last executing test programs: 1m36.26856415s ago: executing program 1 (id=691): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x44020080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x44020080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) wait4(r0, &(0x7f0000000140), 0x1, &(0x7f0000000280)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x78}}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x7, 0xfe, 0x6}]}, 0x10) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x3b8}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x501000, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) (async) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0x7, {0x0}}]}, 0x5}) (async) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0x7, {0x0}}]}, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) timer_create(0x7, &(0x7f0000000040)={0x0, 0x3, 0x0, @tid=r1}, &(0x7f00000000c0)) 1m35.738574726s ago: executing program 1 (id=697): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x48) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001a"]) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3, 0x800}) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 1m35.48103653s ago: executing program 1 (id=699): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) pselect6(0x95, &(0x7f00000001c0)={0x3f, 0xffffffffffffff7e, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x3, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x20000000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x0, 0x1, 0x0, 0x9}, 0xffffff9f) r8 = semget$private(0x0, 0x4, 0x440) semctl$GETPID(r8, 0x2, 0xb, 0x0) semtimedop(r8, &(0x7f0000000000)=[{0x2, 0x0, 0x800}, {0x2, 0x1}], 0x2, &(0x7f0000000040)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r9, 0xade) ioctl$sock_TIOCINQ(r9, 0x541b, 0x0) syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.523015864s ago: executing program 1 (id=719): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = inotify_init1(0x800) r5 = fcntl$dupfd(r2, 0x406, r4) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r6, 0x31f, &(0x7f00000001c0)={0xa1, 0x16, 0xc2, 0xff}) setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, 0x0) setpgid(0x0, r8) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x800000000000001) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_IIF={0x8, 0x3, r13}]}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000110d000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="15460100000000001c001280090001007866726d000000000c000280080002000200000008000a00", @ANYRES32=r1, @ANYBLOB="2072ee8c8fc18303a55461af4159d39c9d2a"], 0x44}}, 0x0) gettid() 1m34.288294516s ago: executing program 1 (id=722): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000004c0)="7cdf8b8cdbeb7168f1561b7936128c3d96a63cef3584d1a9dbd379bf307b64022ce2f5cb857805273406c1cb784963e5e8d46115019079764b4ca9c93e43006c2ef4346d8414cbdbc0c6ae84f36959d7d2014c1e7aa27dbe20d6057ef749012e059ab7e309e143c840d8aa7ca909a1d1c9dac0b9959bdd0c8099754c30160d0576881203301085872d5e1d45f2f2a2f0b8bc4da047c2b11b31b7fc87954bd5437279db5bd27cc5ef439add7c01995188a97e9d17a413597316d76c8b6c18183479", 0xc1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001c40)={&(0x7f0000001c00)=[r6], 0x1, 0x800}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fed7a34f56eb", 0x6}], 0x1}, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m33.909465691s ago: executing program 1 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0xfffffffffffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x28}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x413, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, r5}, {@in=@loopback, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0x354a0ebf, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}]}, 0xf8}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x14}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x22020600) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r8, 0x4068aea3, &(0x7f0000000500)={0xc4, 0x0, 0x6}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, 0x0) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x80000) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) 1m33.860284513s ago: executing program 32 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0xfffffffffffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x28}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x413, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, r5}, {@in=@loopback, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0x354a0ebf, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}]}, 0xf8}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x14}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x22020600) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r8, 0x4068aea3, &(0x7f0000000500)={0xc4, 0x0, 0x6}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, 0x0) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x80000) bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) 1m11.010402236s ago: executing program 2 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x14}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 1m10.888199146s ago: executing program 2 (id=1083): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r2, 0x3a, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) r4 = dup(r3) (async) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x618008, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e601bae74656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000100)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) (async, rerun: 64) lseek(r5, 0x10001, 0x0) (rerun: 64) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.824999298s ago: executing program 2 (id=1086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0xfffffffffffffffe, 0x2, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20001, 0x6, 0x1, 0x9, 0x7ff, 0x401, 0x0, 0xe, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}, 0x5}], 0x1, 0x2000, 0x0) r5 = syz_open_pts(r4, 0x900) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) read(r6, &(0x7f00000000c0)=""/226, 