][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.378'. [ 86.982413][ T40] audit: type=1400 audit(1774148575.086:31196): avc: denied { relabelto } for pid=7356 comm="syz.5.378" name="cgroup.procs" dev="cgroup" ino=410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 86.988772][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.5.378'. [ 86.993622][ T40] audit: type=1400 audit(1774148575.106:31197): avc: denied { associate } for pid=7356 comm="syz.5.378" name="cgroup.procs" dev="cgroup" ino=410 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 87.035921][ T40] audit: type=1400 audit(1774148575.136:31198): avc: denied { open } for pid=7361 comm="syz.5.379" path="/dev/ptyqe" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 87.043147][ T40] audit: type=1400 audit(1774148575.136:31199): avc: denied { ioctl } for pid=7361 comm="syz.5.379" path="/dev/ttyqe" dev="devtmpfs" ino=397 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 87.106980][ T71] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 87.236996][ T71] usb 5-1: device descriptor read/64, error -71 [ 87.317864][ T7374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.347850][ T71] usb usb5-port1: attempt power cycle [ 87.370938][ T7374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.445971][ T7374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.511911][ T7374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.620067][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.634352][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.644009][ T7397] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20003 [ 87.645192][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.656353][ T46] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.688171][ T71] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 87.707532][ T71] usb 5-1: device descriptor read/8, error -71 [ 87.807897][ T5936] Bluetooth: hci4: command tx timeout [ 87.946998][ T71] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 87.967631][ T71] usb 5-1: device descriptor read/8, error -71 [ 87.997545][ T7417] netlink: 44 bytes leftover after parsing attributes in process `syz.3.395'. [ 88.077421][ T71] usb usb5-port1: unable to enumerate USB device [ 88.131074][ T40] audit: type=1400 audit(1774148576.236:31200): avc: denied { read } for pid=7428 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.140634][ T40] audit: type=1400 audit(1774148576.246:31201): avc: denied { write } for pid=7428 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.175705][ T7433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29456 sclass=netlink_route_socket pid=7433 comm=syz.3.401 [ 88.213056][ T7438] netlink: 68 bytes leftover after parsing attributes in process `syz.5.404'. [ 88.217722][ T5981] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 88.242918][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 88.287590][ T40] audit: type=1400 audit(1774148576.386:31202): avc: denied { read } for pid=7436 comm="syz.5.404" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 88.295050][ T40] audit: type=1400 audit(1774148576.386:31203): avc: denied { open } for pid=7436 comm="syz.5.404" path="/13/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 88.300760][ T7444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 88.312574][ T7444] block device autoloading is deprecated and will be removed. [ 88.318774][ T40] audit: type=1400 audit(1774148576.426:31204): avc: denied { ioctl } for pid=7436 comm="syz.5.404" path="/13/file0/file0" dev="fuse" ino=64 ioctlcmd=0x54c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 88.321450][ T7438] misc userio: Begin command sent, but we're already running [ 88.379935][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.388436][ T5981] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.392527][ T5981] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.399955][ T5981] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 88.403735][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 88.409603][ T5981] usb 9-1: Product: syz [ 88.411465][ T5981] usb 9-1: Manufacturer: syz [ 88.413496][ T5981] usb 9-1: SerialNumber: syz [ 88.625515][ T5981] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 88.838723][ T5939] usb 9-1: USB disconnect, device number 6 [ 88.843242][ T5939] usblp0: removed [ 88.873396][ T7482] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 88.878598][ T7482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7482 comm=syz.4.407 [ 88.882935][ T7482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.407'. [ 88.982836][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 88.985641][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 89.050621][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 89.125771][ T7498] syzkaller0: entered promiscuous mode [ 89.128729][ T7498] syzkaller0: entered allmulticast mode [ 89.887166][ T5936] Bluetooth: hci4: command tx timeout [ 89.897089][ T5939] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 90.057585][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 90.060364][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 90.063057][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 90.071840][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 90.074544][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 90.077423][ T46] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.077961][ T5939] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 90.079948][ T46] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.083382][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.084133][ T7526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.416'. [ 90.085952][ T46] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.096875][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.096882][ T46] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.102752][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.105685][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.116879][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.120233][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.122993][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.125711][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.137058][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.139870][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.140655][ T7530] sctp: [Deprecated]: syz.3.417 (pid 7530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.140655][ T7530] Use struct sctp_sack_info instead [ 90.146937][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.151533][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.168067][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.170938][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.174254][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.195813][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.199090][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.202634][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.206217][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.216874][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.220190][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.223163][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.225812][ T5939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.237065][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.241763][ T5939] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 90.244645][ T5939] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 90.256862][ T5939] usb 5-1: Product: syz [ 90.258190][ T5939] usb 5-1: Manufacturer: syz [ 90.259649][ T5939] usb 5-1: SerialNumber: syz [ 90.267323][ T5939] usb 5-1: config 0 descriptor?? [ 90.279598][ T5939] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 90.298669][ T7554] nbd: must specify a size in bytes for the device [ 90.362633][ T7552] netlink: 'syz.3.424': attribute type 5 has an invalid length. [ 90.474319][ T5301] usb 5-1: USB disconnect, device number 11 [ 90.482211][ T5301] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 90.628748][ T7575] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 90.630839][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 90.633351][ T7575] vhci_hcd vhci_hcd.0: Device attached [ 90.638263][ T7577] vhci_hcd: connection closed [ 90.638866][ T13] vhci_hcd vhci_hcd.5: stop threads [ 90.641761][ T13] vhci_hcd vhci_hcd.5: release socket [ 90.643284][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 90.724281][ T7523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.456563][ T7649] IPVS: set_ctl: invalid protocol: 135 172.30.0.4:20001 [ 91.497096][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 91.535798][ T7659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 91.552982][ T7659] kvm: pic: non byte read [ 91.705705][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 91.705716][ T40] audit: type=1400 audit(1774148579.806:31221): avc: denied { audit_write } for pid=7682 comm="syz.5.465" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.967043][ T5941] Bluetooth: hci4: command tx timeout [ 92.128082][ T40] audit: type=1400 audit(1774148580.236:31222): avc: denied { append } for pid=7699 comm="syz.4.469" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.253278][ T7705] loop1: detected capacity change from 0 to 4096 [ 92.292368][ T7709] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 92.522406][ T40] audit: type=1400 audit(1774148580.626:31223): avc: denied { ioctl } for pid=7725 comm="syz.4.476" path="socket:[19361]" dev="sockfs" ino=19361 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.620217][ T40] audit: type=1400 audit(1774148580.726:31224): avc: denied { setopt } for pid=7744 comm="syz.5.481" lport=43813 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 92.634025][ T40] audit: type=1400 audit(1774148580.746:31225): avc: denied { read } for pid=7744 comm="syz.5.481" lport=43813 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.644692][ T7745] input: syz0 as /devices/virtual/input/input11 [ 92.704042][ T7759] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 92.704236][ T7761] tipc: Invalid UDP bearer configuration [ 92.706720][ T7759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 92.706744][ T7761] tipc: Enabling of bearer rejected, failed to enable media [ 92.711069][ T7759] vhci_hcd vhci_hcd.0: Device attached [ 92.712846][ T7760] tipc: Invalid UDP bearer configuration [ 92.718595][ T7760] tipc: Enabling of bearer rejected, failed to enable media [ 92.726270][ T7759] vhci_hcd vhci_hcd.0: port 0 already used [ 92.737663][ T7762] vhci_hcd: connection closed [ 92.738365][ T75] vhci_hcd vhci_hcd.5: stop threads [ 92.743947][ T75] vhci_hcd vhci_hcd.5: release socket [ 92.746240][ T75] vhci_hcd vhci_hcd.5: disconnect device [ 92.754717][ T7769] overlayfs: failed to clone upperpath [ 92.879016][ T5301] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 93.048593][ T5301] usb 9-1: config index 0 descriptor too short (expected 14385, got 96) [ 93.051073][ T5301] usb 9-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 93.054010][ T5301] usb 9-1: config 52 has an invalid descriptor of length 0, skipping remainder of the config [ 93.057253][ T5301] usb 9-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 93.061709][ T5301] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.064851][ T5301] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.068676][ T5301] usb 9-1: Product: syz [ 93.070069][ T5301] usb 9-1: Manufacturer: syz [ 93.284773][ T40] audit: type=1400 audit(1774148581.386:31226): avc: denied { ioctl } for pid=7783 comm="syz.5.487" path="socket:[23004]" dev="sockfs" ino=23004 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.665804][ T7790] : entered promiscuous mode [ 93.672612][ T40] audit: type=1400 audit(1774148581.776:31227): avc: denied { mounton } for pid=7789 comm="syz.3.489" path="/187/file0" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 93.986140][ T5301] usb 9-1: USB disconnect, device number 7 [ 94.048154][ T5941] Bluetooth: hci4: command tx timeout [ 94.392219][ T40] audit: type=1400 audit(1774148582.496:31228): avc: denied { append } for pid=7813 comm="syz.4.493" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 94.504728][ T40] audit: type=1400 audit(1774148582.606:31229): avc: denied { mount } for pid=7822 comm="syz.4.494" name="/" dev="hugetlbfs" ino=23021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 94.509659][ T7825] __nla_validate_parse: 11 callbacks suppressed [ 94.509668][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.495'. [ 94.523899][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 94.540875][ T40] audit: type=1400 audit(1774148582.646:31230): avc: denied { unmount } for pid=6650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 94.632496][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.498'. [ 94.728518][ T7844] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 94.806722][ T5941] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 94.958064][ T7871] netlink: 'syz.3.508': attribute type 5 has an invalid length. [ 94.962802][ T7871] netlink: 268 bytes leftover after parsing attributes in process `syz.3.508'. [ 94.977166][ T7873] Illegal XDP return value 4294967274 on prog (id 43) dev N/A, expect packet loss! [ 95.231724][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 95.235384][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 95.604574][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.522'. [ 95.607741][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.522'. [ 95.672527][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.524'. [ 95.704054][ T7929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 95.730384][ T7929] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 95.733250][ T75] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 95.736960][ T93] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 95.742230][ T93] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 95.745941][ T93] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 95.927432][ T7939] IPv6: NLM_F_REPLACE set, but no existing node found! [ 96.310224][ T7967] input: syz0 as /devices/virtual/input/input13 [ 96.667824][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.670928][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.712712][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.717690][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.787157][ T46] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.791752][ T46] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.795196][ T46] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.798949][ T46] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.876177][ T7992] comedi: valid board names for 8255 driver are: [ 96.879760][ T7992] 8255 [ 96.880656][ T7992] comedi: valid board names for vmk80xx driver are: [ 96.882741][ T7992] vmk80xx [ 96.883778][ T7992] comedi: valid board names for usbduxsigma driver are: [ 96.886000][ T7992] usbduxsigma [ 96.887218][ T7992] comedi: valid board names for usbduxfast driver are: [ 96.889407][ T7992] usbduxfast [ 96.890490][ T7992] comedi: valid board names for usbdux driver are: [ 96.892597][ T7992] usbdux [ 96.893767][ T7992] comedi: valid board names for ni6501 driver are: [ 96.895949][ T7992] ni6501 [ 96.896982][ T7992] comedi: valid board names for dt9812 driver are: [ 96.899075][ T7992] dt9812 [ 96.900041][ T7992] comedi: valid board names for ni_labpc_cs driver are: [ 96.902214][ T7992] ni_labpc_cs [ 96.903363][ T7992] comedi: valid board names for ni_daq_700 driver are: [ 96.905537][ T7992] ni_daq_700 [ 96.906686][ T7992] comedi: valid board names for labpc_pci driver are: [ 96.909197][ T7992] labpc_pci [ 96.910326][ T7992] comedi: valid board names for adl_pci9118 driver are: [ 96.912552][ T7992] pci9118dg [ 96.913627][ T7992] pci9118hg [ 96.914734][ T7992] pci9118hr [ 96.915863][ T7992] comedi: valid board names for 8255_pci driver are: [ 96.917561][ T7997] loop2: detected capacity change from 0 to 7 [ 96.918286][ T7992] 8255_pci [ 96.921040][ T7992] comedi: valid board