last executing test programs: 46.341345309s ago: executing program 0 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=r0], 0x30}, 0x1, 0x0, 0x0, 0x40005}, 0x10) 46.338027467s ago: executing program 0 (id=421): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') (async) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) 46.259731677s ago: executing program 0 (id=423): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) (async) 46.198520288s ago: executing program 0 (id=424): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r2, 0x6a, 0x1, 0x0, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x106f) 46.195653626s ago: executing program 0 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1000', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r2 = getpgrp(0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r4, 0x0, 0x0, 0x800) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)) r5 = getpgid(0xffffffffffffffff) syz_clone3(&(0x7f0000000480)={0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x2e}, &(0x7f00000002c0)=""/194, 0xc2, &(0x7f00000003c0)=""/100, &(0x7f0000000440)=[r2, r3, r5], 0x3, {r0}}, 0x58) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe000001000000000800010000011100"], 0x2c}}, 0x0) 46.060042624s ago: executing program 0 (id=429): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x2, @loopback, 0x6}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, r2, 0x0, '\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) (async) sendfile(r0, r3, &(0x7f0000000080)=0x3, 0xffff) 42.151033647s ago: executing program 3 (id=480): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='measure func=FILE_CHECK obj_type=unconfined_t', 0x2d) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0xf4b83c9, 0xc4bb, 0xe663, 0x2712a87e}}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000000)={"18aaa7a0", 0xf000, 0xd, 0x74, 0x6, 0xca6d, "edc91520e8491aac7c0c8782f854d2", "bb2909e5", "58e0c122", "1f84dbf9", ["e4b650dc5980705d774c7a13", "09fabf4789fd25aaa4c16195", "21f49ac1cb6bf75ef674320f", "2b256c9c0331467a305164b2"]}) recvmmsg$unix(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 42.150268688s ago: executing program 3 (id=481): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) (async) open(&(0x7f00000001c0)='./file0\x00', 0x143042, 0x80) (async, rerun: 32) ioctl$UI_DEV_CREATE(r2, 0x5501) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) (async, rerun: 64) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x18, &(0x7f0000000340)='debug') (async, rerun: 64) close(0x3) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000007, 0x0, 0x0, 0x1d, 0xd, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000132900", "2809eadbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x9, 0x40]}}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002"], 0x60}}, 0x0) (async, rerun: 64) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x200002) 42.038809153s ago: executing program 3 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x125) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./tracing\x00', 0x7) creat(&(0x7f00000005c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x4b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x125) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, 0x0) (async) umount2(&(0x7f0000000040)='./tracing\x00', 0x7) (async) creat(&(0x7f00000005c0)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x4b) (async) 41.950394725s ago: executing program 3 (id=483): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='6\n\x00', 0x2) mkdir(&(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_configfs/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000000)="99b045fc99", 0x5) write(r0, &(0x7f0000000100)='5\n\x00', 0x2) write(r0, &(0x7f0000000100)='4\n\x00', 0x2) write(r0, &(0x7f0000000100)='7\n\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000040)={0xa, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="02010002020000009b2cf3d200000016"], 0x10}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0x8d}]}) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, 0x0) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) 41.85927439s ago: executing program 3 (id=484): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) getdents(r0, &(0x7f0000000140)=""/80, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000010000)=[@text32={0x20, &(0x7f0000000340)="b934000000b80401c0feba000000000f3064f23ef78ded6dffff02000000c4c2f192acc2f8ff96a466b816610101f8d866baf80cb80fc5008def66bafc0cecc4e2fdb6fff3af0fc76b9466baf80cb8bf195a84ef66bafc0cb0cfee66baf80cb8f092a18cef66bafc0c66b847f566ef", 0x6f}], 0x1, 0x36, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x183, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) 41.351017945s ago: executing program 3 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000083000021000b"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000140)={0x3, 0x1, 0x2, 0x8d11, 0xffffffff, 0x2000081, 0x2, 0x7, 0x7fffffff, 0xfffffffc, 0x8, 0x6bf2, 0xfffffffa, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 41.349731605s ago: executing program 32 (id=486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f00000083000021000b"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000140)={0x3, 0x1, 0x2, 0x8d11, 0xffffffff, 0x2000081, 0x2, 0x7, 0x7fffffff, 0xfffffffc, 0x8, 0x6bf2, 0xfffffffa, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) 30.903187309s ago: executing program 33 (id=429): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x2, @loopback, 0x6}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, r2, 0x0, '\x00', 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) (async) sendfile(r0, r3, &(0x7f0000000080)=0x3, 0xffff) 21.711133015s ago: executing program 1 (id=695): r0 = eventfd2(0x5, 0x801) mmap(&(0x7f0000153000/0x2000)=nil, 0x2000, 0x1f, 0x80010, r0, 0x778dd000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 21.650009151s ago: executing program 1 (id=696): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2) fcntl$notify(r2, 0x402, 0x8000000e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-vaes-avx512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="00112233445566778899aabbccddeeff00112233", 0x14) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="00112233445566778899aabbccddeeff", 0x10}], 0x1}, 0x0) read$alg(r4, &(0x7f0000000400)=""/32, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 21.649728457s ago: executing program 1 (id=697): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x226802, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x2fc, 0xed}, {0x274, 0x0, 0xe}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x24004084}, 0x48090) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x0, 0x8000000000000000, 0xc592, 0x200000, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x8d], 0xeeee8000, 0x2190d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a0001"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x10, 0x6, {0x6, 0x11, "132458e6"}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) write(r5, 0x0, 0x0) 18.581116695s ago: executing program 1 (id=742): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f000000a380)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) (async) close(r0) (async) 18.420144318s ago: executing program 1 (id=747): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r1 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x5, 0x2}, 0x50) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9529000) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DVD_READ_STRUCT(r6, 0x5390, &(0x7f0000001040)=@bca={0x3, 0xbc, "3672ace483bbb4982bff1297dc4ba5ffcca97ee574485edbce3b6d0a592f98cecd3b6e9ab371232b4bb37b2b0a8d877e2313dc7d3c404c4ed4ae604cbe7971007d9b140a9fe85827e62c852a1366bd322ba4d31cf3a82a4d19a635b3ad3b829618973d5667301251f418cd08478850a02517be3f03b3910dd7d82bbb1c78b369c69a41ccd8f11f36097f69c9a0e27eb6052dbf8dad8420a76a8060513300af859d09cd58b106860fa502d46076c1c6619e55e50e547dffb8f3fef351"}) close_range(r0, 0xffffffffffffffff, 0x0) 17.850704516s ago: executing program 1 (id=754): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, &(0x7f0000000000)) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) r3 = dup3(r1, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0x4008010) (async) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4000041) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async, rerun: 32) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f3c000000000000000100003c00"], 0x6a) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) (async) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x2}, @IFLA_MACSEC_ES={0x5, 0xa, 0x8}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xc0}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) 17.818022022s ago: executing program 34 (id=754): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, &(0x7f0000000000)) (async) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) r3 = dup3(r1, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x8, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0x4008010) (async) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4000041) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) (async, rerun: 32) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f3c000000000000000100003c00"], 0x6a) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) (async) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x2}, @IFLA_MACSEC_ES={0x5, 0xa, 0x8}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xc0}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) 2.369119489s ago: executing program 4 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x31) (async) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20000, 0x68) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) (async) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff26}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040010}, 0x24000020) (async) syz_emit_ethernet(0x77, &(0x7f0000001180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x3d, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "74cd7b", 0x0, 0x3c, 0x0, @private1, @mcast1, [@hopopts={0x2c}], "c6214c55d1"}}}}}}}, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) (async) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 2.29971195s ago: executing program 4 (id=969): r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) getpeername$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) pwrite64(r0, &(0x7f0000000180)='\n\x00\x00', 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fedbdf257900000008000300", @ANYRES32=r2, @ANYBLOB="82f7ab35220fffcd7002ddde76fee725f503604768"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c90012000e00050015090a"], 0x17) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x41, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000ff2f07580f274f14", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) 2.24052357s ago: executing program 4 (id=971): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000005000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc3b43f3aa3d305c6fc23775f803abf2a9fa26b1f5b65555f90870b5d54ec3e7d302ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a"], 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1a9401, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='my_tracefs/events/task/task_rename/filter\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="00fba1069b31a6508ce421bbbe1dbbb34f0fe2e42ea88844d01de09b85ee6ea6f7d3c5ecf36088c94ce254d573d6a3249333a445171aa10ce9d0f1269e0d8dee93105d042904eff69acbce52cef2566354a5127c670f071cf916f545b65499cc4607be46dfff5ab167a53b47cd01b46224b263f7e227bf4016c61b74ba31cc16f3a7f781f9bc8c000000000000000000000000003900"/163], 0xa1, 0x2) write(r1, &(0x7f0000000240)='oom_score_adj < -', 0x11) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 1.808328251s ago: executing program 6 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r4, 0x0, 0x8e14, 0x8ffff) copy_file_range(r4, 0x0, r4, &(0x7f0000000500)=0xffff, 0x9, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x38, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc}]}, 0x38}}, 0x8051) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0100001000130700000000000000000a010100000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d3330000002001000000000000000000000000000200000000000000000000b142c19e1a8913680000000000000000000000000000000000000000000000000000000000000000000000000080ffffffffffffffff01000000000000800000000000000000feffffffffffffff000000000000000000000000000000000000000000000000023500000200020000000000000000004c0014"], 0x13c}}, 0x4000050) socketpair(0x21, 0x800, 0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x140d, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000800) 1.588922978s ago: executing program 6 (id=982): r0 = open(&(0x7f0000000000)='./file0\x00', 0x400080, 0xd8) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f00000001c0)={{0x7fffffffffffffff, 0x0, 0x9, 0xd, 0xa9}, &(0x7f0000000040)=[{}, {}]}) r1 = syz_open_dev$admmidi(&(0x7f0000000240), 0x0, 0x640880) read$midi(r1, &(0x7f0000000280)=""/223, 0xdf) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$CEC_ADAP_G_PHYS_ADDR(r2, 0x80026101, &(0x7f00000003c0)) flistxattr(r2, &(0x7f0000000400)=""/221, 0xdd) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r0, &(0x7f0000000500)=@generic, &(0x7f0000000580)=0x80) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x6, 0xe2ce, 0x2, 0x9, 0x1}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000006c0)=@assoc_value={r4, 0xeba}, &(0x7f0000000700)=0x8) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e20, 0x2, @loopback, 0x10001}, 0x1c) recvmmsg(r2, &(0x7f0000000e00)=[{{&(0x7f0000000780)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000900)=""/172, 0xac}, {&(0x7f00000009c0)=""/54, 0x36}, {&(0x7f0000000a00)=""/153, 0x99}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/254, 0xfe}], 0x6, &(0x7f0000000d40)=""/141, 0x8d}, 0x401}], 0x1, 0x1, &(0x7f0000000e40)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000e80)={r5, 0x7}, 0x8) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0x84, r6, 0x0, 0x70bd2b, 0x3, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x84}}, 0x24040010) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r2) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x40}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x240440c1}, 0x20000800) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000011c0), &(0x7f0000001200)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001240)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9}, 0x90) memfd_create(&(0x7f0000001300)='\x00', 0x6) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000001340)={0xa, {0x5, 0x6, 0x4}}, 0xa) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x60, 0x0, 0xb, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x9, 0x1, 'TIPC\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000014c0)={'tunl0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001500)={{{@in=@multicast2, @in6=@remote, 0x4e23, 0xa, 0x4e24, 0x8, 0x2, 0x20, 0x0, 0x33, 0x0, 0xee00}, {0x0, 0xa1c, 0x5, 0x7f, 0x26fe0000000, 0x7ff, 0x7fffffff, 0x1}, {0x9, 0xfff, 0x9, 0x2}, 0x401, 0x0, 0x0, 0x1, 0x2}, {{@in6=@private2, 0x4d6, 0x3c}, 0x2, @in6=@private0, 0x3503, 0x0, 0x3, 0x8, 0x6, 0xf6b, 0x8b2}}, 0xe8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001640)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x7, 0x3, 0x7ff, 0x7, 0x8], 0x7, &(0x7f0000001600)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) syz_io_uring_setup(0x2a3b, &(0x7f0000001740)={0x0, 0x801c, 0x8000, 0x0, 0x70, 0x0, r0}, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) syz_genetlink_get_family_id$gtp(&(0x7f0000001880), r0) 1.588382454s ago: executing program 2 (id=983): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.587945471s ago: executing program 2 (id=984): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRESHEX, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20040001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x5c, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x5c}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9001000085288f16346c27882139ce74a72322fb9bd69c62be700341c1192916c7ec27f92fe30a6625567abdaa46ff0bc8ae05a5f4ac75e8f1cde7e7b462247c9e3fdcc7e8d2d5976df73fe4b0588b8abc9dd066fae1734a8608f7e64c75fb81f6fe00a280c46605c59101fd50dc689db5fccbf7c5d9da76f33d96527e6882249bf05d83de45a0e600240f99a66c3b15a7c6742470031cb5685429b9286b5e1bd9b9e38f9a0b6a37d99957d15a5c2063e3fb6bdd70388dd32cb64854929c25e005c2280743e7e6a6", @ANYRES16=0x0, @ANYBLOB="040029bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="740102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x190}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50) r9 = fsopen(&(0x7f0000000400)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0x82) fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) close_range(r11, 0xffffffffffffffff, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r12, 0x79f, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="0200000001000000000000000000000000000000007e000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r14, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r15, 0x6}, 0xb) ioctl$FIONCLEX(r14, 0x5450) 1.585283006s ago: executing program 6 (id=985): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xd8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r6, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="08152f0672c7f649d09a9e8f75e8f93b0807debd097fe01c09e70bb933f2f5fef44a57af836361adb9c4c75521f5311fdb4c7b2cec03b1fbf1157277f1966556205a892dc9f84738e0d3fbf6a26e1a0c69b2418a8bb1d88c942605b070afe22ce212a861e3b1b259"], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030029bd70000e0000220100000008000100", @ANYRES32=r6, @ANYBLOB="08000200000000000c0003"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003d00)=@delchain={0x890, 0x65, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0x10}, {0x7, 