0xe2) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000340)={&(0x7f00000001c0), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x6, 0x1, 0x5, {r7, r8/1000+10000}, {0x0, 0x2710}, {0x2, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x28, 0x4, 0x0, 0x0, "6e209cf1588c562de2991229025706085231fd34f60ebbc3199d54add55472f625922a62354aa90a8d8f6f4f2cd9d14f91a71bf8ac61d093b516d138b08005a0"}}, 0x80}, 0x1, 0x0, 0x0, 0x4044000}, 0x20) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000100)="440f20c03504000000440f22c0ed430f2085f3410fc733a11fc42321e166a580000000000b00000f32660ffc290f01df670f001a66b88c288ec866b86a008ec0", 0x40}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.490739865s ago: executing program 2 (id=1088): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01d9f0cb9f52443ffe250c0000000800030098ef1fa101cee15f2b295db5ba22ffe27ca747133e31147a5b434ba081a20164bd91c281015a93a443b087ffe1c5106572bd9d694d4643e177fc38bfe0d89a44237ff87fe9283bacc34716a4d53d972f697a08e239ebdbea2df06330732aed434d4dd8441fb200c7d2d66a7a2724995ad25f213d15afcefac1499265b62c8b50a82b1f3f08eca17683f8a713871849dd93825c259b084c3af56ec54717209d7c3eb256ad7c3682b76c4fd57775ff01d4", @ANYRES32=r2, @ANYBLOB="04000a00"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 1m10.487761095s ago: executing program 2 (id=1091): r0 = getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = dup2(r2, r1) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000001700)={0x0, 0x0}) (rerun: 32) recvmmsg(r1, &(0x7f0000001680)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/81, 0x51}], 0x2, &(0x7f0000000200)=""/14, 0xe}, 0x4}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/202, 0xca}, {&(0x7f0000001440)=""/126, 0x7e}, {&(0x7f00000014c0)=""/218, 0xda}, {&(0x7f00000015c0)=""/2, 0x2}], 0x7}, 0xffffffff}], 0x2, 0x40002044, &(0x7f0000001740)={r4, r5+60000000}) (async) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) (async) setns(r3, 0x10000000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m10.420822698s ago: executing program 2 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m7.210592457s ago: executing program 4 (id=1128): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x278902, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, 0x2}, 0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000240)={0xfffffffa}, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x2000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)=0x10) r2 = signalfd4(r1, &(0x7f0000000300)={[0x6]}, 0x8, 0x800) copy_file_range(r2, 0x0, r1, &(0x7f0000000340)=0x3, 0x9, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r2) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1ac, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = socket$isdn(0x22, 0x3, 0x11) r5 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000640)={0x2, r5}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffff801, 0x16}}}}, [@NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8f12f3038a"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "aa5b6c3491c8"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000880)) r7 = syz_open_pts(r2, 0x244040) r8 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r9 = socket$caif_seqpacket(0x25, 0x5, 0x5) read$FUSE(r2, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003080)={0x0, 0x0, 0x0}, &(0x7f00000030c0)=0xc) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000003100)={0x0, 0x0, 0x0}, &(0x7f0000003140)=0xc) r13 = socket$inet(0x2, 0x5, 0x4) r14 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000ac0)="483ad0583d547a382d6d9747c3124c64d01a9d3d8993615244caa2fbff1f6a8e98823360c69e671a61bf3542d8a4ea1b829acf394c01c2ceae512a96c923d781c36afe0e85f33899e545ee05badc084b2668c83153375de82fd542d43d6d724b7328a69fa8d4da0e8fdab4d73aeefebb4b67886bd25a7767c651ba3be5912c788fa7aee9790d8111fb8cd2104d70cb4403844673b8213b2133664e0c4350e7a79f03ae9c14ab3e3059afca26f440f1929ff86b64d138e5f685b5c7c52b35beb0c2eea5eefdb0", 0xc6}, {&(0x7f0000000bc0)="09202507af28a3f58a7b45ae70cc62d2373c31ec00050411291da3d057b1bd7c9dc7bc5b7f1c64b51ce4b66699b9238c6d", 0x31}, {&(0x7f0000000c00)="c112f44eb2c87eb9267f17c4bdc7d6e33ac2e60c79536a6b855aede407dfceaee8c11c5ec1225b373fda5e8c1bda43735c", 0x31}, {&(0x7f0000000c40)="f9", 0x1}, {&(0x7f0000000c80)="224d86cb8ee0d47f505567345b29686bcfb16be00985d95fb90f96f56a2fd572c7473c37b28e1ad5a87cc905107a3286b6897aac590690f8d58f0c408c280fbe7929f8422956bd82fee6b1c070e9135ea43166429f81703d948d57a13e74dabd0820741586be078e5bfbaef0fb1f95a25c8b2370f54d9c1139c1f7d0531c6cbf2431f48d79f20fcb8f81e626916cc4be7b94512a167d7e8265993e408ca88c99cc2b4c4981fc742e1f1aedaaba16a520c5ab4103e2bd2eac0cf4eb36da291c50931d1a457c0309c2f1d7f8d2c5f9378178b10a4bb17e4843ed05a929d4d0bd9613cc925f61fcb027cf56cc", 0xeb}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="d7fa43ffe594d5cf2c8ef3b246867bba0dfddadb090b91b2067e8a8ae71e3e01f4f08d54b21d91abc94466d936cf596673510724c7fecad87f57d0c6c26c2aecff75aacef9522c210d4de3a34d04c5e7", 0x50}, {&(0x7f0000000e40)="4f5505af6264288e74eceead25948ab8776c2e626c19694c90a936142172e0b86c364a93151651c1a04cfacdf6a206ba038b79e496a62116b92c72cdff45bbf9b2c98b0a84", 0x45}, {&(0x7f0000000ec0)="77f2c4409932c1cf41502dfec94bcd4daefc3f1f35e25aa3e551620fafde28e6", 0x20}, {&(0x7f0000000f00)="9a1ade27d91c924ae4fa631d72f02dcec65be7dea851ef007e94b393eee5763dc78f", 0x22}], 0xa, &(0x7f0000003180)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r8, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}, @cred={{0x1c, 0x1, 0x2, {r5, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r12}}}, @rights={{0x34, 0x1, 0x1, [r13, r14, r1, r4, r2, r2, r4, r2, r1]}}], 0xd0, 0x240408c0}, 0x48000) syz_open_dev$char_usb(0xc, 0xb4, 0x1f0) 1m7.160468306s ago: executing program 4 (id=1130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000050013"], 0xd0}, 0x1, 0x0, 0x0, 0x4008800}, 0x2400c800) 1m7.089699472s ago: executing program 4 (id=1132): r0 = socket$rxrpc(0x21, 0x2, 0xa) setrlimit(0x0, &(0x7f0000000980)={0x0, 0x62}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000580), 0x1000000000000297) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) recvfrom$packet(r1, &(0x7f0000000200)=""/198, 0xc6, 