names for s526 driver are: [ 96.921992][ T5932] Dev loop2: unable to read RDB block 7 [ 96.923083][ T7992] s526 [ 96.923093][ T7992] comedi: valid board names for multiq3 driver are: [ 96.925377][ T5932] loop2: unable to read partition table [ 96.926599][ T7992] multiq3 [ 96.931915][ T7992] comedi: valid board names for pcmuio driver are: [ 96.933936][ T7992] pcmuio48 [ 96.934972][ T7992] pcmuio96 [ 96.936101][ T7992] comedi: valid board names for pcmmio driver are: [ 96.937011][ T5932] loop2: partition table beyond EOD, truncated [ 96.940396][ T7992] pcmmio [ 96.941355][ T7992] comedi: valid board names for pcmda12 driver are: [ 96.943811][ T7992] pcmda12 [ 96.944895][ T7992] comedi: valid board names for pcmad driver are: [ 96.947192][ T7992] pcmad12 [ 96.948233][ T7992] pcmad16 [ 96.949864][ T7992] comedi: valid board names for ni_labpc driver are: [ 96.951970][ T7992] lab-pc-1200 [ 96.953097][ T7992] lab-pc-1200ai [ 96.954279][ T7992] lab-pc+ [ 96.955235][ T7998] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 96.955330][ T7992] comedi: valid board names for atmio16 driver are: [ 96.957006][ T7997] Dev loop2: unable to read RDB block 7 [ 96.957040][ T7997] loop2: unable to read partition table [ 96.957198][ T7997] loop2: partition table beyond EOD, truncated [ 96.957242][ T7997] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 96.973600][ T7992] atmio16 [ 96.975140][ T7992] atmio16d [ 96.976476][ T7992] comedi: valid board names for ni_at_ao driver are: [ 96.979443][ T7992] at-ao-6 [ 96.981354][ T7992] at-ao-10 [ 96.982899][ T7992] comedi: valid board names for ni_at_a2150 driver are: [ 96.985817][ T7992] ni_at_a2150 [ 96.987476][ T7992] comedi: valid board names for adq12b driver are: [ 96.989969][ T7992] adq12b [ 96.990937][ T7992] comedi: valid board names for mpc624 driver are: [ 96.993432][ T7992] mpc624 [ 96.994722][ T7992] comedi: valid board names for c6xdigio driver are: [ 96.997644][ T7992] c6xdigio [ 96.998904][ T7992] comedi: valid board names for aio_iiro_16 driver are: [ 97.001252][ T7992] aio_iiro_16 [ 97.002310][ T7992] comedi: valid board names for aio_aio12_8 driver are: [ 97.004537][ T7992] aio_aio12_8 [ 97.005640][ T7992] aio_ai12_8 [ 97.006709][ T7992] aio_ao12_4 [ 97.008102][ T7992] comedi: valid board names for fl512 driver are: [ 97.010728][ T7992] fl512 [ 97.012080][ T7992] comedi: valid board names for dmm32at driver are: [ 97.014779][ T7992] dmm32at [ 97.016134][ T7992] comedi: valid board names for dt282x driver are: [ 97.019055][ T7992] dt2821 [ 97.020386][ T7992] dt2821-f [ 97.021775][ T7992] dt2821-g [ 97.023258][ T7992] dt2823 [ 97.024510][ T7992] dt2824-pgh [ 97.025942][ T7992] dt2824-pgl [ 97.027455][ T7992] dt2825 [ 97.029147][ T7992] dt2827 [ 97.030957][ T7992] dt2828 [ 97.032527][ T7992] dt2829 [ 97.033923][ T7992] dt21-ez [ 97.035290][ T7992] dt23-ez [ 97.036632][ T7992] dt24-ez [ 97.038074][ T7992] dt24-ez-pgl [ 97.039555][ T7992] comedi: valid board names for dt2817 driver are: [ 97.042245][ T7992] dt2817 [ 97.043532][ T7992] comedi: valid board names for dt2815 driver are: [ 97.046297][ T7992] dt2815 [ 97.047736][ T7992] comedi: valid board names for dt2814 driver are: [ 97.050227][ T7992] dt2814 [ 97.051544][ T7992] comedi: valid board names for dt2811 driver are: [ 97.054235][ T7992] dt2811-pgh [ 97.055674][ T7992] dt2811-pgl [ 97.057387][ T7992] comedi: valid board names for dt2801 driver are: [ 97.060185][ T7992] dt2801 [ 97.061447][ T7992] comedi: valid board names for das6402 driver are: [ 97.063938][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 97.063949][ T40] audit: type=1400 audit(1774148585.166:31250): avc: denied { bind } for pid=7999 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.064149][ T7992] das6402-12 [ 97.067351][ T40] audit: type=1400 audit(1774148585.166:31251): avc: denied { create } for pid=7999 comm="syz.0.550" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.073731][ T7992] das6402-16 [ 97.083074][ T7992] comedi: valid board names for das1800 driver are: [ 97.085811][ T7992] das-1701st [ 97.087417][ T7992] das-1701st-da [ 97.088938][ T7992] das-1702st [ 97.090346][ T7992] das-1702st-da [ 97.091809][ T7992] das-1702hr [ 97.093178][ T7992] das-1702hr-da [ 97.094650][ T7992] das-1701ao [ 97.096067][ T7992] das-1702ao [ 97.097482][ T7992] das-1801st [ 97.098813][ T7992] das-1801st-da [ 97.100288][ T7992] das-1802st [ 97.101964][ T7992] das-1802st-da [ 97.103477][ T7992] das-1802hr [ 97.104902][ T7992] das-1802hr-da [ 97.106573][ T7992] das-1801hc [ 97.108032][ T7992] das-1802hc [ 97.109392][ T7992] das-1801ao [ 97.110831][ T7992] das-1802ao [ 97.112265][ T7992] comedi: valid board names for das800 driver are: [ 97.114876][ T7992] das-800 [ 97.116202][ T7992] cio-das800 [ 97.117460][ T7992] das-801 [ 97.118562][ T7992] cio-das801 [ 97.119991][ T7992] das-802 [ 97.121310][ T7992] cio-das802 [ 97.122668][ T7992] cio-das802/16 [ 97.124099][ T7992] comedi: valid board names for isa-das08 driver are: [ 97.126767][ T7992] isa-das08 [ 97.128313][ T7992] das08-pgm [ 97.129600][ T7992] das08-pgh [ 97.130891][ T7992] das08-pgl [ 97.132228][ T7992] das08-aoh [ 97.133560][ T7992] das08-aol [ 97.134877][ T7992] das08-aom [ 97.136235][ T7992] das08/jr-ao [ 97.137794][ T7992] das08jr-16-ao [ 97.139534][ T7992] pc104-das08 [ 97.140906][ T7992] das08jr/16 [ 97.142228][ T7992] comedi: valid board names for das16m1 driver are: [ 97.144667][ T7992] das16m1 [ 97.145727][ T7992] comedi: valid board names for dac02 driver are: [ 97.147873][ T7992] dac02 [ 97.148834][ T7992] comedi: valid board names for rti802 driver are: [ 97.151148][ T7992] rti802 [ 97.152233][ T7992] comedi: valid board names for rti800 driver are: [ 97.154273][ T7992] rti800 [ 97.155237][ T7992] rti815 [ 97.156187][ T7992] comedi: valid board names for pcm3724 driver are: [ 97.158342][ T7992] pcm3724 [ 97.159355][ T7992] comedi: valid board names for pcl818 driver are: [ 97.161623][ T7992] pcl818l [ 97.162627][ T7992] pcl818h [ 97.163639][ T7992] pcl818hd [ 97.164661][ T7992] pcl818hg [ 97.165686][ T7992] pcl818 [ 97.166643][ T7992] pcl718 [ 97.167714][ T7992] pcm3718 [ 97.168672][ T7992] comedi: valid board names for pcl816 driver are: [ 97.170655][ T7992] pcl816 [ 97.171597][ T7992] pcl814b [ 97.172668][ T7992] comedi: valid board names for pcl812 driver are: [ 97.174707][ T7992] pcl812 [ 97.175675][ T7992] pcl812pg [ 97.176707][ T7992] acl8112pg [ 97.177835][ T7992] acl8112dg [ 97.178905][ T7992] acl8112hg [ 97.179973][ T7992] a821pgl [ 97.180999][ T7992] a821pglnda [ 97.182086][ T7992] a821pgh [ 97.183175][ T7992] a822pgl [ 97.184152][ T7992] a822pgh [ 97.185152][ T7992] a823pgl [ 97.186149][ T7992] a823pgh [ 97.187230][ T7992] pcl813 [ 97.188195][ T7992] pcl813b [ 97.189192][ T7992] acl8113 [ 97.190171][ T7992] iso813 [ 97.191043][ T7992] acl8216 [ 97.192092][ T7992] a826pg [ 97.192971][ T7992] comedi: valid board names for pcl730 driver are: [ 97.194853][ T7992] pcl730 [ 97.195778][ T7992] iso730 [ 97.196723][ T7992] acl7130 [ 97.197843][ T7992] pcm3730 [ 97.198857][ T7992] pcl725 [ 97.199832][ T7992] p8r8dio [ 97.200834][ T7992] acl7225b [ 97.201872][ T7992] p16r16dio [ 97.202906][ T7992] pcl733 [ 97.203837][ T7992] pcl734 [ 97.204796][ T7992] opmm-1616-xt [ 97.205997][ T7992] pearl-mm-p [ 97.207163][ T7992] ir104-pbf [ 97.208209][ T7992] comedi: valid board names for pcl726 driver are: [ 97.210238][ T7992] pcl726 [ 97.211195][ T7992] pcl727 [ 97.212159][ T7992] pcl728 [ 97.213135][ T7992] acl6126 [ 97.214129][ T7992] acl6128 [ 97.215146][ T7992] comedi: valid board names for pcl724 driver are: [ 97.217376][ T7992] pcl724 [ 97.218339][ T7992] pcl722 [ 97.219320][ T7992] pcl731 [ 97.220278][ T7992] acl7122 [ 97.221255][ T7992] acl7124 [ 97.222266][ T7992] pet48dio [ 97.223303][ T7992] pcmio48 [ 97.224317][ T7992] onyx-mm-dio [ 97.225454][ T7992] comedi: valid board names for pcl711 driver are: [ 97.227799][ T7992] pcl711 [ 97.228737][ T7992] pcl711b [ 97.229735][ T7992] acl8112hg [ 97.230789][ T7992] acl8112dg [ 97.231867][ T7992] comedi: valid board names for amplc_pc263 driver are: [ 97.234029][ T7992] pc263 [ 97.234954][ T7992] comedi: valid board names for amplc_pc236 driver are: [ 97.237234][ T7992] pc36at [ 97.238226][ T7992] comedi: valid board names for amplc_dio200 driver are: [ 97.240425][ T7992] pc212e [ 97.241345][ T7992] pc214e [ 97.242293][ T7992] pc215e [ 97.243211][ T7992] pc218e [ 97.244127][ T7992] pc272e [ 97.245085][ T7992] comedi: valid board names for comedi_parport driver are: [ 97.247402][ T7992] comedi_parport [ 97.248610][ T7992] comedi: valid board names for comedi_test driver are: [ 97.250781][ T7992] comedi_test [ 97.251900][ T7992] comedi: valid board names for comedi_bond driver are: [ 97.253992][ T7992] comedi_bond [ 97.302547][ T8004] bridge_slave_0: left allmulticast mode [ 97.304402][ T8004] bridge_slave_0: left promiscuous mode [ 97.306465][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.315892][ T8004] bridge_slave_1: left allmulticast mode [ 97.319007][ T8004] bridge_slave_1: left promiscuous mode [ 97.321560][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.330439][ T8004] bond0: (slave bond_slave_0): Releasing backup interface [ 97.337740][ T8004] bond0: (slave bond_slave_1): Releasing backup interface [ 97.345079][ T8004] team0: Port device team_slave_0 removed [ 97.351768][ T8004] team0: Port device team_slave_1 removed [ 97.354582][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.357668][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.362283][ T8004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.364981][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.369799][ T8004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 97.380193][ T8005] team0: Mode changed to "loadbalance" [ 97.455399][ T8016] fuse: Unknown parameter 'fm' [ 97.504609][ T8018] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.510377][ T8018] 9pnet_virtio: no channels available for device syz [ 97.515748][ T8022] ªªªªªª: renamed from vlan0 (while UP) [ 97.582793][ T40] audit: type=1400 audit(1774148585.676:31252): avc: denied { read } for pid=8023 comm="syz.0.558" path="socket:[23810]" dev="sockfs" ino=23810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.593354][ T40] audit: type=1400 audit(1774148585.686:31253): avc: denied { read } for pid=8023 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.116513][ T40] audit: type=1400 audit(1774148586.216:31254): avc: denied { setopt } for pid=8033 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 98.282503][ T40] audit: type=1326 audit(1774148586.386:31255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz.4.561" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94db99c799 code=0x0 [ 98.379659][ T40] audit: type=1400 audit(1774148586.486:31256): avc: denied { setopt } for pid=8053 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.389848][ T40] audit: type=1400 audit(1774148586.486:31257): avc: denied { ioctl } for pid=8053 comm="syz.0.567" path="socket:[23896]" dev="sockfs" ino=23896 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.424532][ T8060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8060 comm=syz.0.568 [ 98.590826][ T8068] kvm: MWAIT instruction emulated as NOP! [ 99.114795][ T8074] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 99.118770][ T8074] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 99.122560][ T8074] netlink: 'syz.0.572': attribute type 2 has an invalid length. [ 99.306892][ T8094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=8094 comm=syz.0.578 [ 99.313137][ T40] audit: type=1400 audit(1774148587.380:31258): avc: denied { write } for pid=8079 comm="syz.4.574" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 99.326017][ T8100] (syz.5.579,8100,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 99.328472][ T40] audit: type=1400 audit(1774148587.390:31259): avc: denied { module_request } for pid=8096 comm="syz.3.580" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.330716][ T8100] (syz.5.579,8100,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 99.350032][ T8100] (syz.5.579,8100,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 99.354344][ T8100] (syz.5.579,8100,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 99.427752][ T8094] can: request_module (can-proto-0) failed. [ 99.489134][ T8111] bridge_slave_1: left allmulticast mode [ 99.491555][ T8111] bridge_slave_1: left promiscuous mode [ 99.494023][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.507194][ T8111] bridge_slave_0: left allmulticast mode [ 99.509475][ T8111] bridge_slave_0: left promiscuous mode [ 99.511918][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.524398][ T8113] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 99.527192][ T8113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.532122][ T8113] vhci_hcd vhci_hcd.0: Device attached [ 99.536384][ T8113] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 99.539154][ T8113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.546292][ T8113] vhci_hcd vhci_hcd.0: Device attached [ 99.549270][ T8118] vhci_hcd: connection closed [ 99.549521][ T46] vhci_hcd vhci_hcd.0: stop threads [ 99.553607][ T46] vhci_hcd vhci_hcd.0: release socket [ 99.556638][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 99.560005][ T8114] vhci_hcd: connection closed [ 99.560537][ T46] vhci_hcd vhci_hcd.0: stop threads [ 99.564746][ T46] vhci_hcd vhci_hcd.0: release socket [ 99.567025][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 99.745816][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 99.888654][ T8142] __nla_validate_parse: 4 callbacks suppressed [ 99.888666][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.592'. [ 100.048561][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'. [ 100.087577][ T8171] fuse: Bad value for 'fd' [ 100.091633][ T8171] loop9: detected capacity change from 0 to 4096 [ 100.233288][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 100.236859][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 100.267926][ T8192] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.307472][ T8198] macsec0: entered promiscuous mode [ 100.309319][ T8198] macsec0: entered allmulticast mode [ 100.311141][ T8198] veth1_macvtap: entered allmulticast mode [ 100.371624][ T5981] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 100.395877][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 100.405740][ T8205] macvtap0: entered promiscuous mode [ 100.409937][ T8205] macvtap0: left promiscuous mode [ 100.448045][ T8209] 8021q: VLANs not supported on gre0 [ 100.522173][ T8209] netlink: 'syz.5.613': attribute type 21 has an invalid length. [ 100.524836][ T8209] netlink: 156 bytes leftover after parsing attributes in process `syz.5.613'. [ 100.528919][ T8209] wg1: entered promiscuous mode [ 100.530497][ T8209] wg1: entered allmulticast mode [ 100.554914][ T5981] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.558606][ T5981] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.562647][ T5981] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.570439][ T5981] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 100.574033][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 100.577439][ T5981] usb 9-1: Product: syz [ 100.578998][ T5981] usb 9-1: Manufacturer: syz [ 100.580576][ T5981] usb 9-1: SerialNumber: syz [ 100.653525][ T8217] ipvlan2: entered allmulticast mode [ 100.655492][ T8217] batadv_slave_1: entered allmulticast mode [ 100.662596][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 100.666069][ T8218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 100.703682][ T8221] netlink: 'syz.5.617': attribute type 3 has an invalid length. [ 100.706701][ T8221] netlink: 'syz.5.617': attribute type 1 has an invalid length. [ 100.805631][ T5981] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 101.014670][ T8228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.049471][ T5301] usb 9-1: USB disconnect, device number 8 [ 101.053956][ T5301] usblp0: removed [ 101.333826][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.401000][ T8264] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 