0xfffb}, {0x0, 0xb}}, [@f_tcindex={{0xc}, {0x860, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0x844, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcf5, 0x40, 0x42f, 0x1ff, 0x7b, 0x8, 0x1, 0xffffffff, 0x0, 0x7, 0x0, 0x6, 0x1, 0x1, 0x8, 0x10, 0x1, 0x3, 0x8001, 0x1, 0x1, 0xb, 0xc8, 0xa969, 0x8000, 0x80000000, 0x7fffffff, 0x35c, 0x8001, 0x9, 0xd6d8, 0x2, 0x86, 0xfffffffe, 0x3, 0x6, 0x7, 0x3, 0x4, 0x3d6, 0x7, 0x8, 0x40, 0x1, 0xd9a, 0xfffffffd, 0x8, 0x6, 0xffffffc0, 0xfa1, 0x4, 0x8, 0x86, 0xe, 0x9, 0x9, 0xd91, 0x3, 0x9, 0x3, 0x5, 0xffffffad, 0x7, 0x0, 0x200, 0x686, 0x1, 0xe, 0x700000, 0x401, 0x3, 0x6395, 0x3, 0xfffffff5, 0x1, 0x5, 0x3, 0x8, 0xd00, 0x10000, 0xdd01421, 0x9, 0x8001, 0x6, 0x3, 0x3d29, 0x4, 0x9, 0x7, 0x2, 0x0, 0x8, 0x2, 0x9, 0x7f, 0x6, 0x5, 0xb7f7, 0x2, 0x9, 0x5, 0x2, 0x0, 0x795a, 0xa12a, 0x8, 0x7, 0x200, 0x10, 0x10, 0x1a, 0x4, 0x0, 0x80, 0x40, 0x8, 0x9, 0xbf, 0x6, 0xe, 0xd0, 0x3, 0x9, 0x1, 0x8, 0x95, 0x3, 0x6, 0x4, 0x3, 0x8, 0xfffffff8, 0x2ce6, 0x3ff, 0x8, 0x800, 0x816, 0x9, 0x0, 0x7, 0x3, 0x4, 0x4, 0x4, 0x8, 0x81, 0xfff, 0x100, 0x0, 0x0, 0x9, 0xfffffa97, 0x4, 0x1, 0x2, 0x5df, 0x1, 0x1, 0xfff, 0x5, 0x1, 0x10, 0x81, 0x2, 0x8, 0x6d5, 0xa58a, 0x100, 0x2, 0x7, 0x5, 0x4, 0xffff, 0x4, 0xa8, 0x9b94, 0x0, 0x9, 0x3, 0x2, 0x8000, 0x4, 0x0, 0x3, 0xfffffff7, 0x85, 0x9, 0x4, 0xc0, 0x6, 0x2, 0x433, 0x1, 0x6, 0x0, 0x5cc3, 0x0, 0x5, 0x7fb8, 0xde5, 0x8, 0x9, 0x2, 0x7f, 0x0, 0x7, 0x8001, 0xe, 0xc3, 0x615a, 0x9, 0x0, 0x1, 0x7, 0xac78, 0x401, 0xa, 0x5, 0xfffffffe, 0x2, 0xfffff153, 0xa639, 0x4, 0x6, 0x100, 0x800, 0x80, 0x80000000, 0x7fff, 0x6, 0x5, 0xf3, 0x9, 0x3, 0x4, 0xb, 0x6, 0xfffffff7, 0xa6f, 0x4, 0x6, 0x3, 0x400, 0x8, 0x8000, 0x3d, 0x7, 0x9, 0x2, 0x5, 0x1, 0x8, 0x6, 0x5, 0x1ff, 0x400]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x5, 0x1, 0x5, 0x7, 0x3, 0x8, 0xff, 0x6, 0x2, 0x80000000, 0x2, 0x4a9, 0x6, 0x101, 0xf, 0xfffffff9, 0x23fd, 0x8, 0x1, 0x8, 0x8, 0x4, 0xffffff2e, 0x3a0, 0x7f, 0x9, 0x1, 0x9, 0xe, 0x6, 0x3, 0x0, 0x3, 0x2, 0xb, 0x9, 0x100, 0xb, 0x2, 0x8000, 0x3, 0x2, 0x9, 0x100, 0x0, 0x4, 0x921, 0x1, 0x8, 0x6, 0xae, 0x1, 0x2, 0x240, 0x4, 0x3, 0x1000, 0x0, 0x2, 0xffffffff, 0x6, 0x4, 0x5, 0xf, 0x2, 0x6, 0x1, 0x7, 0x2, 0xa, 0x1, 0x5, 0xe8a0, 0x9, 0x5, 0x0, 0xc365, 0x1000, 0x100, 0xffff, 0x40, 0xb, 0x7, 0x0, 0x1, 0x5, 0xf58, 0x1, 0xefcb, 0x9, 0x6, 0x6, 0x1, 0xef, 0x2, 0x6, 0x9, 0x9, 0xffffffff, 0x4, 0x1, 0x8, 0x400, 0x16d, 0x722aa898, 0x401, 0x1, 0x0, 0x7, 0x3, 0xe, 0x4, 0x1, 0x4b, 0x8, 0x6, 0x80000001, 0x8, 0x5, 0x29, 0x5, 0x2, 0x48, 0xac, 0x401, 0xfffff000, 0xf5, 0x3ff, 0x6755, 0x0, 0x5, 0x5, 0x200, 0x9, 0x1aa, 0x200000, 0x8, 0x7, 0x80000000, 0x3ff, 0x8, 0x1ff, 0x40, 0xf, 0x5, 0xfffffc01, 0x0, 0x34c1, 0xa, 0x39, 0x8, 0x4, 0x0, 0x0, 0x3, 0x1, 0x1, 0x8, 0x20000000, 0xff80, 0x2b, 0x1, 0xe97a, 0x2, 0x8, 0x40, 0x1ff, 0x3, 0x6, 0x107, 0x9, 0x6, 0x0, 0x0, 0x8, 0x7, 0x3, 0x2, 0xc, 0x7, 0x95, 0x7ff, 0x5, 0x1, 0xffff, 0xfffffff0, 0x6, 0x9, 0x5, 0x80, 0x8, 0x214, 0x64ba7a33, 0x9, 0x95a, 0x0, 0x1, 0x7, 0x3, 0x1d5, 0x0, 0x8, 0xfff, 0x1, 0x6, 0x9, 0x3, 0x5, 0xc, 0x4, 0x5, 0x7ff, 0x4, 0x4be3f77b, 0x5, 0x617e, 0x2054, 0x8, 0x2, 0x10000, 0x401, 0x5, 0x6, 0xfffff286, 0x382a, 0x8, 0x3, 0x7, 0xffffff81, 0x5aa4, 0x5, 0xfffffff9, 0x3, 0x3, 0x7fff, 0x4, 0x8, 0x1ff, 0x8, 0xf, 0x2bdd, 0x9, 0x4, 0x1, 0x88, 0x10001, 0x81, 0x1, 0xf26, 0x7, 0x1, 0x80000001, 0x94d, 0x83, 0x44]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xe5}]}}]}, 0x890}}, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/219, 0x217}, {&(0x7f0000000800)=""/129, 0x81}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000200)=""/76, 0x4c}], 0x4}, 0xfffffffe}], 0x1, 0x0, 0x0) recvmsg(r2, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1}, 0x40002020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x630100, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) recvfrom$unix(r2, &(0x7f0000002c80)=""/4096, 0x1000, 0x10000, &(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r9, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) 1.509915923s ago: executing program 2 (id=986): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x446c0, 0x8) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x80, 0x5592, 0xc18, 0x1, {0x4, 0x5, 0x9, 0xa, 0x9, 0x3ff, 0x5, 0x5, 0x1, 0xa000, 0x3c0040, 0xee00, 0x0, 0x1, 0xc}}, {0x0, 0x12}}}, 0xa0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x4b5, &(0x7f0000000300)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xe4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000fc0)={'security\x00', 0x2, [{}, {}]}, 0x48) write(r3, &(0x7f0000000240)='hello_world', 0xb) fsmount(r3, 0x0, 0x60) fsetxattr$security_ima(r1, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x24, r8, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc40}, 0x4000) 1.509644278s ago: executing program 4 (id=987): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x20000001}) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0xc1a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x2000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x4, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x24048810) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/4, 0x4, 0x720, 0x0, 0x0) 790.537079ms ago: executing program 5 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x900000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x39) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r3, 0xaea3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e22, 0xfffff2cd, @local, 0xb}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, '6'}]}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1f7) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x0, &(0x7f0000000180)={'L-', 0x8}, 0x16, 0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000680)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 671.162301ms ago: executing program 6 (id=991): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @loopback}, 0x248, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='vlan0\x00', 0x100, 0x7, 0x3}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x34, r4, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 670.735191ms ago: executing program 5 (id=992): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x27, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000001}, {0x2, @uvalue=0xfff}, {0x1, @svalue=0xdf03}, {0x1, @uvalue=0x7c31}]}, 0x3}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05001000000040000000020000000900010073797a30000000000900030073797a3100000000"], 0x2c}}, 0x0) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000280), 0x59, 0x40010040, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0xb0, r7, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0xfffffffffffffe38, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x0, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x0, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID]}, @IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x0, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x0, 0x8, 0xd0c6}, @IPVS_DEST_ATTR_U_THRESH={0x0, 0x5, 0x69cb}, @IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x401}, @IPVS_DEST_ATTR_TUN_TYPE={0x0, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x0, 0x5, 0xff}]}]}, 0xb0}}, 0x1) 600.794965ms ago: executing program 5 (id=993): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000300001801c000280080002007f000000080001001d0000000a000300ff0f00000d0001"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40804) socket(0x2a, 0x5, 0xd) creat(0x0, 0xae) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000000040), 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 528.070925ms ago: executing program 6 (id=994): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r2 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip_vti0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301dd0ee30100009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 527.77008ms ago: executing program 4 (id=995): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 480.706047ms ago: executing program 6 (id=996): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0xb, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_io_uring_setup(0x57a, 0x0, 0x0, 0x0, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="320000dcdf25037c000006004c80fd2e0000ff7f0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd27, 0x2ddfdbbf, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x20048410) (async) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) (rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000004040)=[{{0x0, 0xffffffffffffff7b, 0x0, 0x0, &(0x7f0000000000)=""/118, 0x76}, 0x200000be}], 0x1, 0x40001043, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 398.924771ms ago: executing program 4 (id=997): syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='apple,cd321x 0x38\n\x00', 0x13) (async) 141.00135ms ago: executing program 2 (id=998): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x300}, 0x8) r2 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d5}, 0xc010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES64=r5, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 61.322173ms ago: executing program 5 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) mount$cgroup(0x0, 0x0, 0x0, 0xa04004, &(0x7f0000000200)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 60.790593ms ago: executing program 2 (id=1000): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x129000, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x10) (async) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000400)={0x0, 0xcc19, 0x130c8, 0x1, 0x30e}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x67) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10008007}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r4, 0x7d4f, 0x7723, 0x16, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x1000003, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x0, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x8, 0x3, 0x1, 0xa3f, 0x9, 0x200, 0xaaa, 0x2, 0x9, 0x200, 0x2, 0x86, 0xfffffff9, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x0, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x8, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x2, 0x8001, 0x4, 0xfffffffd, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0x2, 0x2, 0xffffffff, 0x9, 0x5, 0x8, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6789, 0x40, 0xdd9, 0x800, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x101, 0x8, 0x3, 0x3, 0x1ff, 0x8004, 0x7, 0x1, 0x9, 0x801, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x200005, 0x400, 0xb, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0x7f, 0xfffffffe, 0xac9, 0x8, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x1, 0x7ff, 0x7, {0x5, 0x1, 0xfffe, 0x0, 0x3, 0x6}, {0x3, 0x1, 0xff, 0x2, 0x7, 0x239c}, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x2, 0x1, 0xffff000, 0xfd, 0x3, 0x4d, 0x3, 0x9, 0x4, 0xffffff15, 0x2, 0x48, 0x9, 0x100, 0x6, 0x0, 0xfffff943, 0x4, 0x7ff, 0x8, 0x5, 0x40, 0x400, 0x0, 0x2, 0x6, 0x8, 0x7fffffff, 0x6, 0x401, 0x8, 0x3, 0x0, 0x7, 0xfffff1b2, 0x3af6, 0xb, 0x8, 0x2, 0x8, 0x2, 0x6, 0x6942, 0x54740000, 0xbd, 0x0, 0x1, 0x8, 0x1, 0x7fff, 0xca, 0x2, 0x0, 0x9, 0x8, 0x81, 0x3, 0x5, 0x3, 0x9, 0x77e, 0xb95, 0x8, 0x0, 0x0, 0xdcb, 0xfffffff7, 0x1, 0xffffffff, 0x800, 0x3, 0x38e, 0xfffffffd, 0x4, 0x7fffffff, 0x5, 0x8000, 0xa, 0x6, 0x4, 0xdffffff8, 0xd2, 0x4, 0x9, 0x2, 0xa170, 0x81, 0x8000, 0x1687, 0x8, 0x4, 0xb, 0x0, 0xffffffff, 0x7ff, 0x4, 0x7b, 0x183cf332, 0x8, 0x7f, 0x80000001, 0x8, 0xf41849fd, 0xfffffffd, 0x7, 0x6c, 0x5, 0x6, 0x3, 0x6, 0xfffffff9, 0x9, 0x6, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0xf3, 0x8, 0x1, 0x7fffffff, 0x6, 0xd0c9, 0xa6d, 0x0, 0x3, 0xd6, 0x4, 0x7bf6, 0xffffffa1, 0x73c, 0x6, 0x6, 0x5, 0x200, 0x5, 0x2, 0xe2df, 0xfffffff6, 0x100, 0x1000, 0xa1d4, 0xd4, 0xd, 0x5, 0x1, 0x5, 0x0, 0x3, 0x0, 0x401, 0xd53, 0xfff, 0x10, 0x4, 0x8, 0x6, 0x1f1, 0x9, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x1, 0x5, 0xa, 0x5, 0x5, 0xffffff35, 0x8, 0xd, 0x101, 0xffffffff, 0x8, 0xc24, 0xd84, 0x6, 0x3, 0xa, 0x10001, 0x3, 0x1, 0xfffffffa, 0x7, 0xc8, 0x8, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xfffffff7, 0x20e, 0x7, 0x7fffffff, 0x10001, 0x4, 0x400, 0x8, 0x2, 0x9, 0x6, 0x5, 0xfffffff9, 0x5, 0x1, 0xe, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x72, 0x1, 0x8, 0xf, 0x80, 0x6, 0x3, 0x8, 0xda4, 0x81e, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x4, 0xa, 0x81, 0xeb1, 0xfff, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x1, 0x9, 0x16ea440d, 0xe7, 0xfffffff5, 0x4, 0x3, 0xccb4, 0x400, 0xa51, 0x8, 0x3, 0x4155, 0xedb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x130, 0x0, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0x8, 0xd590}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 60.524183ms ago: executing program 5 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae053d2c3e58519}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae053d2c3e58519}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) (async) 1.056024ms ago: executing program 2 (id=1002): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) read(r1, &(0x7f0000000140)=""/78, 0x4e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x2, 0x5, 0x5476, 0x2, 0xe, "77d7abdfa0a570be4e986b6c0670c4589bd76a"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100060000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 0s ago: executing program 5 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x40080) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000100)="00000000000000000000000000000100020000006c61706230") r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@float={0xf, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x28, 0x0, 0x61, 0x61, 0x5f, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/71, 0x2f, 0x47, 0x0, 0x80000000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX], &(0x7f0000003ff6)='GPL\x00', 0x1000002, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x78, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x873a84884f5b3ade, 0x7, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 5 (id=1004): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x204480, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r9, &(0x7f0000000380)='Y\n', 0x2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000980)={0x4, 0x3e0, 0x200, @empty, 'vlan0\x00'}) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f00000000c0)=0xb7) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket(0x400000000010, 0x0, 0x3581e500) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0xb, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x8, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x4, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0x5, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x200007, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x466, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xb, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0x6, 0xa7, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) kernel console output (not intermixed with test programs): onfig 0 has 1 interface, different from the descriptor's value: 9 [ 79.441949][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.445650][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.448810][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.452384][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.456162][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.459439][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.463549][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.467543][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.471731][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.474694][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.478817][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.482980][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.486074][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.490795][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.497303][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.501134][ T60] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.505590][ T5842] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.508763][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.511269][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.514230][ T5842] usb 7-1: Product: syz [ 79.515632][ T5842] usb 7-1: Manufacturer: syz [ 79.517759][ T5842] usb 7-1: SerialNumber: syz [ 79.521267][ T60] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.527129][ T60] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.531962][ T60] usb 8-1: Product: syz [ 79.534926][ T60] usb 8-1: Manufacturer: syz [ 79.537000][ T60] usb 8-1: SerialNumber: syz [ 79.551752][ T60] usb 8-1: config 0 descriptor?? [ 79.571199][ T60] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.573396][ T7154] block2mtd: device name too long [ 79.576968][ T42] audit: type=1400 audit(79.492:610): avc: denied { firmware_load } for pid=2323 comm="kworker/3:2" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 79.591415][ T2323] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.755727][ T60] usb 8-1: USB disconnect, device number 9 [ 79.764105][ T60] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 79.859614][ T7161] netlink: 'syz.1.332': attribute type 14 has an invalid length. [ 79.932295][ T7166] ip6gretap0: entered promiscuous mode [ 80.056355][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'. [ 80.065302][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 80.073129][ T7175] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=146 sclass=netlink_xfrm_socket pid=7175 comm=syz.1.336 [ 80.076965][ T7176] netlink: 'syz.3.335': attribute type 4 has an invalid length. [ 80.137871][ T5093] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 80.164604][ T5093] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 80.206370][ T42] audit: type=1400 audit(80.122:611): avc: denied { setattr } for pid=7186 comm="syz.1.339" name="dev" dev="proc" ino=4026532888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.222265][ T42] audit: type=1400 audit(80.142:612): avc: denied { read } for pid=7186 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.270500][ T5884] usb 7-1: USB disconnect, device number 9 [ 80.282358][ T7193] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 80.570825][ T5603] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 80.731957][ T5603] usb 5-1: Using ep0 maxpacket: 8 [ 80.746247][ T5603] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 80.746275][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.746292][ T5603] usb 5-1: Product: syz [ 80.746305][ T5603] usb 5-1: Manufacturer: syz [ 80.746318][ T5603] usb 5-1: SerialNumber: syz [ 80.751228][ T5603] usb 5-1: config 0 descriptor?? [ 80.775416][ T5603] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 80.779464][ T5603] dvb-usb: bulk message failed: -22 (2/0) [ 80.787444][ T5603] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.791547][ T5603] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 80.795197][ T5603] usb 5-1: media controller created [ 80.806249][ T5603] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.821823][ T2323] usb 7-1: Service connection timeout for: 256 [ 80.825193][ T2323] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 80.830830][ T2323] ath9k_htc: Failed to initialize the device [ 80.834390][ T5884] usb 7-1: ath9k_htc: USB layer deinitialized [ 80.968559][ T5603] dvb-usb: bulk message failed: -22 (1/0) [ 81.002318][ T5603] DVB: Unable to find symbol mt352_attach() [ 81.005087][ T5603] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 81.060764][ T5603] rc_core: IR keymap rc-dvico-portable not found [ 81.065741][ T5603] Registered IR keymap rc-empty [ 81.083982][ T5603] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 81.094237][ T5603] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input11 [ 81.101889][ T5603] dvb-usb: schedule remote query interval to 100 msecs. [ 81.104823][ T5603] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 81.127547][ T7226] netlink: 60 bytes leftover after parsing attributes in process `syz.1.353'. [ 81.172211][ T5884] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 81.179322][ T5883] usb 5-1: USB disconnect, device number 10 [ 81.227799][ T5883] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 81.283272][ T7235] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac14:1421 [ 81.293277][ T7235] netlink: 'syz.1.355': attribute type 17 has an invalid length. [ 81.296604][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 81.300115][ T7235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'. [ 81.326502][ T7235] erspan0: entered promiscuous mode [ 81.328957][ T7235] gretap0: entered promiscuous mode [ 81.363294][ T5884] usb 7-1: Using ep0 maxpacket: 8 [ 81.373829][ T5884] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 81.378831][ T5884] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.389556][ T5884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.396338][ T5884] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.399636][ T5884] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.404065][ T5884] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.407473][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.431590][ T7221] syz.3.352 (7221): drop_caches: 2 [ 81.472568][ T10] cfg80211: failed to load regulatory.db [ 81.529841][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 81.624342][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.626653][ T7261] ima: policy update failed [ 81.630183][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.637580][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.641569][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.645019][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.647981][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.651686][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.659477][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.664944][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.673732][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.683000][ T5884] usb 7-1: usb_control_msg returned -32 [ 81.686073][ T5884] usbtmc 7-1:16.0: can't read capabilities [ 81.724524][ T7283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7283 comm=syz.3.368 [ 81.732547][ T7279] Process accounting resumed [ 81.757444][ T7285] new mount options do not match the existing superblock, will be ignored [ 81.762389][ T7285] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 81.788708][ T2323] usb 7-1: USB disconnect, device number 10 [ 81.847301][ T5748] Bluetooth: hci4: sending frame failed (-49) [ 81.850241][ T5093] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 81.941400][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.002013][ T41] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 82.160879][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 82.164710][ T41] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 82.168137][ T41] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 82.172585][ T41] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.180529][ T41] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 82.184748][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.196038][ T41] usbtmc 8-1:16.0: bulk endpoints not found [ 82.255465][ T7317] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.260894][ T107] Bluetooth: hci4: Frame reassembly failed (-84) [ 82.273423][ T5883] net_ratelimit: 6 callbacks suppressed [ 82.273434][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.400730][ T5884] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 82.553046][ T5884] usb 6-1: config 0 has no interfaces? [ 82.555560][ T5884] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 82.559348][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.565523][ T5884] usb 6-1: config 0 descriptor?? [ 82.581067][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.755275][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.772053][ T2323] usb 6-1: USB disconnect, device number 8 [ 82.969587][ T2323] IPVS: starting estimator thread 0... [ 82.970207][ T7321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.060798][ T7322] IPVS: using max 46 ests per chain, 110400 per kthread [ 83.301103][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.310839][ T7328] __nla_validate_parse: 2 callbacks suppressed [ 83.310850][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.311162][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.318054][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.324119][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.327003][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.329892][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.335716][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.338753][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.342099][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.345374][ T5811] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.345459][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 83.349272][ T5811] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.356184][ T5811] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.370819][ T5811] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.395086][ T7331] overlayfs: failed to resolve './bus': -2 [ 83.474819][ T7336] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 83.537591][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 83.537607][ T42] audit: type=1400 audit(83.452:630): avc: denied { setopt } for pid=7337 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.550276][ T42] audit: type=1400 audit(83.462:631): avc: denied { write } for pid=7337 comm="syz.1.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.570368][ T42] audit: type=1400 audit(83.482:632): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.593835][ T42] audit: type=1400 audit(83.512:633): avc: denied { mount } for pid=7339 comm="syz.1.390" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 83.850778][ T2323] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 83.990791][ T5814] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.996144][ T5814] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.002299][ T5814] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.006154][ T5814] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.023256][ T2323] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 84.027207][ T2323] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.031350][ T2323] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.034815][ T2323] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 84.038448][ T2323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.045763][ T7340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.049805][ T2323] cyberjack 6-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 84.059896][ T2323] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 84.257279][ T2323] usb 6-1: USB disconnect, device number 9 [ 84.265940][ T2323] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 84.270732][ T2323] cyberjack 6-1:1.0: device disconnected [ 84.271972][ T5748] Bluetooth: hci4: command 0xfc11 tx timeout [ 84.273985][ T42] audit: type=1400 audit(84.192:634): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.274261][ T5093] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 84.361252][ T7370] tmpfs: Bad value for 'mpol' [ 84.364454][ T42] audit: type=1400 audit(84.282:635): avc: denied { write } for pid=7369 comm="syz.2.398" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.389020][ T42] audit: type=1400 audit(84.302:636): avc: denied { read } for pid=7366 comm="syz.1.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.448603][ T42] audit: type=1400 audit(84.362:637): avc: denied { ioctl } for pid=7380 comm="syz.1.401" path="socket:[17058]" dev="sockfs" ino=17058 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.756916][ T7403] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 84.781528][ T5884] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 84.790390][ T5840] usb 8-1: USB disconnect, device number 10 [ 84.954006][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.958756][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.963286][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.968943][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.973543][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.981435][ T5884] usb 6-1: config 0 descriptor?? [ 85.036783][ T42] audit: type=1400 audit(84.952:638): avc: denied { write } for pid=7418 comm="syz.0.413" name="/" dev="9p" ino=84934671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.046540][ T42] audit: type=1400 audit(84.962:639): avc: denied { write } for pid=7418 comm="syz.0.413" name="/" dev="9p" ino=84934671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.410504][ T5884] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.572154][ T7463] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.581688][ T7463] CIFS mount error: No usable UNC path provided in device string! [ 85.581688][ T7463] [ 85.585285][ T7463] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 85.660365][ T41] usb 6-1: USB disconnect, device number 10 [ 85.662390][ T7470] bridge0: port 3(wlan1) entered blocking state [ 85.666276][ T7470] bridge0: port 3(wlan1) entered disabled state [ 85.669598][ T7470] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 85.689825][ T7470] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 86.238972][ T7498] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 86.246113][ T5814] bond0: (slave bond_slave_0): interface is now down [ 86.255862][ T5814] bond0: (slave bond_slave_1): interface is now down [ 86.273112][ T7501] macvtap0: entered allmulticast mode [ 86.274983][ T7501] veth0_macvtap: entered allmulticast mode [ 86.293966][ T5814] bond0: (slave bond_slave_0): interface is now down [ 86.296915][ T5814] bond0: (slave bond_slave_1): interface is now down [ 86.304443][ T5814] bond0: now running without any active interface! [ 86.539781][ T7510] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 86.769142][ T5748] Bluetooth: hci2: failed to read key size for handle 200 [ 86.826457][ T7526] dvmrp0: entered allmulticast mode [ 86.863084][ T7528] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 87.096462][ T7538] cgroup: Name too long [ 87.102925][ T7538] xt_l2tp: missing protocol rule (udp|l2tpip) [ 87.371269][ T7545] binder: 7544:7545 ioctl f50f 0 returned -22 [ 87.626008][ T7563] program syz.1.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.633423][ T7564] program syz.1.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.740550][ T7580] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 87.852100][ T7583] process 'syz.3.465' launched './file0' with NULL argv: empty string added [ 87.947131][ T5748] Bluetooth: hci0: command 0x0406 tx timeout [ 87.968958][ T7588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45428 sclass=netlink_route_socket pid=7588 comm=syz.2.467 [ 88.022298][ T7590] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 88.034375][ T7592] sit1: entered promiscuous mode [ 88.041940][ T7590] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 88.053159][ T7590] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 88.064148][ T7590] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 88.107564][ T5093] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 88.111170][ T5093] CPU: 1 UID: 0 PID: 5093 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.111191][ T5093] Tainted: [L]=SOFTLOCKUP [ 88.111195][ T5093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.111212][ T5093] Workqueue: hci2 hci_rx_work [ 88.111312][ T5093] Call Trace: [ 88.111318][ T5093] [ 88.111325][ T5093] dump_stack_lvl+0x100/0x190 [ 88.111390][ T5093] sysfs_warn_dup.cold+0x1c/0x28 [ 88.111418][ T5093] sysfs_create_dir_ns+0x24b/0x2b0 [ 88.111453][ T5093] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.111477][ T5093] ? find_held_lock+0x2b/0x80 [ 88.111513][ T5093] ? kobject_add_internal+0x25f/0x930 [ 88.111556][ T5093] ? kobject_add_internal+0x25f/0x930 [ 88.111586][ T5093] ? do_raw_spin_unlock+0x145/0x1e0 [ 88.111614][ T5093] kobject_add_internal+0x2c8/0x930 [ 88.111646][ T5093] kobject_add+0x16a/0x1e0 [ 88.111670][ T5093] ? __pfx_kobject_add+0x10/0x10 [ 88.111720][ T5093] ? class_to_subsys+0x10f/0x150 [ 88.111815][ T5093] ? kobject_put+0xb9/0x640 [ 88.111845][ T5093] ? _raw_spin_unlock+0x28/0x50 [ 88.111883][ T5093] device_add+0x294/0x1970 [ 88.111912][ T5093] ? __pfx_dev_set_name+0x10/0x10 [ 88.111931][ T5093] ? __pfx_device_add+0x10/0x10 [ 88.111960][ T5093] ? mgmt_send_event_skb+0x2fb/0x460 [ 88.111992][ T5093] hci_conn_add_sysfs+0x1a3/0x260 [ 88.112020][ T5093] le_conn_complete_evt+0x11eb/0x1f60 [ 88.112056][ T5093] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.112077][ T5093] ? hci_event_packet+0x186/0xcd0 [ 88.112098][ T5093] ? hci_event_packet+0x186/0xcd0 [ 88.112127][ T5093] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 88.112153][ T5093] ? skb_pull_data+0x15f/0x1e0 [ 88.112224][ T5093] hci_le_meta_evt+0x34a/0x5f0 [ 88.112246][ T5093] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 88.112270][ T5093] hci_event_packet+0x51c/0xcd0 [ 88.112292][ T5093] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.112316][ T5093] ? __pfx_hci_event_packet+0x10/0x10 [ 88.112337][ T5093] ? kcov_remote_start+0x384/0x670 [ 88.112369][ T5093] ? lockdep_hardirqs_on+0x78/0x100 [ 88.112396][ T5093] hci_rx_work+0x451/0xfc0 [ 88.112420][ T5093] process_one_work+0xa23/0x1940 [ 88.112455][ T5093] ? __pfx_process_one_work+0x10/0x10 [ 88.112482][ T5093] ? __pfx_hci_rx_work+0x10/0x10 [ 88.112505][ T5093] worker_thread+0x5ef/0xe50 [ 88.112533][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 88.112554][ T5093] ? kthread+0x13a/0x450 [ 88.112571][ T5093] ? __pfx_worker_thread+0x10/0x10 [ 88.112589][ T5093] kthread+0x370/0x450 [ 88.112607][ T5093] ? __pfx_kthread+0x10/0x10 [ 88.112627][ T5093] ret_from_fork+0x72b/0xd50 [ 88.112658][ T5093] ? __pfx_ret_from_fork+0x10/0x10 [ 88.112686][ T5093] ? __switch_to+0x800/0x10f0 [ 88.112704][ T5093] ? __pfx_kthread+0x10/0x10 [ 88.112724][ T5093] ret_from_fork_asm+0x1a/0x30 [ 88.112762][ T5093] [ 88.112788][ T5093] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.223708][ T5093] Bluetooth: hci2: failed to register connection device [ 88.829994][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 88.830023][ T42] audit: type=1400 audit(88.742:656): avc: denied { lock } for pid=7602 comm="syz.1.473" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 88.936535][ T42] audit: type=1400 audit(88.852:657): avc: denied { mount } for pid=7608 comm="syz.2.474" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 89.232347][ T7621] hid-generic 0003:0627:0001.0001: pid 7621 passed too large report [ 89.300686][ T42] audit: type=1400 audit(89.212:658): avc: denied { write } for pid=7623 comm="syz.1.479" name="/" dev="9p" ino=84934671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.301228][ T5884] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 89.328800][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.444628][ T5884] usb 7-1: device descriptor read/64, error -71 [ 89.605072][ T42] audit: type=1400 audit(89.522:659): avc: denied { setopt } for pid=7625 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.648737][ T7629] /dev/sg0: Can't lookup blockdev [ 89.654758][ T7630] input: syz0 as /devices/virtual/input/input12 [ 89.684253][ T5884] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 89.810898][ T5884] usb 7-1: device descriptor read/64, error -71 [ 89.816001][ T42] audit: type=1400 audit(89.732:660): avc: denied { write } for pid=7640 comm="syz.3.483" name="functions" dev="configfs" ino=10152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.873491][ T42] audit: type=1400 audit(89.792:661): avc: denied { write } for pid=5734 comm="syz-executor" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.880581][ T42] audit: type=1400 audit(89.792:662): avc: denied { setattr } for pid=5734 comm="syz-executor" path="/143/my_configfs/thunderbolt" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.888390][ T42] audit: type=1400 audit(89.792:663): avc: denied { write } for pid=5734 comm="syz-executor" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.895424][ T42] audit: type=1400 audit(89.792:664): avc: denied { write } for pid=5734 comm="syz-executor" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.903032][ T42] audit: type=1400 audit(89.792:665): avc: denied { write } for pid=5734 comm="syz-executor" name="/" dev="configfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.922060][ T5884] usb usb7-port1: attempt power cycle [ 90.261084][ T5884] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 90.282470][ T5884] usb 7-1: device descriptor read/8, error -71 [ 90.297105][ T5811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.300407][ T5811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.442115][ T5811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.447528][ T5811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.522970][ T5884] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 90.542548][ T5884] usb 7-1: device descriptor read/8, error -71 [ 90.545338][ T5811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.552433][ T5811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.569912][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.573281][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.576982][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.579887][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.586535][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.651081][ T5884] usb usb7-port1: unable to enumerate USB device [ 90.680039][ T5811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.686381][ T5811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.749987][ T7666] ISOFS: Unable to identify CD-ROM format. [ 90.875161][ T7679] xt_hashlimit: overflow, rate too high: 1 [ 90.886094][ T7679] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 90.892448][ T5811] bridge_slave_1: left allmulticast mode [ 90.894666][ T5811] bridge_slave_1: left promiscuous mode [ 90.898424][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.904205][ T5811] bridge_slave_0: left allmulticast mode [ 90.906032][ T5811] bridge_slave_0: left promiscuous mode [ 90.907924][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.916257][ T5811] dvmrp0: left allmulticast mode [ 90.998837][ T7681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7681 comm=syz.1.491 [ 91.025823][ T5811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.030610][ T5811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.034900][ T5811] bond0 (unregistering): Released all slaves [ 91.077267][ T7679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.243263][ T5840] bridge0: entered promiscuous mode [ 91.286272][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 91.504716][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.509403][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.511882][ T7650] bridge_slave_0: entered allmulticast mode [ 91.526470][ T7650] bridge_slave_0: entered promiscuous mode [ 91.535100][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.537391][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.539494][ T7650] bridge_slave_1: entered allmulticast mode [ 91.562879][ T7650] bridge_slave_1: entered promiscuous mode [ 91.581632][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.629106][ T5811] hsr_slave_0: left promiscuous mode [ 91.632834][ T5811] hsr_slave_1: left promiscuous mode [ 91.634930][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.637312][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.640361][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.643093][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.654099][ T5811] veth1_macvtap: left promiscuous mode [ 91.656518][ T5811] veth0_macvtap: left allmulticast mode [ 91.658270][ T5811] veth0_macvtap: left promiscuous mode [ 91.660057][ T5811] veth1_vlan: left promiscuous mode [ 91.663507][ T5811] veth0_vlan: left promiscuous mode [ 91.811567][ T5811] team_slave_1 (unregistering): left promiscuous mode [ 91.815261][ T5811] team0 (unregistering): Port device team_slave_1 removed [ 91.827591][ T5811] team_slave_0 (unregistering): left promiscuous mode [ 91.835869][ T5811] team0 (unregistering): Port device team_slave_0 removed [ 91.949756][ T7650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.954707][ T7650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.969879][ T7650] team0: Port device team_slave_0 added [ 91.974485][ T7650] team0: Port device team_slave_1 added [ 92.014730][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.017257][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.033115][ T7650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.047524][ T7650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.060261][ T7650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.075085][ T7720] program syz.2.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.080598][ T7650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.093079][ T7720] __nla_validate_parse: 35 callbacks suppressed [ 92.093089][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 92.106706][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 92.113230][ T7720] program syz.2.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.123595][ T7650] hsr_slave_0: entered promiscuous mode [ 92.125965][ T7650] hsr_slave_1: entered promiscuous mode [ 92.128093][ T7650] debugfs: 'hsr0' already exists in 'hsr' [ 92.129893][ T7650] Cannot create hsr debugfs directory [ 92.133537][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.289700][ T7650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.305102][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.309630][ T7650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.313809][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.320425][ T7650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.325898][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.328556][ T7736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.499'. [ 92.334037][ T7736] netlink: 144 bytes leftover after parsing attributes in process `syz.2.499'. [ 92.337283][ T7650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.345291][ T7650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.356992][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 92.416043][ T7650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.425417][ T7650] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.432085][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.434534][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.444066][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.447076][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.513059][ T7752] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 92.517417][ T7752] Error validating options; rc = [-22] [ 92.663109][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 92.670872][ T5093] Bluetooth: hci1: command tx timeout [ 92.677898][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.836127][ T7650] veth0_vlan: entered promiscuous mode [ 92.845344][ T7650] veth1_vlan: entered promiscuous mode [ 92.868608][ T7650] veth0_macvtap: entered promiscuous mode [ 92.874446][ T7650] veth1_macvtap: entered promiscuous mode [ 92.888927][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.897751][ T7650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.920751][ T5814] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.926623][ T5814] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.950930][ T5811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.998428][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.003487][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.020373][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.025068][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.033545][ T5814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.153370][ T7782] batadv_slave_1: entered promiscuous mode [ 93.170381][ T7782] batadv_slave_1: left promiscuous mode [ 93.491936][ T7811] netlink: 'syz.1.510': attribute type 4 has an invalid length. [ 93.497754][ T7811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.510'. [ 93.577938][ T7804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.580591][ T7804] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.599851][ T7820] netlink: 'syz.2.515': attribute type 1 has an invalid length. [ 93.604998][ T7804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.606921][ T7804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.611921][ T7804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.615153][ T7820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 93.622659][ T7804] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.626898][ T7804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.628757][ T7804] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.630614][ T7820] bond3: (slave geneve2): making interface the new active one [ 93.634168][ T7820] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 93.634861][ T7804] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.643818][ T7804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.644426][ T7820] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.645725][ T7804] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.651967][ T7804] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.712706][ T7826] wireguard0: entered promiscuous mode [ 93.718978][ T7829] netlink: 80 bytes leftover after parsing attributes in process `syz.4.517'. [ 93.735745][ T7831] wireguard1: entered promiscuous mode [ 93.841982][ T7841] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 94.041313][ T7858] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.056191][ T42] kauditd_printk_skb: 124 callbacks suppressed [ 94.056202][ T42] audit: type=1400 audit(93.972:790): avc: denied { create } for pid=7862 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 94.064274][ T42] audit: type=1400 audit(93.992:791): avc: denied { sys_admin } for pid=7862 comm="syz.4.526" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 94.178615][ T7876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.529'. [ 94.216381][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.530'. [ 94.224196][ T7885] program syz.1.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.227059][ T7885] ata1.00: non-matching transfer count (-1459617792/0) [ 94.238183][ T7881] hsr_slave_1 (unregistering): left promiscuous mode [ 94.325969][ T7893] IPVS: set_ctl: invalid protocol: 51 172.20.20.58:20001 [ 94.418980][ T42] audit: type=1400 audit(94.332:792): avc: denied { append } for pid=7899 comm="syz.4.536" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.610813][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.762077][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.765750][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.769183][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.772292][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.776205][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.779115][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.785924][ T24] usb 6-1: config 0 descriptor?? [ 95.192189][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.194617][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.196958][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.199260][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.201576][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.203779][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.206068][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.208410][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.210761][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.213060][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 95.227081][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 95.456099][ T24] usb 6-1: USB disconnect, device number 11 [ 95.620783][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.700800][ T5093] Bluetooth: hci1: command 0x0419 tx timeout [ 95.703051][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.035246][ T42] audit: type=1400 audit(95.952:793): avc: denied { bind } for pid=7921 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.041563][ T42] audit: type=1400 audit(95.952:794): avc: denied { connect } for pid=7921 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 96.047864][ T42] audit: type=1400 audit(95.962:795): avc: denied { set_context_mgr } for pid=7921 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 96.056033][ T42] audit: type=1400 audit(95.962:796): avc: denied { getopt } for pid=7921 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.500946][ T5093] Bluetooth: hci0: command 0x0406 tx timeout [ 96.501307][ T7900] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 97.390326][ T7900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 97.393652][ T7900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.396424][ T7900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 97.577962][ T7937] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 97.580492][ T7937] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.585310][ T7937] vhci_hcd vhci_hcd.0: Device attached [ 97.588872][ T42] audit: type=1400 audit(97.502:797): avc: denied { lock } for pid=7940 comm="syz.2.546" path="socket:[23561]" dev="sockfs" ino=23561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.600930][ T42] audit: type=1400 audit(97.512:798): avc: denied { accept } for pid=7940 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 97.636688][ T42] audit: type=1400 audit(97.552:799): avc: denied { read } for pid=7944 comm="syz.2.547" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.643011][ T7948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.653063][ T5840] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.810917][ T5840] usb 6-1: Using ep0 maxpacket: 32 [ 97.814554][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 97.819363][ T5840] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.825616][ T5840] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 97.829541][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.833168][ T5840] usb 6-1: Product: syz [ 97.835026][ T5840] usb 6-1: Manufacturer: syz [ 97.836993][ T5840] usb 6-1: SerialNumber: syz [ 97.850945][ T55] usb 46-1: SetAddress Request (2) to port 0 [ 97.853179][ T55] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 98.050304][ T5840] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.053170][ T5840] usb 6-1: MIDIStreaming interface descriptor not found [ 98.093756][ T5840] usb 6-1: USB disconnect, device number 12 [ 98.145496][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.171160][ T5884] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 98.310861][ T5884] usb 7-1: device descriptor read/64, error -71 [ 98.560854][ T5884] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 98.580951][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.581230][ T5748] Bluetooth: hci0: command 0x0406 tx timeout [ 98.690879][ T5884] usb 7-1: device descriptor read/64, error -71 [ 98.780558][ T7958] netlink: 'syz.1.550': attribute type 4 has an invalid length. [ 98.790044][ T7958] netlink: 'syz.1.550': attribute type 4 has an invalid length. [ 98.810979][ T5884] usb usb7-port1: attempt power cycle [ 98.845853][ T7938] vhci_hcd: connection reset by peer [ 98.851871][ T13] vhci_hcd vhci_hcd.4: stop threads [ 98.854130][ T13] vhci_hcd vhci_hcd.4: release socket [ 98.858300][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 98.864582][ T7962] autofs4:pid:7962:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 98.864583][ T7963] autofs4:pid:7963:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 98.864600][ T7963] autofs4:pid:7963:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 98.868708][ T7962] autofs4:pid:7962:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 98.922824][ T7962] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 99.004890][ T7968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 99.040135][ T7972] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.049899][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 99.128323][ T7980] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 99.134347][ T7980] bond1 (unregistering): Released all slaves [ 99.150788][ T5884] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 99.171574][ T5884] usb 7-1: device descriptor read/8, error -71 [ 99.194818][ T1277] Bluetooth: (null): Invalid header checksum [ 99.279612][ T5748] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 99.279704][ T5748] Bluetooth: hci0: Malformed LE Event: 0x02 [ 99.410876][ T5884] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 99.442035][ T5884] usb 7-1: device descriptor read/8, error -71 [ 99.444793][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.559'. [ 99.460807][ T5748] Bluetooth: hci1: command 0x0419 tx timeout [ 99.460892][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.502449][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.560'. [ 99.551028][ T5884] usb usb7-port1: unable to enumerate USB device [ 99.580824][ T5812] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 99.750944][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 99.754081][ T5812] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.757525][ T5812] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.760454][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0 [ 99.762894][ T5812] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.765788][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.769765][ T5812] usb 6-1: config 0 descriptor?? [ 99.883216][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 99.890412][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.563'. [ 99.898210][ T8001] uhci_hcd 0000:00:1d.0: remove, state 4 [ 99.900814][ T5814] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.900843][ T5814] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.900860][ T5814] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.900878][ T5814] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.916007][ T8001] usb usb2: USB disconnect, device number 1 [ 99.936798][ T8001] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 100.006648][ T8002] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 100.013480][ T8002] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 100.030235][ T8002] pci 0000:00:1d.0: Adding to iommu group 7 [ 100.038926][ T8002] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 100.101965][ T8002] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 57363 usecs [ 100.155514][ T8002] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 100.165003][ T8002] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 100.168248][ T8002] uhci_hcd 0000:00:1d.0: detected 2 ports [ 100.172025][ T8002] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 100.183313][ T8002] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 100.184499][ T5812] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 100.187071][ T8002] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 100.187090][ T8002] usb usb2: Product: UHCI Host Controller [ 100.195534][ T8002] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 100.197563][ T8002] usb usb2: SerialNumber: 0000:00:1d.0 [ 100.218573][ T8002] hub 2-0:1.0: USB hub found [ 100.225626][ T8002] hub 2-0:1.0: 2 ports detected [ 100.304217][ T8004] program syz.4.564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.307893][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.564'. [ 100.330550][ T8004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8004 comm=syz.4.564 [ 100.454660][ T24] usb 6-1: USB disconnect, device number 13 [ 100.568583][ T8007] netlink: 112 bytes leftover after parsing attributes in process `syz.4.565'. [ 100.630507][ T8014] uhci_hcd 0000:00:1d.0: remove, state 4 [ 100.633849][ T8014] usb usb2: USB disconnect, device number 1 [ 100.655118][ T8014] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 100.661529][ T5093] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.729648][ T8015] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 100.741300][ T8015] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f] [ 100.752067][ T8015] pci 0000:00:1d.0: Adding to iommu group 7 [ 100.766678][ T8015] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 100.813816][ T8015] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 43317 usecs [ 100.868042][ T8015] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 100.878190][ T8015] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2 [ 100.882865][ T8015] uhci_hcd 0000:00:1d.0: detected 2 ports [ 100.889535][ T8015] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 100.894934][ T8015] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 100.899723][ T8015] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 100.903504][ T8015] usb usb2: Product: UHCI Host Controller [ 100.905809][ T8015] usb usb2: Manufacturer: Linux syzkaller uhci_hcd [ 100.908267][ T8015] usb usb2: SerialNumber: 0000:00:1d.0 [ 100.944370][ T8015] hub 2-0:1.0: USB hub found [ 100.946731][ T8015] hub 2-0:1.0: 2 ports detected [ 101.003186][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 101.016550][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.026976][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.031845][ T8029] tmpfs: Cannot disable swap on remount [ 101.037089][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.039842][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.043173][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.058073][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 101.058088][ T42] audit: type=1400 audit(100.972:802): avc: denied { bind } for pid=8024 comm="syz.2.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.151520][ T1169] smc: removing ib device syz1 [ 101.168842][ T24] syz1: Port: 1 Link DOWN [ 101.227849][ T1169] smbdirect: ib_dev[syz1] removed [ 101.275763][ T42] audit: type=1400 audit(101.192:803): avc: denied { ioctl } for pid=8043 comm="syz.4.576" path="pid:[4026533327]" dev="nsfs" ino=4026533327 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.384014][ T42] audit: type=1400 audit(101.302:804): avc: denied { remount } for pid=8060 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 101.409591][ T42] audit: type=1326 audit(101.322:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.2.580" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c959e019 code=0x0 [ 101.553264][ T5748] Bluetooth: hci1: command 0x0419 tx timeout [ 101.763475][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.767214][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.771930][ T8026] bridge_slave_0: entered allmulticast mode [ 101.774765][ T8026] bridge_slave_0: entered promiscuous mode [ 101.811985][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.815235][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.820791][ T2323] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 101.825116][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.827971][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.830857][ T8026] bridge_slave_1: entered allmulticast mode [ 101.834269][ T8026] bridge_slave_1: entered promiscuous mode [ 101.851230][ T8026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.856346][ T8026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.874892][ T8026] team0: Port device team_slave_0 added [ 101.878077][ T8026] team0: Port device team_slave_1 added [ 101.903144][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.908937][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.923426][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.925672][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.933626][ T8026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.942332][ T8026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.944915][ T8026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.951891][ T2323] usb 7-1: device descriptor read/64, error -71 [ 101.953349][ T8026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.979199][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.986001][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.012072][ T8026] hsr_slave_0: entered promiscuous mode [ 102.015166][ T8026] hsr_slave_1: entered promiscuous mode [ 102.017699][ T8026] debugfs: 'hsr0' already exists in 'hsr' [ 102.019434][ T8026] Cannot create hsr debugfs directory [ 102.088626][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.093048][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.212182][ T2323] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 102.286602][ T8026] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.290533][ T8026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.307837][ T8026] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.315906][ T8026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.319901][ T8026] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.325082][ T8026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.329373][ T8026] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.334533][ T8026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.341582][ T2323] usb 7-1: device descriptor read/64, error -71 [ 102.387925][ T13] bridge_slave_1: left allmulticast mode [ 102.391343][ T13] bridge_slave_1: left promiscuous mode [ 102.393352][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.398079][ T13] bridge_slave_0: left allmulticast mode [ 102.399867][ T13] bridge_slave_0: left promiscuous mode [ 102.404041][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.454376][ T2323] usb usb7-port1: attempt power cycle [ 102.495601][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 102.550532][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.555764][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.561043][ T13] bond0 (unregistering): Released all slaves [ 102.567365][ T13] bond1 (unregistering): Released all slaves [ 102.597560][ T8105] tipc: Started in network mode [ 102.599518][ T8105] tipc: Node identity 9, cluster identity 1 [ 102.602616][ T8105] tipc: Node number set to 9 [ 102.643533][ T8026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.671489][ T8026] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.677003][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.679292][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.684506][ T42] audit: type=1400 audit(102.602:806): avc: denied { write } for pid=8108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.730558][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.733042][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.737192][ T42] audit: type=1400 audit(102.652:807): avc: denied { write } for pid=8111 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.740800][ T5748] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.791598][ T2323] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 102.805207][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 102.811773][ T2323] usb 7-1: device descriptor read/8, error -71 [ 102.878890][ T42] audit: type=1400 audit(102.792:808): avc: denied { write } for pid=8119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.901906][ T55] usb 46-1: device descriptor read/8, error -110 [ 102.936704][ T42] audit: type=1400 audit(102.852:809): avc: denied { write } for pid=8126 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.006608][ T13] hsr_slave_0: left promiscuous mode [ 103.008803][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.011470][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.015773][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.018257][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.034111][ T13] veth1_macvtap: left promiscuous mode [ 103.035903][ T13] veth0_macvtap: left promiscuous mode [ 103.037682][ T13] veth1_vlan: left promiscuous mode [ 103.039348][ T13] veth0_vlan: left promiscuous mode [ 103.050790][ T2323] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 103.071188][ T5748] Bluetooth: hci4: command tx timeout [ 103.075377][ T2323] usb 7-1: device descriptor read/8, error -71 [ 103.162579][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.180393][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.190281][ T2323] usb usb7-port1: unable to enumerate USB device [ 103.302301][ T55] usb usb46-port1: attempt power cycle [ 103.318042][ T8026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.396889][ T42] audit: type=1400 audit(103.312:810): avc: denied { write } for pid=8143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.474524][ T42] audit: type=1400 audit(103.392:811): avc: denied { write } for pid=8150 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.498412][ T8026] veth0_vlan: entered promiscuous mode [ 103.507538][ T8026] veth1_vlan: entered promiscuous mode [ 103.523909][ T8026] veth0_macvtap: entered promiscuous mode [ 103.529333][ T8026] veth1_macvtap: entered promiscuous mode [ 103.533302][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 103.551374][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.557467][ T8026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.615023][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.619556][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.623437][ T5748] Bluetooth: hci1: command 0x0419 tx timeout [ 103.642896][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.645911][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.652593][ T5783] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.656365][ T5783] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.660747][ T5783] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.664208][ T5783] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.677409][ T13] IPVS: stop unused estimator thread 0... [ 103.764783][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 103.873283][ T55] usb usb46-port1: unable to enumerate USB device [ 103.923165][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 104.030984][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 104.192272][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 104.195420][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 104.201506][ T24] usb 10-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 104.204912][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.209551][ T24] usb 10-1: Product: syz [ 104.211181][ T24] usb 10-1: Manufacturer: syz [ 104.212743][ T24] usb 10-1: SerialNumber: syz [ 104.218865][ T8161] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 104.221439][ T8161] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 104.224732][ T24] kl5kusb105 10-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 104.230446][ T24] usb 10-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 104.339208][ T8194] xt_check_target_common: 23 callbacks suppressed [ 104.339220][ T8194] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 104.349520][ T8194] loop5: detected capacity change from 0 to 2640 [ 104.373146][ T6020] buffer_io_error: 11 callbacks suppressed [ 104.373156][ T6020] Buffer I/O error on dev loop5, logical block 0, async page read [ 104.384990][ T8194] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 104.391205][ T8194] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 104.393790][ T8194] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 104.396251][ T8194] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 104.398776][ T8194] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 104.403530][ T8194] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 104.406129][ T8194] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 104.408655][ T8194] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 104.411279][ T8194] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 104.944970][ T8249] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 105.006431][ T8259] syzkaller1: entered promiscuous mode [ 105.008590][ T8259] syzkaller1: entered allmulticast mode [ 105.121940][ T8274] overlay: filesystem on ./file0 not supported as upperdir [ 105.144130][ T5093] Bluetooth: hci4: command tx timeout [ 105.444529][ T34] usb 10-1: USB disconnect, device number 2 [ 105.449500][ T34] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 105.452931][ T34] kl5kusb105 10-1:1.0: device disconnected [ 105.592655][ T8307] overlayfs: failed to resolve './file1/file0': -20 [ 105.717879][ T5884] IPVS: starting estimator thread 0... [ 105.731259][ T8311] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 105.805312][ T8316] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.814858][ T8312] IPVS: using max 45 ests per chain, 108000 per kthread [ 105.844831][ T8316] bond3: option downdelay: invalid value (18446744073709551615) [ 105.851257][ T8316] bond3: option downdelay: allowed values 0 - 2147483647 [ 105.859139][ T8316] bond3 (unregistering): Released all slaves [ 106.006620][ T8340] binder: 8339:8340 ioctl 50009403 200000000400 returned -22 [ 106.057680][ T8344] overlayfs: overlapping lowerdir path [ 106.081645][ T8349] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 106.105282][ T8349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.198210][ T8360] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 106.204582][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 106.204598][ T42] audit: type=1400 audit(106.122:840): avc: denied { ioctl } for pid=8361 comm="syz.5.628" path="socket:[23435]" dev="sockfs" ino=23435 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.222200][ T42] audit: type=1400 audit(106.142:841): avc: denied { listen } for pid=8361 comm="syz.5.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.230789][ T42] audit: type=1400 audit(106.142:842): avc: denied { accept } for pid=8361 comm="syz.5.