0x10100, &(0x7f0000000040)={0x11, 0x2, r3, 0x1, 0x7}, 0x14) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 1m6.970746433s ago: executing program 4 (id=1134): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1m6.970295143s ago: executing program 4 (id=1135): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000400)=r1, 0x12) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000010560000000085000001870000008de9be7871064009ce0189783886950000000000000021c2367607b4f59689069f895c8b416bb2cd99ac9df6b172881d868dd4a5a03a81fe1d53a8d2ef73a1e67915774b150c7a08a790559bb67dcccbb636d0d8257b92229b09a27005d000138f2212ed54aa3f9a052a22d0d61f755ec392949f2530abf99badc5718b61f52031ffa4a4c358491274b5aa8a911949ac6c71aedff0"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r6 = dup3(r3, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m6.638024347s ago: executing program 4 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x4000, 0xffffffffffffffff) 1m6.627071778s ago: executing program 33 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x4000, 0xffffffffffffffff) 55.428718785s ago: executing program 34 (id=1092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000180)=""/198, 0xc6}], 0x1) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x28}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3.002989578s ago: executing program 0 (id=1814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x10, 0x0, 0x5}]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x112) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file1\x00', r2, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x430700) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000940)={0x10000, 0x4, 0xffffffff, 0x3, 0x10, 0x80000000}) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async) r5 = socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) close(r5) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x18, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1b}, [@generic={0xc9, 0xa, 0x1, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x9, 0xc, 0x6, 0x6, 0xfffffff7}, @jmp={0x5, 0x0, 0xd, 0xa, 0x0, 0x0, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x1, 0x4, 0x4, 0xffffffffffffffe0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query, @alu={0x7, 0x0, 0x9, 0x4, 0x8, 0x40}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xad, &(0x7f00000003c0)=""/173, 0x40f00, 0xa, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x8, 0x8, 0x86}, 0x10, 0x9f09, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x4, 0xe, 0xc}, {0x1, 0x2, 0xf, 0x3}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x4, 0x9, 0x7}, {0x5, 0x4, 0xa, 0x4}, {0x5, 0x1, 0xf, 0xa}, {0x2, 0x3, 0xd, 0x9}, {0x4, 0x5, 0xc, 0x4}, {0x4, 0x4, 0xf, 0x7}], 0x10, 0x7c8f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r8, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x31, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r11, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x5}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @fwd={0x8}, @fwd={0xb}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000000a40)=""/143, 0x51, 0x8f, 0x0, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x6bd4, 0x3, 0x8, 0x10, r0, 0x40, '\x00', r9, r12, 0x0, 0x0, 0x1, 0x1}, 0x50) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.85867897s ago: executing program 0 (id=1816): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000140)=@userptr={0x4, 0xc, 0x4, 0x100, 0x0, {0x77359400}, {0x1, 0xc, 0x3, 0x3, 0x3, 0x6, "b108d3e1"}, 0x6, 0x2, {&(0x7f0000000080)}, 0xbc}) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) 2.669408628s ago: executing program 6 (id=1818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x454}}, 0x20004040) (async) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 2.290125524s ago: executing program 3 (id=1820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000190c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000019180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000019300)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000192c0)={&(0x7f00000191c0)={0xf4, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7bc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5e6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xa2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x84a}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd0000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb8fc}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x346}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x316}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xa]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 2.289383729s ago: executing program 3 (id=1821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000006c0)=[{0xe, 0x7e, 0xe, 0xfd, @time={0x2, 0x100001}, {}, {0xe1, 0xfd}, @connect={{0x81, 0x2}, {0xd, 0x10}}}], 0x1c) r1 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'pim6reg0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400040, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000180)={'veth1_to_batadv\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000000140000001100010000"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x102, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.067512144s ago: executing program 3 (id=1822): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) ioctl$sock_netdev_private(r0, 0x8947, &(0x7f0000000000)) 2.066625377s ago: executing program 3 (id=1823): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRES8, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4004051}, 0xc000) sendmmsg$inet6(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000340)='.', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff0000}}, 0x7}, &(0x7f0000000200)=0x90) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x44, &(0x7f0000000300), 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000001d0021002bbd70000300000007"], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1.98944056s ago: executing program 3 (id=1824): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/175, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000000000, 