101.406353][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.411978][ T8264] bond0: (slave team0): Enslaving as an active interface with an up link [ 101.506210][ T8268] netlink: 'syz.3.630': attribute type 13 has an invalid length. [ 101.506549][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.508882][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 101.513397][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.513438][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.534910][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.539829][ T8235] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.544865][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.553865][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 101.678644][ T8284] CIFS mount error: No usable UNC path provided in device string! [ 101.678644][ T8284] [ 101.682203][ T8284] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 101.759783][ T5301] usb 5-1: USB disconnect, device number 12 [ 101.764200][ T5941] Bluetooth: hci4: command 0x0406 tx timeout [ 101.764584][ T8286] usb usb4: usbfs: process 8286 (syz.4.637) did not claim interface 0 before use [ 101.800567][ T8292] futex_wake_op: syz.3.639 tries to shift op by -1; fix this program [ 101.912983][ T5936] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 102.567571][ T8328] overlay: Unknown parameter 'w' [ 102.686822][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 102.686833][ T40] audit: type=1400 audit(1774148590.542:31272): avc: denied { write } for pid=8336 comm="syz.5.652" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.948005][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 103.129029][ T9] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 103.134439][ T9] usb 5-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 103.142286][ T9] usb 5-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 103.145858][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.149170][ T9] usb 5-1: Product: syz [ 103.150809][ T9] usb 5-1: Manufacturer: syz [ 103.153819][ T9] usb 5-1: SerialNumber: syz [ 103.167836][ T8342] openvswitch: netlink: IP tunnel dst address not specified [ 103.762599][ T8345] overlayfs: failed to clone upperpath [ 103.913193][ T8352] netlink: 'syz.3.657': attribute type 7 has an invalid length. [ 103.954407][ T8352] netlink: 'syz.3.657': attribute type 7 has an invalid length. [ 104.050409][ T40] audit: type=1400 audit(1774148591.823:31273): avc: denied { setopt } for pid=8336 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.096129][ T5936] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 104.445396][ T40] audit: type=1400 audit(1774148592.188:31274): avc: denied { accept } for pid=8373 comm="syz.5.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 104.504836][ T8374] could not allocate digest TFM handle sha384-avx [ 104.560412][ T8382] autofs: Unknown parameter 'À&' [ 104.572795][ T8382] validate_nla: 1 callbacks suppressed [ 104.572825][ T8382] netlink: 'syz.3.666': attribute type 3 has an invalid length. [ 104.609555][ T8383] nbd: socks must be embedded in a SOCK_ITEM attr [ 104.725739][ T8398] ªªªªªª: renamed from wg2 (while UP) [ 104.825368][ T40] audit: type=1400 audit(1774148592.544:31275): avc: denied { set_context_mgr } for pid=8403 comm="syz.5.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 105.078201][ T8414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=8414 comm=syz.5.675 [ 105.724459][ T5935] usb 5-1: USB disconnect, device number 13 [ 105.785367][ T8426] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 105.796953][ T8427] kAFS: unable to lookup cell 'syz0' [ 105.801533][ T8430] __nla_validate_parse: 4 callbacks suppressed [ 105.801543][ T8430] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.679'. [ 105.806789][ T8430] netlink: Conntrack attr has 4 unknown bytes [ 105.882508][ T8440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'. [ 105.924653][ T40] audit: type=1400 audit(1774148593.573:31276): avc: denied { write } for pid=8443 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.739134][ T8447] netlink: 'syz.0.685': attribute type 21 has an invalid length. [ 106.741577][ T8447] netlink: 156 bytes leftover after parsing attributes in process `syz.0.685'. [ 106.948760][ T8449] netlink: 14 bytes leftover after parsing attributes in process `syz.3.686'. [ 107.072810][ T8455] netlink: 'syz.3.689': attribute type 12 has an invalid length. [ 107.078254][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 107.085242][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 107.117350][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 107.183361][ T40] audit: type=1400 audit(1774148594.751:31277): avc: denied { getopt } for pid=8460 comm="syz.3.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.196583][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 107.202617][ T8461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8461 comm=syz.3.692 [ 107.248701][ T40] audit: type=1800 audit(1774148594.807:31278): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.693" name="nullb0" dev="tmpfs" ino=1368 res=0 errno=0 [ 107.258909][ T40] audit: type=1800 audit(1774148594.817:31279): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.693" name="nullb0" dev="tmpfs" ino=1368 res=0 errno=0 [ 107.279903][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 107.283874][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 107.287514][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.292060][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.295723][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.299748][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.304196][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.307188][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.534565][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.537558][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.543198][ T8453] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 107.545404][ T8453] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 107.548468][ T8453] vhci_hcd vhci_hcd.0: Device attached [ 107.551409][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.554187][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.557586][ T8471] vhci_hcd: connection closed [ 107.557857][ T1171] vhci_hcd vhci_hcd.0: stop threads [ 107.558745][ T9] usb 5-1: usb_control_msg returned -71 [ 107.560015][ T1171] vhci_hcd vhci_hcd.0: release socket [ 107.561705][ T9] usbtmc 5-1:16.0: can't read capabilities [ 107.567617][ T9] usb 5-1: USB disconnect, device number 14 [ 107.569354][ T1171] vhci_hcd vhci_hcd.0: disconnect device [ 108.281792][ T40] audit: type=1400 audit(1774148595.771:31280): avc: denied { wake_alarm } for pid=8500 comm="syz.3.702" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.319994][ T40] audit: type=1800 audit(1774148595.808:31281): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.703" name="nullb0" dev="tmpfs" ino=1368 res=0 errno=0 [ 108.608684][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 108.759181][ T40] audit: type=1400 audit(1774148596.220:31282): avc: denied { ioctl } for pid=8526 comm="syz.3.709" path="socket:[25481]" dev="sockfs" ino=25481 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.889416][ T8540] cgroup: subsys name conflicts with all [ 109.656809][ T8563] overlayfs: failed to resolve './file0': -2 [ 109.701903][ T8565] Cannot find del_set index 2 as target [ 109.705315][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.723'. [ 109.873598][ T40] audit: type=1400 audit(1774148597.258:31283): avc: denied { mount } for pid=8573 comm="syz.3.727" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 110.300215][ T8593] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 110.306558][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 110.311855][ T8593] tmpfs: Bad value for 'mpol' [ 110.509079][ T8608] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 110.509079][ T8608] The task syz.3.737 (8608) triggered the difference, watch for misbehavior. [ 110.546568][ T40] audit: type=1400 