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.326634][ T42] audit: type=1400 audit(106.242:843): avc: denied { write } for pid=8367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.383341][ T42] audit: type=1400 audit(106.302:844): avc: denied { write } for pid=8370 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.470304][ T42] audit: type=1400 audit(106.382:845): avc: denied { write } for pid=8372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.536918][ T42] audit: type=1400 audit(106.452:846): avc: denied { write } for pid=8378 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.602392][ T42] audit: type=1400 audit(106.522:847): avc: denied { write } for pid=8380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.655120][ T42] audit: type=1400 audit(106.572:848): avc: denied { write } for pid=8383 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.907553][ T42] audit: type=1400 audit(106.822:849): avc: denied { write } for pid=8388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.977947][ T8403] __nla_validate_parse: 1 callbacks suppressed [ 106.977964][ T8403] netlink: 236 bytes leftover after parsing attributes in process `syz.5.633'. [ 106.993107][ T8403] netlink: 236 bytes leftover after parsing attributes in process `syz.5.633'. [ 107.011683][ T8403] netlink: 236 bytes leftover after parsing attributes in process `syz.5.633'. [ 107.015969][ T8403] netlink: 236 bytes leftover after parsing attributes in process `syz.5.633'. [ 107.020599][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 107.038252][ T8415] ipt_rpfilter: unknown options [ 107.045856][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 107.061803][ T8419] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 107.064834][ T8419] openvswitch: netlink: Key 6 has unexpected len 250 expected 2 [ 107.136498][ T8427] evm: overlay not supported [ 107.220898][ T5093] Bluetooth: hci4: command tx timeout [ 107.301104][ T8444] dlm: Unknown command passed to DLM device : 33 [ 107.301104][ T8444] [ 107.345798][ T8448] syzkaller0: entered promiscuous mode [ 107.348097][ T8448] syzkaller0: entered allmulticast mode [ 107.980776][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 108.085043][ T8491] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.135914][ T24] usb 7-1: config index 0 descriptor too short (expected 50, got 32) [ 108.174231][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.178203][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.182300][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.186075][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.195610][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 108.199241][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.202632][ T24] usb 7-1: Product: syz [ 108.204377][ T24] usb 7-1: Manufacturer: syz [ 108.211314][ T24] usb 7-1: SerialNumber: syz [ 108.240797][ T24] usb_debug 7-1:1.0: debug converter detected [ 108.245888][ T24] usb 7-1: debug converter now attached to ttyUSB0 [ 108.318132][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 108.438131][ T8464] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 108.453033][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.458354][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.515365][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.657'. [ 108.518508][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.657'. [ 108.520601][ T8464] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.647:8464 [ 108.658634][ T8520] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 108.660812][ T8520] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 108.663992][ T8520] vhci_hcd vhci_hcd.0: Device attached [ 108.668398][ T8524] usbip_core: unknown command [ 108.670442][ T8524] vhci_hcd: unknown pdu 100663296 [ 108.673102][ T8524] usbip_core: unknown command [ 108.676427][ T13] vhci_hcd vhci_hcd.5: stop threads [ 108.678504][ T13] vhci_hcd vhci_hcd.5: release socket [ 108.681305][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 108.681767][ T8520] /dev/sg0: Can't lookup blockdev [ 108.710012][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 108.765129][ T8532] loop5: detected capacity change from 0 to 14 [ 108.775249][ T8532] Dev loop5: unable to read RDB block 14 [ 108.777350][ T8532] loop5: AHDI p1 p2 p3 [ 108.778685][ T8532] loop5: partition table partially beyond EOD, truncated [ 108.781370][ T8532] loop5: p1 start 1818582900 is beyond EOD, truncated [ 108.783796][ T8532] loop5: p3 start 335544320 is beyond EOD, truncated [ 108.993603][ T8555] SELinux: Context system_u:object_r:etc_t:s0 is not valid (left unmapped). [ 109.005716][ T8555] xt_l2tp: missing protocol rule (udp|l2tpip) [ 109.023677][ T8555] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 109.225571][ T8570] netlink: 'syz.4.674': attribute type 5 has an invalid length. [ 109.236939][ T8570] loop5: detected capacity change from 0 to 2640 [ 109.240615][ T8570] ldm_validate_partition_table(): Disk read failed. [ 109.243008][ T8570] Dev loop5: unable to read RDB block 0 [ 109.244824][ T8570] loop5: unable to read partition table [ 109.246696][ T8570] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 109.276363][ T8574] tmpfs: Bad value for 'mpol' [ 109.310954][ T5093] Bluetooth: hci4: command tx timeout [ 109.406272][ T8589] netlink: 'syz.5.679': attribute type 3 has an invalid length. [ 109.409903][ T8587] ima: policy update failed [ 109.454884][ T8593] tmpfs: Unknown parameter 'ÿÿ' [ 109.504624][ T8596] ima: policy update failed [ 109.523238][ T8596] overlay: Unknown parameter 'appraise' [ 109.939337][ T8631] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 110.380743][ T5883] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 110.545454][ T5883] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 110.549359][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.552751][ T5883] usb 6-1: Product: syz [ 110.554079][ T5883] usb 6-1: Manufacturer: syz [ 110.555798][ T5883] usb 6-1: SerialNumber: syz [ 110.561884][ T5883] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 110.566886][ T5883] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 110.575273][ T5883] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 110.656993][ T9] usb 7-1: USB disconnect, device number 23 [ 110.663229][ T9] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 110.667697][ T9] usb_debug 7-1:1.0: device disconnected [ 110.683423][ T8648] overlay: ./file0 is not a directory [ 110.727798][ T8653] netlink: 'syz.2.700': attribute type 11 has an invalid length. [ 110.763539][ T8654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.766266][ T8654] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.940168][ T8669] loop5: detected capacity change from 0 to 7 [ 110.980992][ T5093] Bluetooth: hci1: command 0x0419 tx timeout [ 111.075522][ T8669] Dev loop5: unable to read RDB block 7 [ 111.078071][ T8669] loop5: unable to read partition table [ 111.080553][ T8669] loop5: partition table beyond EOD, truncated [ 111.083109][ T8669] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 111.088725][ T8675] fuse: Bad value for 'fd' [ 112.048326][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 112.048358][ T42] audit: type=1400 audit(111.962:917): avc: denied { ioctl } for pid=8692 comm="syz.4.709" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 112.084603][ T42] audit: type=1400 audit(112.002:918): avc: denied { map } for pid=8701 comm="syz.4.712" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 112.087818][ T8700] syzkaller0: entered promiscuous mode [ 112.094804][ T8700] syzkaller0: entered allmulticast mode [ 112.103299][ T8700] __nla_validate_parse: 6 callbacks suppressed [ 112.103315][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 112.108546][ T8700] netlink: 'syz.5.711': attribute type 30 has an invalid length. [ 112.113089][ T8178] Bluetooth: (null): Invalid header checksum [ 112.118183][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.119035][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 112.124624][ T8700] netlink: 'syz.5.711': attribute type 30 has an invalid length. [ 112.127746][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.151318][ T42] audit: type=1400 audit(112.072:919): avc: denied { map } for pid=8705 comm="syz.4.714" path="/proc/284/net/igmp6" dev="proc" ino=4026533879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 112.171429][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.177884][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.221949][ T1171] Bluetooth: (null): Invalid header checksum [ 112.227742][ T8711] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 112.236196][ T8711] gadgetfs: bound to dummy_udc driver [ 112.303936][ T42] audit: type=1400 audit(112.222:920): avc: denied { name_bind } for pid=8718 comm="syz.2.719" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 112.306634][ T8719] CIFS: VFS: UNC: missing share name [ 112.316063][ T8719] CIFS: VFS: Malformed UNC in devname [ 112.379140][ T42] audit: type=1400 audit(112.292:921): avc: denied { mounton } for pid=8724 comm="syz.5.722" path="/proc/96/task" dev="proc" ino=28675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.443983][ T8721] block nbd0: server does not support multiple connections per device. [ 112.465877][ T8721] block nbd0: shutting down sockets [ 112.737732][ T8768] overlayfs: missing 'lowerdir' [ 112.737775][ T8767] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 112.754459][ T8767] cramfs: wrong magic [ 112.765053][ T8767] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 112.768460][ T8767] cramfs: wrong magic [ 112.854336][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 112.904800][ T8789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'. [ 112.929119][ T42] audit: type=1400 audit(112.842:922): avc: denied { create } for pid=8787 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.969072][ T8789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8789 comm=syz.4.736 [ 113.115132][ T5748] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 113.117751][ T5748] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 113.129902][ T42] audit: type=1326 audit(113.042:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.2.741" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62c959e019 code=0x0 [ 113.155693][ T5842] usb 6-1: USB disconnect, device number 14 [ 113.194973][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 113.211835][ T5842] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 113.220241][ T5842] ti_usb_3410_5052 6-1:2.0: device disconnected [ 113.267163][ T24] hid-generic 0005:16C0:5505.0009: item fetching failed at offset 0/2 [ 113.271141][ T24] hid-generic 0005:16C0:5505.0009: probe with driver hid-generic failed with error -22 [ 113.272343][ T8816] binder: 8815:8816 ioctl c00c620f 2000000001c0 returned -22 [ 113.294114][ T42] audit: type=1400 audit(113.212:924): avc: denied { watch } for pid=8819 comm="syz.5.744" path="/proc/133/fdinfo" dev="proc" ino=26144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 113.303850][ T42] audit: type=1400 audit(113.212:925): avc: denied { watch_sb watch_reads } for pid=8819 comm="syz.5.744" path="/proc/133/fdinfo" dev="proc" ino=26144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 113.322295][ T42] audit: type=1400 audit(113.242:926): avc: denied { mounton } for pid=8812 comm="syz.1.742" path="/196/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 113.327469][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.744'. [ 113.354334][ T8824] kvm: apic: phys broadcast and lowest prio [ 113.886176][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.889986][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.020456][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.028747][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.050466][ T8865] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.068440][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.077328][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.084290][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.090861][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.095491][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.146599][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.150458][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.238119][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.241612][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.323964][ T8889] could not allocate digest TFM handle ghash-ce-sync [ 114.439432][ T13] bridge_slave_1: left allmulticast mode [ 114.441819][ T13] bridge_slave_1: left promiscuous mode [ 114.443759][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.448453][ T13] bridge_slave_0: left allmulticast mode [ 114.450253][ T13] bridge_slave_0: left promiscuous mode [ 114.453002][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.568760][ T13] erspan0 (unregistering): left promiscuous mode [ 114.589613][ T13] gretap0 (unregistering): left promiscuous mode [ 114.680282][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.687781][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.691518][ T13] bond0 (unregistering): Released all slaves [ 114.696871][ T13] bond1 (unregistering): Released all slaves [ 114.704783][ T13] bond2 (unregistering): Released all slaves [ 114.712626][ T13] bond3 (unregistering): Released all slaves [ 114.729938][ T8915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.733247][ T8908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.844440][ T13] tipc: Disabling bearer [ 114.847257][ T13] tipc: Left network mode [ 114.971259][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 115.006970][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.010749][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.013214][ T8867] bridge_slave_0: entered allmulticast mode [ 115.016266][ T8867] bridge_slave_0: entered promiscuous mode [ 115.019934][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.023844][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.026243][ T8867] bridge_slave_1: entered allmulticast mode [ 115.029517][ T8867] bridge_slave_1: entered promiscuous mode [ 115.074501][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.768'. [ 115.121225][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.130403][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.189343][ T8867] team0: Port device team_slave_0 added [ 115.205850][ T8867] team0: Port device team_slave_1 added [ 115.222574][ T13] hsr_slave_0: left promiscuous mode [ 115.227472][ T13] hsr_slave_1: left promiscuous mode [ 115.230374][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.234055][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.237975][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.241097][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.263634][ T13] veth1_macvtap: left promiscuous mode [ 115.265889][ T13] veth0_macvtap: left promiscuous mode [ 115.269449][ T13] veth1_vlan: left promiscuous mode [ 115.273538][ T13] veth0_vlan: left promiscuous mode [ 115.427213][ T13] team0 (unregistering): Port device team_slave_1 removed [ 115.437086][ T13] team0 (unregistering): Port device team_slave_0 removed [ 115.533363][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 115.546545][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.551105][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.572417][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.583086][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.593928][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.614663][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.623743][ T5748] Bluetooth: hci1: command 0x0419 tx timeout [ 115.681548][ T8963] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.690105][ T8963] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 115.693213][ T8963] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.695761][ T8963] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 115.696565][ T8867] hsr_slave_0: entered promiscuous mode [ 115.701208][ T8867] hsr_slave_1: entered promiscuous mode [ 115.868727][ T8979] netlink: 'syz.2.778': attribute type 7 has an invalid length. [ 115.985060][ T13] IPVS: stop unused estimator thread 0... [ 116.063829][ T8867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 116.074651][ T8867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.078418][ T8867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 116.088398][ T8867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.092894][ T8867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 116.100584][ T8867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.104817][ T8867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 116.113452][ T8867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.188374][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.192841][ T5746] Bluetooth: hci0: command tx timeout [ 116.215989][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.218742][ T9025] netlink: 'syz.2.786': attribute type 3 has an invalid length. [ 116.227396][ T8178] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.230436][ T8178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.248340][ T8178] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.251382][ T8178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.478798][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.648363][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.653971][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 116.739669][ T9087] netlink: 'syz.5.798': attribute type 1 has an invalid length. [ 116.773592][ T9087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.777914][ T9087] bond1: (slave bond2): making interface the new active one [ 116.783743][ T9087] bond1: (slave bond2): Enslaving as an active interface with an up link [ 116.861520][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 116.868395][ T8867] veth0_vlan: entered promiscuous mode [ 116.876520][ T8867] veth1_vlan: entered promiscuous mode [ 116.919684][ T8867] veth0_macvtap: entered promiscuous mode [ 116.927471][ T8867] veth1_macvtap: entered promiscuous mode [ 116.941961][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.942535][ T41] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 116.948210][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.004774][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.090066][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.093471][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.102570][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.106923][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.122244][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.125407][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.130898][ T41] usb 7-1: Using ep0 maxpacket: 16 [ 117.134816][ T41] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 117.135689][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 117.135701][ T42] audit: type=1400 audit(117.052:943): avc: denied { mounton } for pid=8867 comm="syz-executor" path="/syzkaller.VCEEKY/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 117.138214][ T41] usb 7-1: config 0 has no interface number 0 [ 117.151037][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.154503][ T41] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 117.158956][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.162208][ T41] usb 7-1: Product: syz [ 117.163912][ T42] audit: type=1400 audit(117.082:944): avc: denied { mount } for pid=9105 comm="syz.4.802" name="/" dev="rpc_pipefs" ino=30026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 117.173414][ T41] usb 7-1: Manufacturer: syz [ 117.175313][ T41] usb 7-1: SerialNumber: syz [ 117.180414][ T41] usb 7-1: config 0 descriptor?? [ 117.184087][ T41] hub 7-1:0.132: bad descriptor, ignoring hub [ 117.186578][ T41] hub 7-1:0.132: probe with driver hub failed with error -5 [ 117.191755][ T41] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input15 [ 117.217929][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.762'. [ 117.243093][ T5840] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 117.346976][ T9120] afs: Unknown parameter 'dynÇÀ' [ 117.420798][ T5840] usb 10-1: Using ep0 maxpacket: 8 [ 117.423705][ T5840] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 117.426419][ T5840] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.429119][ T5840] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.432713][ T5840] usb 10-1: config 250 has no interface number 0 [ 117.434755][ T5840] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.438326][ T5840] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.441834][ T5840] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 117.445171][ T5840] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 117.448140][ T5840] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.452481][ T5840] usb 10-1: config 250 interface 228 has no altsetting 0 [ 117.455801][ T5840] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 117.458805][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 117.461955][ T5840] usb 10-1: Product: syz [ 117.463455][ T5840] usb 10-1: SerialNumber: syz [ 117.470815][ T5840] hub 10-1:250.228: bad descriptor, ignoring hub [ 117.472904][ T5840] hub 10-1:250.228: probe with driver hub failed with error -5 [ 117.605330][ T42] audit: type=1400 audit(117.522:945): avc: denied { ioctl } for pid=9128 comm="syz.6.807" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 117.631628][ T5842] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 117.669880][ T9132] Unsupported ieee802154 address type: 0 [ 117.669944][ T42] audit: type=1400 audit(117.582:946): avc: denied { bind } for pid=9131 comm="syz.6.