0xc0800) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0xe) 1.792168401s ago: executing program 6 (id=1825): r0 = syz_io_uring_setup(0x24fc, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x1, 0xe6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r7) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@private2, 0x4e22, 0x4, 0x4e22, 0x90, 0x2, 0x0, 0x80, 0x33, r6, r7}, {0x8000000000000001, 0xb, 0x5, 0x5, 0x1, 0x7fffffff, 0x7, 0x6a93f0eb}, {0x2d, 0x8, 0x0, 0xf87}, 0x4825, 0x6e6bb1, 0x1, 0x0, 0x2, 0x2}, {{@in6=@mcast2, 0x4d6, 0xff}, 0xa, @in6=@remote, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfffffff7, 0x9}}, 0xe8) r8 = accept4(r4, 0x0, 0x0, 0x800) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x406, r3) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r11, 0x4068aea3, &(0x7f0000000680)={0x8f, 0x0, 0x6}) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001800)={r0, 0x20, &(0x7f00000017c0)={&(0x7f0000000700)=""/164, 0xa4, 0x0, &(0x7f00000007c0)=""/4096, 0x1000}}, 0x10) r14 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x0, 0x0) fchdir(r15) r16 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r16, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r16, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x58, "00000000000000000000a200"}) r17 = syz_open_pts(r16, 0x101000) r18 = dup3(r17, r16, 0x0) ioctl$TIOCSTI(r18, 0x5412, &(0x7f0000000000)=0x17) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x17, 0x2d, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @alu={0x7, 0x0, 0x6, 0x1, 0xb, 0xc, 0xffffffffffffffff}, @map_fd={0x18, 0x14}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x7528cf78, 0x4b, &(0x7f0000000600)=""/75, 0x41000, 0x3, '\x00', r6, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x6, 0x4b4, 0x4}, 0x10, r13, r15, 0x2, &(0x7f0000001900)=[r18, r3, r19], &(0x7f0000001940)=[{0x2, 0x5, 0x5}, {0x5, 0x5, 0x4, 0xc}], 0x10, 0x80000000}, 0x94) 1.705294059s ago: executing program 0 (id=1826): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010004000000fddbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000007f00000a00000000000500000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r3, r2, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r3, r2, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) (async) write$tcp_congestion(r1, &(0x7f0000000380)='reno\x00', 0x5) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@hyper, 0x3}, @any, 0x2, 0x1a1d, 0x7, 0x1ff, 0x10000, 0x400, 0xe94}) pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x97) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000189a02, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) write$binfmt_misc(r6, &(0x7f0000000280)="f8", 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x100000, 0x9) 1.630047393s ago: executing program 0 (id=1828): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000080)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x2, 0x2, {0xa, 0x4e21, 0xb, @rand_addr=' \x01\x00', 0x9}}}, 0x32) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000400020011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f000000cb00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x21, 0x0, 0x945f4a821577fb5d}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x5) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x80010000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) linkat(r6, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./bus\x00', 0x0) read$eventfd(r7, &(0x7f00000001c0), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r8, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000004c0)="8292a2b530", 0x5}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r9, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="043a061244"], 0x9) 1.519335709s ago: executing program 3 (id=1829): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000801) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10820, 0x400}}, 0x20}}, 0x4084) (async, rerun: 64) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) (async) dup2(r0, r4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) chdir(0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006, 0x41d0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socket(0x1, 0x2, 0x0) (async, rerun: 32) setresuid(0x0, 0x0, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000010140)={0x2020}, 0x2036) 1.518857036s ago: executing program 5 (id=1830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000005c0)={0x0, 0x0, 0xc00}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000340)=0x402, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x666, 0x802) readv(r7, &(0x7f0000001140)=[{&(0x7f0000000040)=""/138, 0x8a}], 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x2) write$uinput_user_dev(r6, &(0x7f0000000440)={'syz0\x00', {0x4, 0xfffc, 0xa, 0x6512}, 0x3f, [0x3, 0x7, 0xc, 0x0, 0x3, 0x8000, 0x4, 0x0, 0x1, 0x6, 0x10000, 0xe, 0x6a, 0x8, 0x38000000, 0x57, 0x5a, 0x800, 0x6, 0x8, 0x7f, 0x8eb0, 0x100, 0x6, 0x8, 0xe9d, 0x4, 0x6, 0x8000, 0x9, 0x9, 0x4, 0x6, 0xff, 0xe, 0x8, 0x4, 0x9, 0x9, 0x6, 0x9, 0xc, 0x8001, 0x7, 0x2, 0xffffffff, 0x90, 0x800000, 0xca5e, 0xf, 0x9, 0x8001, 0x3b1, 0x3, 0x2, 0x255, 0x4, 0x5, 0x10001, 0xf, 0x1, 0x0, 0x2, 0x5], [0x5, 0x4, 0x5, 0x10000, 0xabd3, 0x5, 0xffffffff, 0x4, 0x3ff, 0x6, 0x1, 0x4000, 0x5, 0xffffffff, 0x9, 0x7fffffff, 0x3, 0x7, 0xc, 0x9, 0xa42d, 0x1ff, 0x4, 0x7fff, 0x1, 0x101, 0x8, 0x752, 0x7, 0x0, 0x2, 0x8, 0x80000000, 0x40, 0x1, 0x10000, 0x1, 0x6f2, 0xf88, 0x1, 0x4, 0x9, 0x9, 0x1, 0x108, 0x100, 0xe6c, 0x8000, 0x5, 0x5, 0x3, 0x7, 0x986, 0x3, 0x8, 0xc7, 0x9, 0xc3, 0xfffeffff, 0x6, 0x80000001, 0xfffffbff, 0x5, 0x5], [0xfffeffff, 0x0, 0x4, 0x9, 0x1, 0x9, 0x80000001, 0x8, 0xfffffff8, 0x2, 0xa95, 0x9, 0x6, 0x249, 0x9, 0x7, 0x1ff, 0x5a37, 0x8, 0x1, 0xf, 0x8, 0x4, 0x6, 0x4, 0x4, 0x6, 0x1, 0x0, 0x3, 0x3, 0x10000, 0x7, 0x461, 0x400, 0x4, 0x2, 0x3, 0x7, 0xebcc, 0x8, 0x7, 0x4, 0x1ff, 0x2, 0x101, 0x3ae, 0x0, 0xffffffff, 0x7, 0x0, 0x200, 0xff, 0x9, 0x80, 0x4, 0x2, 0xd4b0, 0x6, 0x4, 0x2, 0xffff, 0x4f35, 0x2], [0x8, 0x1, 0x1, 0xc, 0x0, 0x4, 0x5, 0x3, 0x81, 0x4, 0x8, 0xa0ba, 0xfffffff3, 0x2, 0x6, 0x6, 