audit(1774148597.894:31284): avc: denied { name_bind } for pid=8610 comm="syz.3.738" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 110.584631][ T40] audit: type=1800 audit(1774148597.932:31285): pid=8611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.738" name="file0" dev="tmpfs" ino=1535 res=0 errno=0 [ 110.672355][ T40] audit: type=1400 audit(1774148598.006:31286): avc: denied { setattr } for pid=8618 comm="syz.3.741" name="NETLINK" dev="sockfs" ino=25976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.704533][ T8623] netlink: 'syz.3.743': attribute type 3 has an invalid length. [ 110.963891][ T8641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.975134][ T8641] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 110.983171][ T8641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8641 comm=syz.0.748 [ 111.020874][ T40] audit: type=1400 audit(1774148598.343:31287): avc: denied { mount } for pid=8643 comm="syz.0.749" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 111.029434][ T40] audit: type=1400 audit(1774148598.343:31288): avc: denied { watch } for pid=8643 comm="syz.0.749" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 111.037094][ T40] audit: type=1400 audit(1774148598.343:31289): avc: denied { read } for pid=8643 comm="syz.0.749" dev="nsfs" ino=4026533050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 111.698272][ T8656] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.718637][ T5936] Bluetooth: hci2: ISO packet for unknown connection handle 1039 [ 112.413577][ T8665] __nla_validate_parse: 4 callbacks suppressed [ 112.413594][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.756'. [ 112.419395][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.756'. [ 112.584573][ T8673] sctp: [Deprecated]: syz.4.758 (pid 8673) Use of int in max_burst socket option deprecated. [ 112.584573][ T8673] Use struct sctp_assoc_value instead [ 113.107976][ T8692] netlink: 'syz.3.764': attribute type 15 has an invalid length. [ 113.111213][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 113.120736][ T75] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 113.123654][ T8692] netlink: 'syz.3.764': attribute type 15 has an invalid length. [ 113.125475][ T75] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 113.126568][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 113.128607][ T75] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 113.128640][ T75] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 113.237837][ T8703] gre2: entered promiscuous mode [ 113.317785][ T8705] netlink: 'syz.3.768': attribute type 2 has an invalid length. [ 113.376366][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.768'. [ 113.881229][ T5936] Bluetooth: hci0: unknown advertising packet type: 0x63 [ 113.881301][ T5936] Bluetooth: hci0: Malformed LE Event: 0x02 [ 114.172642][ T8723] tipc: Started in network mode [ 114.174370][ T8723] tipc: Node identity ac141424, cluster identity 4711 [ 114.176933][ T8723] tipc: New replicast peer: 10.1.1.0 [ 114.178867][ T8723] tipc: Enabled bearer , priority 10 [ 114.263623][ T8729] netlink: 'syz.3.776': attribute type 15 has an invalid length. [ 114.427184][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 114.427201][ T40] audit: type=1400 audit(1774148601.524:31297): avc: denied { name_bind } for pid=8735 comm="syz.3.778" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 114.430015][ T6949] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 114.480697][ T8741] geneve2: entered promiscuous mode [ 114.482437][ T8741] geneve2: entered allmulticast mode [ 114.592126][ T6949] usb 9-1: device descriptor read/64, error -71 [ 114.679438][ T8750] openvswitch: netlink: IP tunnel dst address not specified [ 114.767738][ T8755] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 114.846843][ T6949] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 114.985660][ T6949] usb 9-1: device descriptor read/64, error -71 [ 115.105230][ T6949] usb usb9-port1: attempt power cycle [ 115.263646][ T71] tipc: Node number set to 2886997028 [ 115.451634][ T40] audit: type=1400 audit(1774148602.478:31298): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 115.488069][ T6949] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 115.509832][ T6949] usb 9-1: device descriptor read/8, error -71 [ 115.549303][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 115.552190][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 115.555033][ T8785] netlink: 'syz.0.792': attribute type 7 has an invalid length. [ 115.562457][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 115.566567][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 115.760375][ T8806] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 115.776802][ T6949] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 115.809532][ T6949] usb 9-1: device descriptor read/8, error -71 [ 115.937342][ T6949] usb usb9-port1: unable to enumerate USB device [ 115.984013][ T8811] 9p: Bad value for 'version' [ 116.664259][ T8824] pim6reg: entered allmulticast mode [ 116.866242][ T8837] vlan0: entered allmulticast mode [ 116.868012][ T8837] veth0_vlan: entered allmulticast mode [ 116.894910][ T8841] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 117.161151][ T40] audit: type=1400 audit(1774148604.077:31299): avc: denied { mount } for pid=8852 comm="syz.3.813" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.192364][ T8855] No such timeout policy "syz1" [ 117.251028][ T40] audit: type=1400 audit(1774148604.161:31300): avc: denied { accept } for pid=8875 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.270697][ T8876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.815'. [ 117.840334][ T6949] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 117.912177][ T8889] __nla_validate_parse: 36 callbacks suppressed [ 117.912188][ T8889] netlink: 452 bytes leftover after parsing attributes in process `syz.3.820'. [ 117.918283][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 117.924360][ T8888] 9p: Bad value for 'wfdno' [ 117.980614][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 118.008650][ T40] audit: type=1400 audit(1774148604.872:31301): avc: denied { shutdown } for pid=8896 comm="syz.3.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.014736][ T6949] usb 9-1: Using ep0 maxpacket: 8 [ 118.017456][ T6949] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.021328][ T6949] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.025235][ T6949] usb 9-1: config 0 interface 0 has no altsetting 0 [ 118.027604][ T6949] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 118.031036][ T6949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.036628][ T6949] usb 9-1: config 0 descriptor?? [ 118.046209][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 118.049504][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 118.239068][ T8914] bond0: entered promiscuous mode [ 118.472046][ T6949] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 118.474448][ T6949] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 118.476696][ T6949] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 118.478949][ T6949] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 118.481231][ T6949] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 118.484388][ T6949] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 118.686526][ T40] audit: type=1400 audit(1774148605.508:31302): avc: denied { connect } for pid=8883 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.692930][ T8884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.818'. [ 118.695338][ T40] audit: type=1400 audit(1774148605.508:31303): avc: denied { setopt } for pid=8883 comm="syz.4.818" laddr=::1 lport=32093 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.699105][ T6949] usb 9-1: USB disconnect, device number 13 [ 119.259161][ T40] audit: type=1400 audit(1774148606.042:31304): avc: denied { call } for pid=8919 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 119.260718][ T8920] binder_alloc: 8919: binder_alloc_buf, no vma [ 119.267366][ T40] audit: type=1400 audit(1774148606.042:31305): avc: denied { transfer } for pid=8919 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 119.416573][ T8923] netlink: 120 bytes leftover after parsing attributes in process `syz.4.832'. [ 119.420186][ T8923] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 119.423364][ T8923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.832'. [ 119.900081][ T71] ================================================================== [ 119.902964][ T71] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 119.905458][ T71] Read of size 1 at addr ffff888033cadab0 by task kworker/3:2/71 [ 119.908694][ T71] [ 119.909569][ T71] CPU: 3 UID: 0 PID: 71 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.909586][ T71] Tainted: [L]=SOFTLOCKUP [ 119.909590][ T71] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.909597][ T71] Workqueue: events l2cap_chan_timeout [ 119.909612][ T71] Call Trace: [ 119.909616][ T71] [ 119.909621][ T71] dump_stack_lvl+0x100/0x190 [ 119.909639][ T71] print_report+0x156/0x4c9 [ 119.909655][ T71] ? __virt_addr_valid+0x81/0x620 [ 119.909671][ T71] ? __phys_addr+0xe8/0x180 [ 119.909687][ T71] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 119.909700][ T71] kasan_report+0xdf/0x1e0 [ 119.909711][ T71] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 119.909724][ T71] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 119.909737][ T71] __kasan_check_byte+0x36/0x50 [ 119.909747][ T71] lock_acquire+0x148/0x380 [ 119.909757][ T71] ? __pfx_osq_unlock+0x10/0x10 [ 119.909768][ T71] ? _raw_spin_lock_irqsave+0x52/0x60 [ 119.909781][ T71] ? __mutex_lock+0x151d/0x1b90 [ 119.909796][ T71] _raw_spin_lock_irqsave+0x3a/0x60 [ 119.909809][ T71] ? __mutex_lock+0x31c/0x1b90 [ 119.909824][ T71] __mutex_lock+0x31c/0x1b90 [ 119.909839][ T71] ? l2cap_chan_timeout+0x6d/0x330 [ 119.909850][ T71] ? add_lock_to_list+0x99/0x110 [ 119.909866][ T71] ? __pfx___mutex_lock+0x10/0x10 [ 119.909882][ T71] ? debug_object_deactivate+0x2e4/0x3b0 [ 119.909902][ T71] ? l2cap_chan_timeout+0x6d/0x330 [ 119.909913][ T71] l2cap_chan_timeout+0x6d/0x330 [ 119.909925][ T71] process_one_work+0xa23/0x19a0 [ 119.909940][ T71] ? __pfx_process_one_work+0x10/0x10 [ 119.909954][ T71] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 119.909967][ T71] worker_thread+0x5ef/0xe50 [ 119.909980][ T71] ? __pfx_worker_thread+0x10/0x10 [ 119.909991][ T71] ? kthread+0x13a/0x450 [ 119.910001][ T71] ? __pfx_worker_thread+0x10/0x10 [ 119.910259][ T71] kthread+0x370/0x450 [ 119.910270][ T71] ? __pfx_kthread+0x10/0x10 [ 119.910281][ T71] ret_from_fork+0x754/0xd80 [ 119.910292][ T71] ? __pfx_ret_from_fork+0x10/0x10 [ 119.910303][ T71] ? __switch_to+0x7b4/0x1120 [ 119.910316][ T71] ? __pfx_kthread+0x10/0x10 [ 119.910326][ T71] ret_from_fork_asm+0x1a/0x30 [ 119.910343][ T71] [ 119.910346][ T71] [ 119.990590][ T71] Allocated by task 7018: [ 119.992432][ T71] kasan_save_stack+0x30/0x50 [ 119.994440][ T71] kasan_save_track+0x14/0x30 [ 119.996465][ T71] __kasan_kmalloc+0xaa/0xb0 [ 119.998444][ T71] l2cap_conn_add.part.0+0x60/0xb00 [ 120.000651][ T71] l2cap_chan_connect+0x1435/0x1f90 [ 120.002847][ T71] l2cap_sock_connect+0x37a/0x770 [ 120.005062][ T71] kernel_connect+0x107/0x160 [ 120.007083][ T71] rfcomm_dlc_open+0x838/0xac0 [ 120.009041][ T71] rfcomm_sock_connect+0x42c/0x690 [ 120.011194][ T71] __sys_connect_file+0x141/0x1a0 [ 120.013347][ T71] __sys_connect+0x141/0x170 [ 120.015365][ T71] __x64_sys_connect+0x72/0xb0 [ 120.017411][ T71] do_syscall_64+0x106/0xf80 [ 120.019419][ T71] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.021928][ T71] [ 120.022978][ T71] Freed by task 8794: [ 120.024664][ T71] kasan_save_stack+0x30/0x50 [ 120.026660][ T71] kasan_save_track+0x14/0x30 [ 120.028684][ T71] kasan_save_free_info+0x3b/0x70 [ 120.030800][ T71] __kasan_slab_free+0x5f/0x80 [ 120.032866][ T71] kfree+0x1f6/0x6b0 [ 120.034542][ T71] l2cap_conn_del+0x5be/0x770 [ 120.036543][ T71] l2cap_disconn_cfm+0x9f/0x100 [ 120.038613][ T71] hci_conn_hash_flush+0x10e/0x280 [ 120.040802][ T71] hci_dev_reset+0x249/0x650 [ 120.042768][ T71] hci_sock_ioctl+0x5c5/0x7e0 [ 120.044795][ T71] sock_do_ioctl+0x118/0x280 [ 120.046790][ T71] sock_ioctl+0x599/0x6b0 [ 120.048630][ T71] __x64_sys_ioctl+0x18e/0x210 [ 120.050656][ T71] do_syscall_64+0x106/0xf80 [ 120.052632][ T71] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.055121][ T71] [ 120.056141][ T71] The buggy address belongs to the object at ffff888033cad800 [ 120.056141][ T71] which belongs to the cache kmalloc-1k of size 1024 [ 120.061714][ T71] The buggy address is located 688 bytes inside of [ 120.061714][ T71] freed 1024-byte region [ffff888033cad800, ffff888033cadc00) [ 120.067512][ T71] [ 120.068509][ T71] The buggy address belongs to the physical page: [ 120.071194][ T71] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33ca8 [ 120.074811][ T71] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 120.078403][ T71] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 120.081574][ T71] page_type: f5(slab) [ 120.083315][ T71] raw: 00fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 120.086891][ T71] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 120.090508][ T71] head: 00fff00000000040 ffff88801b842dc0 dead000000000100 dead000000000122 [ 120.094131][ T71] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 120.097765][ T71] head: 00fff00000000003 ffffea0000cf2a01 00000000ffffffff 00000000ffffffff [ 120.101401][ T71] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 120.104493][ T71] page dumped because: kasan: bad access detected [ 120.106477][ T71] page_owner tracks the page as allocated [ 120.108291][ T71] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6650, tgid 6650 (syz-executor), ts 69459558846, free_ts 69399183390 [ 120.114663][ T71] post_alloc_hook+0x153/0x170 [ 120.116178][ T71] get_page_from_freelist+0x111d/0x3140 [ 120.117950][ T71] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 120.119838][ T71] new_slab+0xa6/0x6b0 [ 120.121151][ T71] refill_objects+0x26b/0x400 [ 120.122648][ T71] __pcs_replace_empty_main+0x1ab/0x660 [ 120.124419][ T71] __kmalloc_node_track_caller_noprof+0x694/0x850 [ 120.126404][ T71] kmalloc_reserve+0xe8/0x350 [ 120.127934][ T71] __alloc_skb+0x185/0x710 [ 120.129355][ T71] br_info_notify+0x10f/0x2e0 [ 120.130844][ T71] br_add_if+0x10e0/0x1b40 [ 120.132262][ T71] do_set_master+0x40f/0x730 [ 120.133735][ T71] do_setlink.isra.0+0xb2b/0x3e50 [ 120.135325][ T71] rtnl_newlink+0x11bd/0x2380 [ 120.136847][ T71] rtnetlink_rcv_msg+0x95e/0xe90 [ 120.138442][ T71] netlink_rcv_skb+0x159/0x420 [ 120.139981][ T71] page last free pid 6650 tgid 6650 stack trace: [ 120.141984][ T71] __free_frozen_pages+0x7e1/0x10d0 [ 120.143650][ T71] qlist_free_all+0x47/0xe0 [ 120.145117][ T71] kasan_quarantine_reduce+0x1a0/0x1f0 [ 120.146864][ T71] __kasan_slab_alloc+0x69/0x90 [ 120.148437][ T71] kmem_cache_alloc_noprof+0x241/0x6e0 [ 120.150184][ T71] __kernfs_new_node+0xd2/0x960 [ 120.151765][ T71] kernfs_new_node+0x11b/0x1a0 [ 120.153299][ T71] __kernfs_create_file+0x53/0x350 [ 120.154953][ T71] sysfs_add_file_mode_ns+0x207/0x3c0 [ 120.156700][ T71] internal_create_group+0x593/0xf40 [ 120.158392][ T71] internal_create_groups+0x9d/0x150 [ 120.160087][ T71] device_add+0xf5b/0x1950 [ 120.161515][ T71] netdev_register_kobject+0x1a9/0x3d0 [ 120.163256][ T71] register_netdevice+0x12e0/0x2210 [ 120.164910][ T71] veth_newlink+0x44a/0xa00 [ 120.166359][ T71] rtnl_newlink+0x1494/0x2380 [ 120.167880][ T71] [ 120.168656][ T71] Memory state around the buggy address: [ 120.170424][ T71] ffff888033cad980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.172943][ T71] ffff888033cada00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.175462][ T71] >ffff888033cada80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.177966][ T71] ^ [ 120.179760][ T71] ffff888033cadb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.182269][ T71] ffff888033cadb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.184817][ T71] ================================================================== [ 120.187350][ T71] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.189629][ T71] CPU: 3 UID: 0 PID: 71 Comm: kworker/3:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.192962][ T71] Tainted: [L]=SOFTLOCKUP [ 120.194326][ T71] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.197263][ T71] Workqueue: events l2cap_chan_timeout [ 120.198977][ T71] Call Trace: [ 120.200044][ T71] [ 120.200989][ T71] dump_stack_lvl+0x100/0x190 [ 120.202489][ T71] vpanic+0x552/0x970 [ 120.203716][ T71] ? __pfx_vpanic+0x10/0x10 [ 120.205157][ T71] ? __pfx_vprintk_emit+0x10/0x10 [ 120.206773][ T71] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 120.208493][ T71] panic+0xd1/0xe0 [ 120.209694][ T71] ? __pfx_panic+0x10/0x10 [ 120.211127][ T71] ? end_report.part.0+0x23/0x90 [ 120.212702][ T71] ? rcu_is_watching+0x12/0xc0 [ 120.214220][ T71] ? end_report.part.0+0x23/0x90 [ 120.215807][ T71] ? check_panic_on_warn+0x1f/0x90 [ 120.217447][ T71] check_panic_on_warn.cold+0x19/0x34 [ 120.219156][ T71] end_report.part.0+0x3a/0x90 [ 120.220681][ T71] kasan_report.cold+0xe/0x18 [ 120.222177][ T71] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 120.223878][ T71] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 120.225571][ T71] __kasan_check_byte+0x36/0x50 [ 120.227131][ T71] lock_acquire+0x148/0x380 [ 120.228584][ T71] ? __pfx_osq_unlock+0x10/0x10 [ 120.230125][ T71] ? _raw_spin_lock_irqsave+0x52/0x60 [ 120.231827][ T71] ? __mutex_lock+0x151d/0x1b90 [ 120.233374][ T71] _raw_spin_lock_irqsave+0x3a/0x60 [ 120.235051][ T71] ? __mutex_lock+0x31c/0x1b90 [ 120.236578][ T71] __mutex_lock+0x31c/0x1b90 [ 120.238065][ T71] ? l2cap_chan_timeout+0x6d/0x330 [ 120.239708][ T71] ? add_lock_to_list+0x99/0x110 [ 120.241284][ T71] ? __pfx___mutex_lock+0x10/0x10 [ 120.242882][ T71] ? debug_object_deactivate+0x2e4/0x3b0 [ 120.244643][ T71] ? l2cap_chan_timeout+0x6d/0x330 [ 120.246257][ T71] l2cap_chan_timeout+0x6d/0x330 [ 120.247835][ T71] process_one_work+0xa23/0x19a0 [ 120.249407][ T71] ? __pfx_process_one_work+0x10/0x10 [ 120.251107][ T71] ? __pfx_l2cap_chan_timeout+0x10/0x10 [ 120.252847][ T71] worker_thread+0x5ef/0xe50 [ 120.254299][ T71] ? __pfx_worker_thread+0x10/0x10 [ 120.255924][ T71] ? kthread+0x13a/0x450 [ 120.257293][ T71] ? __pfx_worker_thread+0x10/0x10 [ 120.258931][ T71] kthread+0x370/0x450 [ 120.260232][ T71] ? __pfx_kthread+0x10/0x10 [ 120.261720][ T71] ret_from_fork+0x754/0xd80 [ 120.263201][ T71] ? __pfx_ret_from_fork+0x10/0x10 [ 120.264831][ T71] ? __switch_to+0x7b4/0x1120 [ 120.266329][ T71] ? __pfx_kthread+0x10/0x10 [ 120.267853][ T71] ret_from_fork_asm+0x1a/0x30 [ 120.269383][ T71] [ 120.271039][ T71] Kernel Offset: disabled [ 120.272414][ T71] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:03:28 Registers: info registers vcpu 0 CPU#0 RAX=000000000013cbab RBX=ffffffff8e4975c0 RCX=ffffffff8b904c75 RDX=0000000000000000 RSI=ffffffff8de7798c RDI=ffffffff8c1b0b20 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486795 R10=ffff88806a433cab R11=0000000000000000 R12=0000000000000000 R13=fffffbfff1c92eb8 R14=0000000000000000 R15=ffffffff90d9a010 RIP=ffffffff8b9035df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6342000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3d6a84eddd CR3=000000002d7af000 CR4=00352ef0 DR0=0000000000000007 DR1=ffffffffffffff00 DR2=400000000001001d DR3=fffffffffffffff6 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000003 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd640395b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd640395b6 00007ffd640395bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6a83327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6a8332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6a833420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6a8332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3d6a9ec5f8 00007f3d6a9ec5c8 00007f3d6a9ec600 00007f3d6a9ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000e 0000000000000000 0000000000000000 0000000000000438 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000202 RBX=0000000000000005 RCX=ffffffff84ffaa80 RDX=0000000000000005 RSI=ffffffff84ff9c5e RDI=ffffc90003ebf2f8 RBP=ffffc90003ebf2f8 RSP=ffffc90003ebf168 R8 =0000000000000007 R9 =000000000000001e R10=0000000000000004 R11=0000000000000000 R12=0000000000000000 R13=ffffc90003ebf238 R14=0000000000000005 R15=ffffc90003ebf400 RIP=ffffffff8208d00f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f10ecf41300 ffffffff 00c00000 GS =0000 ffff8880d6442000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555d10107000 CR3=000000001c372000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000347 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8210001003081000 0003000800041000 5a10000600738410 0000020500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002e00310100002 d00302100002c003 1080808080100002 b00312100002a003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0410000290030610 0002800300100001 f0031ffe100001e0 030e100001d00304 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100001c003061000 01b0030c100001a0 0308100001900304 10000180030a1000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70030c1000600304 1000500310100040 0340801000300304 1000200320808080 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffae00000000 0300000000000019 0000000cffffffda ZMM25=6d1fd4846d1fd484 6d1fd4846d1fd484 6d1fd4846d1fd484 6d1fd4846d1fd484 6d1fd4846d1fd484 6d1fd4846d1fd484 6d1fd4846d1fd484 6d1fd4846d1fd484 ZMM26=58f69cca58f69cca 58f69cca58f69cca 58f69cca58f69cca 58f69cca58f69cca 58f69cca58f69cca 58f69cca58f69cca 58f69cca58f69cca 58f69cca58f69cca ZMM27=915b97eb915b97eb 915b97eb915b97eb 915b97eb915b97eb 915b97eb915b97eb 915b97eb915b97eb 915b97eb915b97eb 915b97eb915b97eb 915b97eb915b97eb ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 9304000093040000 info registers vcpu 2 CPU#2 RAX=0000000000103bc3 RBX=ffff88801eaf4980 RCX=ffffffff8b904c75 RDX=0000000000000000 RSI=ffffffff8de7798c RDI=ffffffff8c1b0b20 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c6795 R10=ffff88806a633cab R11=0000000000000000 R12=0000000000000002 R13=ffffed1003d5e930 R14=0000000000000002 R15=ffffffff90d9a010 RIP=ffffffff8b9035df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6542000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3d6b54da08 CR3=000000003c503000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0725dfdbfc000000 000001002f000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced4886b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced4886b6 00007ffced4886bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba3327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba33420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dbbec600 00007f94dbbec5e0 00007f94dbbec5e8 00007f94dbbec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dbbec5f8 00007f94dbbec5c8 00007f94dbbec600 00007f94dbbec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff81cfa5ef RCX=ffffc9000160eda0 RDX=1ffff920002c1db8 RSI=ffffffff81fce38c RDI=ffffffff81cfa5ef RBP=ffffc9000160eee0 RSP=ffffc9000160ed38 R8 =ffffc9000160edc0 R9 =ffffc9000160eee0 R10=0000000000000000 R11=000000000000cfab R12=ffffc9000160eda0 R13=ffffc9000160edc0 R14=ffffc9000160ee00 R15=ffffc9000160ede0 RIP=ffffffff81fce3a1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6642000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f94db9e9e80 CR3=000000003c503000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0725dfdbfc000000 000001002f000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced4886b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffced4886b6 00007ffced4886bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba3327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba33420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dba332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dbbec600 00007f94dbbec5e0 00007f94dbbec5e8 00007f94dbbec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94dbbec5f8 00007f94dbbec5c8 00007f94dbbec600 00007f94dbbec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000