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.684277][ T5840] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.700817][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 117.726285][ T5603] usb 7-1: USB disconnect, device number 24 [ 117.760838][ T5842] usb 9-1: device descriptor read/64, error -71 [ 117.878310][ T42] audit: type=1400 audit(117.792:947): avc: denied { write } for pid=9143 comm="syz.6.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 117.992087][ T2323] usb 10-1: USB disconnect, device number 3 [ 117.999029][ T2323] usblp0: removed [ 118.010772][ T5842] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 118.150965][ T5842] usb 9-1: device descriptor read/64, error -71 [ 118.260804][ T5748] Bluetooth: hci0: command tx timeout [ 118.271088][ T5842] usb usb9-port1: attempt power cycle [ 118.340840][ T2323] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 118.356913][ T9177] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 118.394229][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 118.396983][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 118.500847][ T2323] usb 10-1: Using ep0 maxpacket: 8 [ 118.507599][ T2323] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 118.510372][ T2323] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.513284][ T2323] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.516465][ T2323] usb 10-1: config 250 has no interface number 0 [ 118.518550][ T2323] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.522383][ T2323] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.525681][ T2323] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 118.529397][ T2323] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 118.533242][ T2323] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.537483][ T2323] usb 10-1: config 250 interface 228 has no altsetting 0 [ 118.540990][ T2323] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 118.543890][ T2323] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 118.546507][ T2323] usb 10-1: Product: syz [ 118.547858][ T2323] usb 10-1: SerialNumber: syz [ 118.558278][ T2323] hub 10-1:250.228: bad descriptor, ignoring hub [ 118.560537][ T2323] hub 10-1:250.228: probe with driver hub failed with error -5 [ 118.626088][ T5842] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 118.651581][ T5842] usb 9-1: device descriptor read/8, error -71 [ 118.772311][ T2323] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 118.810961][ T2323] usb 10-1: USB disconnect, device number 4 [ 118.823992][ T2323] usblp0: removed [ 118.828671][ T9202] ptrace attach of "/syz-executor exec"[9204] was attempted by "/syz-executor exec"[9202] [ 118.837250][ T9203] openvswitch: netlink: IP tunnel dst address not specified [ 118.840326][ T9203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.916046][ T9211] overlay: Bad value for 'workdir' [ 118.920969][ T5842] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 118.941532][ T5842] usb 9-1: device descriptor read/8, error -71 [ 118.950327][ T9213] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 119.017892][ T9221] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 119.062249][ T5842] usb usb9-port1: unable to enumerate USB device [ 119.180899][ T9230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9230 comm=syz.6.827 [ 119.249896][ T9233] sctp: [Deprecated]: syz.2.828 (pid 9233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.249896][ T9233] Use struct sctp_sack_info instead [ 119.302529][ T42] audit: type=1400 audit(119.222:948): avc: denied { mount } for pid=9241 comm="syz.2.830" name="/" dev="hugetlbfs" ino=29291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 119.313290][ T42] audit: type=1400 audit(119.222:949): avc: denied { remount } for pid=9241 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 119.318035][ T9240] Bluetooth: MGMT ver 1.23 [ 119.319484][ T42] audit: type=1400 audit(119.232:950): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 119.353767][ T9247] ehci-pci 0000:00:1d.7: remove, state 1 [ 119.361573][ T9247] usb usb1: USB disconnect, device number 1 [ 119.361643][ T9247] usb 1-1: USB disconnect, device number 2 [ 119.414170][ T9253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=161 sclass=netlink_route_socket pid=9253 comm=syz.5.833 [ 119.446822][ T9255] tmpfs: Bad value for 'huge' [ 119.513249][ T9247] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 119.531325][ T9260] netlink: 'syz.6.837': attribute type 2 has an invalid length. [ 119.593871][ T42] audit: type=1400 audit(119.512:951): avc: denied { connect } for pid=9263 comm="syz.5.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.604925][ T42] audit: type=1400 audit(119.522:952): avc: denied { bind } for pid=9263 comm="syz.5.838" lport=18729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.669255][ T9273] netlink: 'syz.6.842': attribute type 21 has an invalid length. [ 119.771941][ T5603] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 119.781941][ T9286] bridge0: port 2(bridge_slave_1) entered listening state [ 119.789399][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.832514][ T8178] Bluetooth: hci3: Frame reassembly failed (-84) [ 119.920940][ T5812] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 119.935910][ T5603] usb 2-1: not running at top speed; connect to a high speed hub [ 119.958361][ T5603] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 119.962178][ T5603] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 119.965435][ T5603] usb 2-1: Product: QEMU USB Tablet [ 119.967597][ T5603] usb 2-1: Manufacturer: QEMU [ 119.969559][ T5603] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 119.994870][ T5603] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input16 [ 120.049955][ T9305] usb usb8: usbfs: process 9305 (syz.5.850) did not claim interface 0 before use [ 120.075267][ T5812] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.078804][ T5812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.083623][ T5603] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 120.087554][ T5812] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 120.092925][ T5812] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 120.096228][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.103645][ T9271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.110052][ T5812] hub 7-1:1.0: bad descriptor, ignoring hub [ 120.112540][ T5812] hub 7-1:1.0: probe with driver hub failed with error -5 [ 120.114553][ T13] bond0: (slave bond_slave_0): interface is now down [ 120.117720][ T5812] cdc_wdm 7-1:1.0: skipping garbage [ 120.117731][ T5812] cdc_wdm 7-1:1.0: skipping garbage [ 120.121713][ T5812] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 120.123884][ T13] bond0: (slave bond_slave_1): interface is now down [ 120.125614][ T5812] cdc_wdm 7-1:1.0: Unknown control protocol [ 120.142421][ T13] bond0: now running without any active interface! [ 120.340882][ T5746] Bluetooth: hci0: command tx timeout [ 120.419918][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 120.422552][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 120.425456][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 120.427547][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 120.429735][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 120.432009][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 120.435387][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 120.437426][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 120.439397][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 120.591482][ T847] usb 7-1: USB disconnect, device number 25 [ 120.881659][ T5844] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 121.040911][ T5844] usb 9-1: Using ep0 maxpacket: 8 [ 121.044602][ T5844] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 121.047238][ T5844] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.051827][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.055988][ T5844] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.060520][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.064223][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.070089][ T5844] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.074480][ T5844] usb 9-1: config 168 interface 0 has no altsetting 0 [ 121.077528][ T5844] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 121.079954][ T5844] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.083509][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.087359][ T5844] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.092286][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.096831][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.101714][ T5844] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.106270][ T5844] usb 9-1: config 168 interface 0 has no altsetting 0 [ 121.109860][ T5844] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 121.113941][ T5844] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.117544][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.121730][ T5844] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.125798][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.129242][ T5844] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.133203][ T5844] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.137300][ T5844] usb 9-1: config 168 interface 0 has no altsetting 0 [ 121.144104][ T5844] usb 9-1: string descriptor 0 read error: -22 [ 121.146169][ T5844] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.149452][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.163163][ T5844] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.227080][ T9327] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 121.419234][ T5840] usb 9-1: USB disconnect, device number 6 [ 121.760774][ T5812] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 121.870988][ T5746] Bluetooth: hci3: command 0x1003 tx timeout [ 121.874965][ T5748] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 121.933465][ T5812] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.937545][ T5812] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.942713][ T5812] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.944512][ T9340] netlink: 64 bytes leftover after parsing attributes in process `syz.5.862'. [ 121.946426][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.956302][ T9337] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.967617][ T5812] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.037858][ T9344] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 122.040060][ T9344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.043984][ T9344] vhci_hcd vhci_hcd.0: Device attached [ 122.057989][ T9344] xt_hashlimit: size too large, truncated to 1048576 [ 122.138714][ T9345] vhci_hcd: connection closed [ 122.142852][ T13] vhci_hcd vhci_hcd.6: stop threads [ 122.147034][ T13] vhci_hcd vhci_hcd.6: release socket [ 122.149169][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 122.169158][ T5812] usb 7-1: USB disconnect, device number 26 [ 122.385345][ T9337] netlink: 'syz.2.861': attribute type 9 has an invalid length. [ 122.441097][ T5748] Bluetooth: hci0: command tx timeout [ 122.526296][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 122.526326][ T42] audit: type=1400 audit(122.442:959): avc: denied { read } for pid=9358 comm="syz.5.866" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.536939][ T42] audit: type=1400 audit(122.442:960): avc: denied { open } for pid=9358 comm="syz.5.866" path="/62/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.566558][ T42] audit: type=1400 audit(122.482:961): avc: denied { ioctl } for pid=9358 comm="syz.5.866" path="/62/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.566834][ T9359] sd 0:0:0:0: PR command failed: 1026 [ 122.576600][ T9359] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 122.579438][ T9359] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 122.814340][ T9372] ALSA: mixer_oss: invalid OSS volume '' [ 122.816561][ T9372] ALSA: mixer_oss: invalid OSS volume '@ A' [ 122.818719][ T9372] ALSA: mixer_oss: invalid OSS volume '|' [ 122.821406][ T9372] ALSA: mixer_oss: invalid OSS volume '' [ 123.592211][ T9383] batadv_slave_1: entered promiscuous mode [ 123.607745][ T42] audit: type=1400 audit(123.522:962): avc: denied { getopt } for pid=9382 comm="syz.6.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.613866][ T9382] batadv_slave_1: left promiscuous mode [ 123.910866][ T5842] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 124.016029][ T42] audit: type=1400 audit(123.932:963): avc: denied { map } for pid=9395 comm="syz.4.877" path="socket:[29564]" dev="sockfs" ino=29564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.023904][ T42] audit: type=1400 audit(123.932:964): avc: denied { read } for pid=9395 comm="syz.4.877" path="socket:[29564]" dev="sockfs" ino=29564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.030437][ T9396] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.072918][ T5842] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.079888][ T5842] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 124.083676][ T42] audit: type=1400 audit(124.002:965): avc: denied { write } for pid=9395 comm="syz.4.877" path="socket:[29564]" dev="sockfs" ino=29564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.091324][ T5842] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 124.095069][ T5842] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 124.199713][ T42] audit: type=1400 audit(124.112:966): avc: denied { getattr } for pid=9409 comm="syz.5.881" path="pid:[4026532878]" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.223751][ T42] audit: type=1400 audit(124.142:967): avc: denied { mounton } for pid=9409 comm="syz.5.881" path="/67/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 124.301483][ T42] audit: type=1400 audit(124.222:968): avc: denied { unmount } for pid=8026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 124.494568][ T9425] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.571629][ T37] nvmet: connect request for invalid subsystem n! [ 124.577162][ T9435] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 124.657426][ T9445] x_tables: duplicate underflow at hook 1 [ 124.931021][ T9454] netlink: 44 bytes leftover after parsing attributes in process `syz.5.896'. [ 125.188197][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 125.238209][ T9479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9479 comm=syz.5.904 [ 125.488925][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 125.494436][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 125.630401][ T5748] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 125.634928][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 125.651163][ T9493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.673581][ T9493] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 125.950438][ T9500] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.123618][ T9512] 9p: Invalid gid '0x00000000ffffffff' [ 126.170004][ T9518] netlink: 36 bytes leftover after parsing attributes in process `syz.4.921'. [ 126.286662][ T9518] netlink: 68 bytes leftover after parsing attributes in process `syz.4.921'. [ 126.300803][ T9518] overlay: ./file0 is not a directory [ 126.307497][ T9529] tmpfs: Bad value for 'nr_inodes' [ 126.484065][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 126.490181][ T9543] bridge0: port 3(netdevsim0) entered blocking state [ 126.492599][ T9543] bridge0: port 3(netdevsim0) entered disabled state [ 126.496858][ T9543] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 126.502880][ T9543] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 126.514414][ T9541] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 126.524408][ T9541] ima: Unable to open file: / (-22) [ 126.525669][ T9540] [U] J"—E:ÀÆ" [ 126.591820][ T9540] ima: policy update failed [ 126.669764][ T5842] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.673251][ T5842] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.678382][ T5842] usb 11-1: can't set config #1, error -71 [ 126.681532][ T5842] usb 11-1: USB disconnect, device number 2 [ 126.820963][ T9560] bridge0: port 1(macvlan0) entered blocking state [ 126.823122][ T9560] bridge0: port 1(macvlan0) entered disabled state [ 126.823605][ T9563] SELinux: Context system_u:object_r:groupadd_exec_t:s0 is not valid (left unmapped). [ 126.825192][ T9560] macvlan0: entered allmulticast mode [ 126.848135][ T9563] overlayfs: failed lookup in lower (newroot/85, name='file1', err=-40): overlapping layers [ 127.041335][ T5445] bond0: entered allmulticast mode [ 127.057594][ T5445] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 127.184260][ T9587] syz_tun: entered allmulticast mode [ 127.187322][ T9587] lo: entered allmulticast mode [ 127.195435][ T9586] syz_tun: left allmulticast mode [ 127.235439][ T9592] binder: 9591:9592 ioctl c0306201 0 returned -14 [ 127.287158][ T9595] Invalid argument reading file caps for ./file0 [ 127.350369][ T9602] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 127.431018][ T9609] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 127.438305][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9608 comm=syz.5.945 [ 127.479746][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 127.503829][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 127.676519][ T9628] netlink: 'syz.4.951': attribute type 10 has an invalid length. [ 127.684485][ T9628] team0: Port device dummy0 added [ 127.687672][ T9628] netlink: 'syz.4.951': attribute type 64 has an invalid length. [ 127.798878][ T42] kauditd_printk_skb: 116 callbacks suppressed [ 127.798894][ T42] audit: type=1400 audit(127.712:1084): avc: denied { write } for pid=9634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.880173][ T42] audit: type=1400 audit(127.792:1085): avc: denied { write } for pid=9639 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.962064][ T42] audit: type=1400 audit(127.882:1086): avc: denied { write } for pid=9642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.003794][ T42] audit: type=1400 audit(127.922:1087): avc: denied { create } for pid=9646 comm="syz.2.