0x400, 0x4, 0xfc000000, 0x6, 0x9, 0x10001, 0xffffffff, 0x1, 0x7, 0x40, 0x10000, 0x7, 0x9374, 0x7, 0x5, 0x8000, 0xa, 0x2, 0x2, 0x9, 0xfffffff8, 0xc, 0x9, 0x3, 0x7fffffff, 0x4, 0x9, 0x525f, 0xfffffe90, 0x9, 0x8, 0x8, 0xa1, 0x1ff, 0x1ff, 0xffffff98, 0x100, 0x1200, 0xb, 0x2, 0x6, 0x0, 0x8, 0x5, 0xb2, 0x10, 0x56, 0x4]}, 0x45c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 1.159105944s ago: executing program 5 (id=1831): r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r1, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) 939.994116ms ago: executing program 5 (id=1832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @loopback}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210057ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 880.08671ms ago: executing program 5 (id=1833): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$kcm(0xa, 0x3, 0x73) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="001d81", 0x5e0, 0x0, &(0x7f0000000000)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x8}, @TCA_PIE_TUPDATE={0x8}]}}]}, 0x40}}, 0x0) 720.154908ms ago: executing program 0 (id=1834): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2a8f85ec3cd6ea80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x140) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0xc, 0x9015, 0xc, 0x6}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x800, 0x7, 0x8, 0x40, 0x4}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x100000, 0x32}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) close_range(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) close_range(r3, 0xffffffffffffffff, 0x2) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000380), 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0xe) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000440), 0x404280, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100004}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r1, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x58}, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b40529b06273e863e235c7227736b302ee8c2171b3805af"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "da13abb6845e9784bf903b994a4265b72f213cd7a0c8ecbb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4aa4eee020181dcaf08aae930864da182802f8dc7d7f70d9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) connect$bt_sco(r0, &(0x7f0000000640)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x16}}}}, [""]}, 0x28}}, 0x20008000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}}, 0x4000004) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000bc0)=0x3, 0x4) 650.113523ms ago: executing program 6 (id=1835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x488, 0xa8, 0x150, 0xfeffffff, 0x150, 0x298, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ip={@broadcast, @multicast2, 0xff000000, 0xffffff00, 'bridge_slave_0\x00', 'lo\x00', {}, {0xff}, 0x88, 0x1, 0x31}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @multicast1, @remote, @gre_key, @icmp_id=0x68}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @port=0x4e21, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x4, 0xe752, 0x716f, 0x9a8, 0xe5, 0xd72d8a5480d7f2b5}}, @common=@set={{0x40}, {{0x3, [0x5, 0x7, 0x1, 0x4, 0x1, 0x4], 0x6, 0x7}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="65d4d1583291", 0x5, 0x8, [0xd, 0x40, 0x12, 0x2f, 0x3b, 0xc, 0x7, 0x1d, 0x3, 0x2b, 0x12, 0x3e, 0xc, 0x31, 0x1c, 0x25], 0x1, 0x3, 0x9}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan1\x00', {0x0, 0x0, 0x10000002}}}, @common=@addrtype={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x4, 0x0, 0x5, 0x1], 0x1, 0x4}, {0xffffffffffffffff, [0xd0a9405cea5181f2, 0x0, 0x6, 0x2, 0x6, 0x6], 0x1, 0xd}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 419.436578ms ago: executing program 6 (id=1836): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x20000, &(0x7f0000000200)=""/4096}, &(0x7f00000025c0)="85c8800bfad6", 0x0, 0x8, 0x10011, 0x1, 0x0}) read$FUSE(r0, &(0x7f00000027c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x24, r1, {0x7, 0x2b, 0x1, 0x0, 0x0, 0x2, 0xe3cf, 0x4, 0x0, 0x0, 0x2, 0x870}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x20000, &(0x7f0000000200)=""/4096}, &(0x7f00000025c0)="85c8800bfad6", 0x0, 0x8, 0x10011, 0x1, 0x0}) (async) read$FUSE(r0, &(0x7f00000027c0)={0x2020}, 0x2020) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x24, r1, {0x7, 0x2b, 0x1, 0x0, 0x0, 0x2, 0xe3cf, 0x4, 0x0, 0x0, 0x2, 0x870}}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 419.26589ms ago: executing program 5 (id=1837): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x1001) (async) listen(r1, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0xf}}) 255.994216ms ago: executing program 0 (id=1838): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x40}) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0xd, 0x40005, &(0x7f00000000c0)={r0, r1+60000000}, &(0x7f0000000140)=0x80000, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000000000000009410000004c001800000096756470"], 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x46010) brk(0x689d80000000) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 249.744443ms ago: executing program 5 (id=1839): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fanotify_init(0x2, 0x80000) read$FUSE(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r2, &(0x7f0000000580)=""/235, 0xeb, 0x40012147, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000000000000000000000000000000000000000000000a00000000000000", @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0xfffffff9, 0x200000, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/softlockup_count', 0x169a82, 0x0) sendfile(r6, r6, 0x0, 0x30) 119.630416ms ago: executing program 6 (id=1840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x2, 0x80, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004870}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000c00)={0x2e8, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2d4, 0x11d, 0x0, 0x1, [{0x244, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x12, 0x1, 0x36, 0x1b, 0x36, 0x36, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x4, 