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.015218][ T42] audit: type=1400 audit(127.932:1088): avc: denied { write } for pid=9645 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.025032][ T9647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9647 comm=syz.2.953 [ 128.211568][ T9657] kvm: MONITOR instruction emulated as NOP! [ 128.391932][ T42] audit: type=1400 audit(128.312:1089): avc: denied { write } for pid=9660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.447030][ T42] audit: type=1400 audit(128.362:1090): avc: denied { write } for pid=9665 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.496279][ T42] audit: type=1400 audit(128.412:1091): avc: denied { append } for pid=9672 comm="syz.2.959" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.720970][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.750980][ T13] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.111591][ T9694] comedi comedi0: Minor -4 is invalid! [ 129.339547][ T9699] netlink: 'syz.4.966': attribute type 6 has an invalid length. [ 129.342171][ T9699] netlink: 'syz.4.966': attribute type 5 has an invalid length. [ 129.392226][ T9703] netlink: 'syz.4.967': attribute type 12 has an invalid length. [ 129.461078][ T5746] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.466134][ T5748] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.481250][ T5748] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 129.522061][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.524784][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.552580][ T42] audit: type=1400 audit(129.472:1092): avc: denied { getopt } for pid=9715 comm="syz.6.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.587598][ T9722] cgroup: release_agent respecified [ 129.589171][ T9718] block device autoloading is deprecated and will be removed. [ 129.622893][ T9724] SET target dimension over the limit! [ 129.653144][ T9722] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 129.729401][ T42] audit: type=1400 audit(129.642:1093): avc: denied { mount } for pid=9712 comm="syz.4.971" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.216972][ T9751] trusted_key: syz.6.985 sent an empty control message without MSG_MORE. [ 130.292844][ T9756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.480757][ T5842] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 130.652404][ T5842] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.655655][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 130.658797][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.662431][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 130.665968][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 130.668970][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 130.672687][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 130.675815][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 130.678800][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 130.681901][ T5842] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.685004][ T5842] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 130.687989][ T5842] usb 7-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 130.693768][ T5842] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 130.696796][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.699260][ T5842] usb 7-1: Product: syz [ 130.700619][ T5842] usb 7-1: Manufacturer: syz [ 130.702247][ T5842] usb 7-1: SerialNumber: syz [ 130.706103][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.709250][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.711698][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.713987][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.716274][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.718529][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.721361][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.723634][ T9754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.727353][ T5842] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 130.730279][ T5842] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 7 [ 130.733809][ T5842] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 5 [ 130.737190][ T5842] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 130.740568][ T5842] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 3 [ 130.743640][ T5842] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 130.746471][ T5842] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 130.749770][ T5842] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 131.067422][ T5840] usb 7-1: USB disconnect, device number 27 [ 131.084741][ T5840] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 131.100184][ T5840] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 131.108683][ T5840] keyspan 7-1:1.0: device disconnected [ 131.181218][ T9771] __nla_validate_parse: 11 callbacks suppressed [ 131.181237][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 131.233513][ T9774] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 131.362010][ T9784] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 131.641655][ T5842] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 131.663670][ T9789] tipc: Started in network mode [ 131.668033][ T9789] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 131.672699][ T9789] tipc: Enabling of bearer rejected, failed to enable media [ 131.727597][ T9800] netlink: 'syz.5.1001': attribute type 10 has an invalid length. [ 131.730063][ T9800] ipvlan0: entered allmulticast mode [ 131.733200][ T9800] veth0_vlan: entered allmulticast mode [ 131.739661][ T9800] team0: Device ipvlan0 failed to register rx_handler [ 131.753167][ T9802] netlink: 'syz.5.1001': attribute type 10 has an invalid length. [ 131.760356][ T9802] team0: Device ipvlan0 failed to register rx_handler [ 131.814136][ T5842] usb 9-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 131.819204][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.835233][ T5842] i2c-tiny-usb 9-1:1.0: version 1.00 found at bus 009 address 007 [ 131.853470][ T9809] BUG: unable to handle page fault for address: fffffffffffffc10 [ 131.856621][ T9809] #PF: supervisor read access in kernel mode [ 131.858924][ T9809] #PF: error_code(0x0000) - not-present page [ 131.862470][ T9809] PGD e997067 P4D e997067 PUD e999067 PMD 0 [ 131.865052][ T9809] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 131.867010][ T9809] CPU: 0 UID: 0 PID: 9809 Comm: syz.5.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.870927][ T9809] Tainted: [L]=SOFTLOCKUP [ 131.872764][ T9809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.876894][ T9809] RIP: 0010:strnlen+0x4b/0x80 [ 131.878855][ T9809] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 131.885657][ T9809] RSP: 0018:ffffc9000dc7f120 EFLAGS: 00010246 [ 131.888016][ T9809] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 131.890980][ T9809] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 131.893808][ T9809] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 131.897108][ T9809] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 131.900373][ T9809] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 131.903697][ T9809] FS: 00007f1bd598f6c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 131.907072][ T9809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.909742][ T9809] CR2: fffffffffffffc10 CR3: 0000000053578000 CR4: 0000000000352ef0 [ 131.913001][ T9809] Call Trace: [ 131.914399][ T9809] [ 131.915645][ T9809] ? look_up_lock_class+0x64/0x120 [ 131.917531][ T9809] trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0 [ 131.920216][ T9809] ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10 [ 131.923037][ T9809] ? __pfx___might_resched+0x10/0x10 [ 131.925292][ T9809] ieee80211_netdev_setup_tc+0x2c6/0x3e0 [ 131.927669][ T9809] ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10 [ 131.930253][ T9809] tcf_block_offload_cmd.isra.0+0x1c4/0x310 [ 131.932815][ T9809] ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10 [ 131.935440][ T9809] ? __pfx_down_write+0x10/0x10 [ 131.937357][ T9809] tcf_block_get_ext+0x7ed/0x1950 [ 131.939297][ T9809] tcf_block_get+0xa8/0x100 [ 131.941016][ T9809] ? __pfx_tcf_block_get+0x10/0x10 [ 131.942740][ T9809] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 131.945035][ T9809] hfsc_init_qdisc+0x154/0x420 [ 131.946937][ T9809] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 131.948984][ T9809] qdisc_create+0x47b/0x1060 [ 131.950801][ T9809] tc_modify_qdisc+0xdcf/0x2120 [ 131.952754][ T9809] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 131.954557][ T9809] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 131.956542][ T9809] rtnetlink_rcv_msg+0x3c9/0xe90 [ 131.958561][ T9809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.960771][ T9809] ? ref_tracker_free+0x37e/0x6c0 [ 131.962739][ T9809] netlink_rcv_skb+0x159/0x420 [ 131.964733][ T9809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.966815][ T9809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.968748][ T9809] ? netlink_deliver_tap+0x1ae/0xcc0 [ 131.970716][ T9809] netlink_unicast+0x585/0x850 [ 131.972243][ T9809] ? __pfx_netlink_unicast+0x10/0x10 [ 131.974236][ T9809] netlink_sendmsg+0x8b0/0xda0 [ 131.976096][ T9809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.978199][ T9809] ? selinux_socket_sendmsg+0x198/0x2f0 [ 131.980227][ T9809] ____sys_sendmsg+0xa4d/0xbe0 [ 131.982112][ T9809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.984118][ T9809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.986190][ T9809] ___sys_sendmsg+0x190/0x1e0 [ 131.987912][ T9809] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.989822][ T9809] ? __lock_acquire+0x49f/0x1a40 [ 131.991834][ T9809] __sys_sendmsg+0x160/0x210 [ 131.993703][ T9809] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.995798][ T9809] do_syscall_64+0x115/0x870 [ 131.997666][ T9809] ? clear_bhb_loop+0x40/0x90 [ 131.999692][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.002118][ T9809] RIP: 0033:0x7f1bd4b9e019 [ 132.003971][ T9809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.011766][ T9809] RSP: 002b:00007f1bd598f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.015029][ T9809] RAX: ffffffffffffffda RBX: 00007f1bd4e25fa0 RCX: 00007f1bd4b9e019 [ 132.018260][ T9809] RDX: 0000000020040084 RSI: 00002000000003c0 RDI: 0000000000000004 [ 132.020927][ T2323] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 132.021361][ T9809] RBP: 00007f1bd4c3500c R08: 0000000000000000 R09: 0000000000000000 [ 132.021378][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.021391][ T9809] R13: 00007f1bd4e26038 R14: 00007f1bd4e25fa0 R15: 00007ffcbb49bd58 [ 132.021411][ T9809] [ 132.034390][ T9809] Modules linked in: [ 132.035965][ T9809] CR2: fffffffffffffc10 [ 132.037606][ T9809] ---[ end trace 0000000000000000 ]--- [ 132.039823][ T9809] RIP: 0010:strnlen+0x4b/0x80 [ 132.041719][ T9809] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 40 87 07 00 48 [ 132.049330][ T9809] RSP: 0018:ffffc9000dc7f120 EFLAGS: 00010246 [ 132.051795][ T9809] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 132.054992][ T9809] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10 [ 132.058223][ T9809] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000 [ 132.061482][ T9809] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10 [ 132.064679][ T9809] R13: ffff88801c2f3e00 R14: 0000000000000006 R15: 0000000000000010 [ 132.068007][ T9809] FS: 00007f1bd598f6c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 132.071731][ T9809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.074426][ T9809] CR2: fffffffffffffc10 CR3: 0000000053578000 CR4: 0000000000352ef0 [ 132.077617][ T9809] Kernel panic - not syncing: Fatal exception [ 132.080768][ T9809] Kernel Offset: disabled [ 132.082540][ T9809] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:00:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a39335 RDI=ffffffff9ba0bb40 RBP=ffffffff9ba0bb00 RSP=ffffc9000dc7e980 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6fe1fb R15=ffffffff85a392d0 RIP=ffffffff85a3935f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1bd598f6c0 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffc10 CR3=0000000053578000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000001000001 Opmask02=00000000f802fefc Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbb49c246 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcbb49c246 00007ffcbb49c24c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd4c355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd4c3562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd4c35793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd4c35621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd4df25f8 00007f1bd4df25c8 00007f1bd4df2600 00007f1bd4df25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000a0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88806a533c68 RCX=ffffffff828392c4 RDX=1ffffffff1c8df25 RSI=ffffffff8c402600 RDI=ffffffff8e46f928 RBP=0000000000000001 RSP=ffffc9000ced7918 R8 =0000000000000000 R9 =fffffbfff22450fa R10=ffffffff912287d7 R11=ffffffff828466aa R12=ffffe8fefc567750 R13=ffff8880270db000 R14=0000607e2668f740 R15=ffffe8fefc567740 RIP=ffffffff81ee64fb RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f02930536c0 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000002f74000 CR3=0000000025159000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdeda8b66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcdeda8b66 00007ffcdeda8b6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62c96355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62c963562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62c9635793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f62c9635621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000ea104 RBX=ffff88801eed4a80 RCX=ffffffff8bbbd2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000000 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbbb89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3534b6cab0 CR3=0000000036bd5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000f802fefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f746e657261702e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd70b4b826 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd70b4b826 00007ffd70b4b82c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f136e0355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f136e03562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f136e035793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f136e035621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000e22bc RBX=ffff88801eed2540 RCX=ffffffff8bbbd2d5 RDX=0000000000000001 RSI=ffffffff8c402600 RDI=ffffffff81df2bd7 RBP=ffffed1003dda4a8 RSP=ffffc90000197e00 R8 =0000000000000000 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=ffffffff81d6005c R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bbbb89f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f136dfeb700 CR3=0000000025159000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0292f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc33b7ac6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc33b7ac6 00007fffc33b7acc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02922355ef ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f029223562f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0292235793 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0292235621 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000