0x9, 0x1000, 0x1600, 0x1, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe529, 0x7, 0x1, 0x1, 0x8, 0x9, 0x7, 0x6]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x9, 0x2, 0x30, 0x12, 0x6, 0x3f, 0x6, 0x3c, 0x12, 0x5]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x9, 0x1b, 0x24, 0x1, 0x6c, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x112, 0x2, 0x6, 0x6, 0x5, 0x3, 0xfffb]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x5, 0x800, 0x3, 0x4, 0x4, 0x8000]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x24, 0x1, 0x60, 0x30, 0x1b, 0x30, 0x36, 0x2]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x3}, {0x5, 0x5}, {0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0xa}, {}, {0x2}, {0x4, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x4}, {0x5, 0x8}, {0x4, 0x6}, {0x4, 0x9}, {0x1}, {0x6, 0x6}, {0x3, 0x9}, {}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0xa}, {0x1, 0x3}, {0x2, 0x2}, {0x7, 0x4}, {0x1, 0x7}, {0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x7, 0x8}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x6, 0x1a}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x2}, {}, {0x6, 0x1}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x7, 0x5}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x48, 0xb, 0x3, 0x110efa99b139a6c9, 0x64, 0x16, 0x6c, 0x66, 0x5, 0x24, 0xb, 0x6c, 0x1b, 0x24, 0x4, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x1}, {0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x8}, {}, {0x7, 0x5}, {0x6, 0x4}, {0x4, 0x1}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0xa}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x7}, {0x2}, {0x4, 0x2}, {0x0, 0xa}, {}, {0x3, 0x7}, {0x6, 0x6}, {0x6, 0x7}, {0x5, 0x16}, {0x2}, {0x5, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x4}, {0x1, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x9, 0x6c, 0x4, 0x5, 0x64, 0x6c, 0x6c, 0x12, 0x4, 0x36, 0x6c, 0x18, 0x12, 0x5, 0x2, 0x16, 0x4, 0x1b, 0x50, 0x12, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x4, 0xb, 0x4, 0x1000, 0x400, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1000, 0x5, 0x2, 0x7f, 0x3, 0x7, 0xcdc]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x20}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd0d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xb655}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x28004010) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000850}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000200)=@llc={0x1a, 0x101, 0xff, 0x0, 0x5, 0x6, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)="4b6324ef40bdeb5b636d93e9e4b0d5d1e5d6c40ed3fbdb15cdca77adc75891368e2e6ce56f24f358cb93e15e4e6a9da9a3cd144d3c79cf915394a9aace67798cb272b5fac2a33dbc2223ad1af98fda25a55c09d26b97018b494b5a127e222b1ccd303c0b8de0bd94f07068269ef7dd4cc40ae5c97c6cbdf1c20f7d83523971e0471dfed779dd0cbdb0c4825776f7967080fef41ca23d576efea7b0096ae5bfea9690f74f089d416d70fcce118530dde0", 0xb0}], 0x1, &(0x7f0000000540)=[{0x100, 0x107, 0x8, "a5dadc1aeb3f2cfca36eb87a82196607124ff86c661bfd73d20362c1ce3558061c79c08f4f76a01118a5bd48ea78b17c7fadb8cf7bc39fde3a5e941b05150f515e32d6b89cf4f1e6efec80d721d5d8b6fd1d2f730356f486e48600d7a696e1e32f54fc37780d1603f2fce1aebcc5b6446a881ef634a6aafecc756369656bc23cd128e79995b15bafe8c568ca96b757cda2896537945348aa92c83dec03d3c806ff2e171d99b0adee947c5174f3d3ee03e183873c11362b7b1c4920dbb1cda1feb06322953cb6dec9678983ead8cce782cb813ed76e4329e50aa584163033d25f3014bda4cad3013d5ae8"}], 0x100}}, {{&(0x7f00000006c0)=@nfc_llcp={0x27, r8, 0x1, 0x3, 0x8, 0x10, "90fdb75ce8674caf6ebca726b4f93b452010d4ace7867c3123183111e31850df7b022f87d5560da5d40f9926abd8b0869eb959d0400435c784883cb1c4513f", 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000740)="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", 0xff}, {&(0x7f0000000480)="130e0378d727ca1fdab84e14d9f3a581c54ce2cce90660abe878f475dfc1189fe444f8c4445674", 0x27}, {&(0x7f0000000840)="e729db91ea18b33dbe4aa91a1405c6d820500a788b96c6d34161d0e7cdd8088bfbf8ab76a4ab5805e2a2e504cfb30e465d53f572c5d2de791f7f4ced3482f29ca1053adb1c01c373cfea503dd7618fc804d41398955fb3cb7b8c512c90517453cb5a8bd315905a2514", 0x69}], 0x3, &(0x7f00000008c0)=[{0x110, 0x111, 0x0, "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"}, {0x58, 0x112, 0x6b3, "6808748cb2551ae95276f75296443756731bf8154c6fcf622634e27d65df330abf0584058d23737e3970e84f93e6e4d38b334c983616d16c3cd5be10be702f1624beac06f503"}], 0x168}}], 0x2, 0x40081) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = memfd_create(&(0x7f0000000240)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x00\x00\x00\x00\xa9t\xa24>X@\rq@\xf2\xe9[\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x1c1?\x86\xac\xd4\f\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6\x8b\x1d*1\xe8\xb0\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\xdfe;\xc0w\xad\xef\xa3r\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s3\xd7s\xef\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\x9d\xd3[i\x1b|{4)\xd8\xa2\xb8\x8f\xa2\x84_k\xe5\xf0\x05a2)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x1a5\x8c\xa6\xfbq\xa9\x87\x9f\xe1\xfa\xb5\x92\xb1\x00\x00\x00\x00\xd6\xce\xab\x1d%\xb0\xaa\xed\x10\xe9Z\"\x7f\xb2\xde\x00\x00\x00\x00\x00y\xd8\xdf\xc8R\x8b0Bs\x95N\xfa\x02\xe9\xf6\xa20\f1L\v\xdf8W{P\xab\x82\x84\xf0w\x9c\t\xf8\x85\x98S)M*\x88\xf8\xbaC\xa2\xf8\xc3\xe0\xb2)\xf8\x9da%\xd7\x8c\x03\xa9\xb6\x15\x8c\xdd\xaf\xeb\xfa\x1bV\x1c\fJ\xe6n\x19\x94\xea\xb7\xcc\x12q\x06\xbab\xda\xfa\xf7\xe4\x85U:\x1e\xeaC\x9b\xa5\xbb:\xe8\x04\xd9\xb2|\x85\a\x93\xa1a\r\xf0R\x8f\xac\xbc]\xc6\x1a\x86RK\xb3\x95\xbaz\xb7I\a\xd6j,pI\xb07\xc4\x82G\xd2u\x8a\xfc\x10\xffs5\xfd\x99\xdc\x9e\xdf\x86\x11~0+\xa7\x11\x13\xbb5\xc8\x8aW\xfd{\xe1QN\xef\xce~k7\xd9\x02\xac#n\xc3\xdd\x9a\xdaeJ7\x9f5\xae4\x9aoJ\xdcZf\xd4\x7f\x01}\'\x1f\x8e\xee_Q\xb4\xad@\x1a(>\x88\xd2F\x14r\x8c\x1aq@n6~1WP\xc8\xb5\x82\x02*\xcf\x95I\xc01\"\x8c_\x8d\xcb-X\x1f:bOmgTC\xe16\xef\xed\x87\xe42\b\xe5)\x99\x1dt\x17\x8d\xdc\xc2\aL\xb9\x90\xdc~\xf4\x12eXR\x89\x14E\x06\xeb<\x1b-\x955\xb4U\xceN\xf4\xb4l\xd5\xd0\xbfc\xa0\xb4{\xa9\\JL@tW\xa8\xf5\x8b\x9a\x9cF\xf5\xe0\xf4\xeeR#\x16r\x80\x91]c\x99\xd0o\x81b.\x82\xcf4\x01j\xe8\xaf[\xc1\b\xc5@n\x8a(qC\x16\x9e\xf8\x11l\xdbLM\xf9\xb7\xd1\xd5\xa1^\xcb=X\xe56\xc4FW\x0f\xe3\xe0\xa0\xb5JBE\xb5F(\t\xd8\x87\xf7\x92id\x8b\xcf\x846Z\x00\x80\x94\x999\xc2\xc7_\xb0\x02\xcb\xa2k\nB\x8a\'s95\x93Z\xf0\xf1\x9d\n\xf1$N\x03\f\x04Z\xfeX6\xf1\xe0\x95\x80(AV\x91\xd8\xa3\xc4?\xebhh|\xe0\xad2#\xcdF\xd8\x89akF\x05\xb5r6Ueh\x03\x82\x91@\xba\x84\xf5\x84\xaa\x1fZ\x11\n\xb9Y\xba;\xf27\xb9\xd3e1\xe5\xf9\xb3\xeb\x82V\x12\xebO\x02\x81\xd0\xfc1\xf5\x9c|\xfc\x1e_\x00\xa7\x89\x9e\xbe@\xcd\a\x82\xa8`\xa4e\xb7\xb8d\xb45>\xd5o\x1a[d\x04t\xb9\xc2Q T]j~\xa5\x12Lo\xfbP\x1fH*\xe5\a|\x1c/\xc3\x84\x01.F6\xba+\x90/\xc5\xc7\x95Tu\xacH\xbd\xb8\xe9\x04\xe6\xaf\xe7\xa6\x10\xb6\xde', 0x7) fcntl$addseals(r10, 0x409, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r10, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x48}, 0x1, 0x0, 0x0, 0x2004}, 0x24008800) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 0s ago: executing program 6 (id=1841): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0x10004480) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}]}, 0x38}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100488c, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T9922] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.285149][ T9922] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.408315][ T9936] SELinux: policydb version 719905620 does not match my version range 15-34 [ 141.411236][ T9936] SELinux: failed to load policy [ 141.416492][ T9936] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 141.448324][ T9940] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 141.460151][ T9946] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 141.803043][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 141.803504][ T5951] Bluetooth: hci4: command 0x1003 tx timeout [ 141.819757][ T5951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.836424][ T5951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.840385][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.846836][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.851362][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.901347][ T9969] netlink: 'syz.4.1090': attribute type 2 has an invalid length. [ 141.996972][ T9987] virtio-fs: tag not found [ 141.999052][ T9987] virtio-fs: tag not found [ 142.031401][ T9960] chnl_net:caif_netlink_parms(): no params data found [ 142.100553][ T9960] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.103884][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.106133][ T9960] bridge_slave_0: entered allmulticast mode [ 142.108680][ T9960] bridge_slave_0: entered promiscuous mode [ 142.113329][ T9960] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.115701][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.117923][ T9960] bridge_slave_1: entered allmulticast mode [ 142.120865][ T9960] bridge_slave_1: entered promiscuous mode [ 142.179632][ T9960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.184912][ T9960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.193110][ T60] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 142.195573][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88801269d000: rx timeout, send abort [ 142.225670][ T9960] team0: Port device team_slave_0 added [ 142.229016][ T9960] team0: Port device team_slave_1 added [ 142.258125][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.260315][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.269146][ T9960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.273578][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.276280][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.284466][ T9960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.322492][ T9960] hsr_slave_0: entered promiscuous mode [ 142.325226][ T9960] hsr_slave_1: entered promiscuous mode [ 142.327279][ T9960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.330600][ T9960] Cannot create hsr debugfs directory [ 142.352948][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 142.358881][ T60] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.362153][ T60] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 142.366038][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 142.369516][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.375407][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 142.378929][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.381586][ T60] usb 7-1: Product: syz [ 142.383501][ T60] usb 7-1: Manufacturer: syz [ 142.384984][ T60] usb 7-1: SerialNumber: syz [ 142.387855][ T60] usb 7-1: config 0 descriptor?? [ 142.440103][T10013] IPv6: sit1: Disabled Multicast RS [ 142.444176][ T60] rc_core: IR keymap rc-xbox-dvd not found [ 142.446038][ T60] Registered IR keymap rc-empty [ 142.452344][ T60] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 142.457808][ T60] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 142.537137][T10018] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 142.544832][T10018] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 142.592983][ T9979] __nla_validate_parse: 16 callbacks suppressed [ 142.592995][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1092'. [ 142.795635][ T6095] bridge_slave_1: left allmulticast mode [ 142.797496][ T6095] bridge_slave_1: left promiscuous mode [ 142.799364][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.803835][ T6095] bridge_slave_0: left allmulticast mode [ 142.805629][ T6095] bridge_slave_0: left promiscuous mode [ 142.807495][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.043468][ T6095] team0: Port device bond0 removed [ 143.046956][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.050394][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.054286][ T6095] bond0 (unregistering): Released all slaves [ 143.157890][ T6095] tipc: Disabling bearer [ 143.160497][ T6095] tipc: Left network mode [ 143.411560][ T6095] hsr_slave_0: left promiscuous mode [ 143.416464][ T6095] hsr_slave_1: left promiscuous mode [ 143.419099][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.421747][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.475563][T10045] nfs4: Bad value for 'source' [ 143.564237][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 143.564249][ T40] audit: type=1400 audit(2000000318.569:829): avc: denied { write } for pid=10051 comm="syz.4.1113" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.605389][T10057] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 143.717972][ T40] audit: type=1400 audit(2000000318.719:830): avc: denied { shutdown } for pid=10058 comm="syz.4.1116" laddr=::ac14:14aa lport=35364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.725485][ T40] audit: type=1400 audit(2000000318.719:831): avc: denied { read } for pid=10058 comm="syz.4.1116" laddr=::ac14:14aa lport=35364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.732446][ T40] audit: type=1400 audit(2000000318.729:832): avc: denied { ioctl } for pid=10058 comm="syz.4.1116" path="socket:[34897]" dev="sockfs" ino=34897 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.764033][ T40] audit: type=1326 audit(2000000318.769:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10061 comm="syz.4.1117" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34a798e929 code=0x0 [ 143.817710][ T40] audit: type=1400 audit(2000000318.819:834): avc: denied { mounton } for pid=10061 comm="syz.4.1117" path="/61/file0/file0" dev="9p" ino=35913828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.884521][ T5299] Bluetooth: hci2: command tx timeout [ 143.941922][ T40] audit: type=1400 audit(2000000318.939:835): avc: denied { bind } for pid=10066 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.948051][ T40] audit: type=1400 audit(2000000318.949:836): avc: denied { remount } for pid=10066 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 144.111088][T10073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.126468][ T6095] team0 (unregistering): Port device team_slave_1 removed [ 144.212245][ T6095] team0 (unregistering): Port device team_slave_0 removed [ 144.309885][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'. [ 144.738441][T10056] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1115'. [ 144.769969][ T40] audit: type=1400 audit(2000000319.769:837): avc: denied { create } for pid=10086 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.777141][ T40] audit: type=1400 audit(2000000319.769:838): avc: denied { accept } for pid=10086 comm="syz.0.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.788267][ T9960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.798575][ T9960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 144.805297][ T9960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 144.810203][ T9960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 144.854748][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.866421][ T9960] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.871133][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.873477][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.879005][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.881386][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.914507][T10102] netlink: 'syz.4.1125': attribute type 25 has an invalid length. [ 145.005632][ T9960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.026805][ T9960] veth0_vlan: entered promiscuous mode [ 145.031323][ T9960] veth1_vlan: entered promiscuous mode [ 145.046514][ T9960] veth0_macvtap: entered promiscuous mode [ 145.050294][ T9960] veth1_macvtap: entered promiscuous mode [ 145.058964][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.064322][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.071294][ T9960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.074334][ T9960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.077062][ T9960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.079741][ T9960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.083239][ T1456] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 145.136849][ T6111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.139323][ T6111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.168554][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.171337][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.234114][ T1456] usb 5-1: Invalid ep0 maxpacket: 64 [ 145.250156][T10123] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1130'. [ 145.413467][ T1456] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 145.574872][ T1456] usb 5-1: Invalid ep0 maxpacket: 64 [ 145.577931][ T1456] usb usb5-port1: attempt power cycle [ 145.723609][ T6113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.822710][ T6113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.888879][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.893678][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.899931][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.911252][ T6113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.913850][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.919553][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.933166][ T1456] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 145.953262][ T5299] Bluetooth: hci2: command tx timeout [ 145.957354][ T1456] usb 5-1: Invalid ep0 maxpacket: 64 [ 146.010389][ T6113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.021252][T10149] chnl_net:caif_netlink_parms(): no params data found [ 146.065990][T10161] loop5: detected capacity change from 0 to 524287999 [ 146.093036][ T1456] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 146.104340][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.106627][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.108985][T10149] bridge_slave_0: entered allmulticast mode [ 146.111580][T10149] bridge_slave_0: entered promiscuous mode [ 146.114756][ T1456] usb 5-1: Invalid ep0 maxpacket: 64 [ 146.116976][ T1456] usb usb5-port1: unable to enumerate USB device [ 146.117081][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.121902][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.124510][T10149] bridge_slave_1: entered allmulticast mode [ 146.127711][T10149] bridge_slave_1: entered promiscuous mode [ 146.175171][T10161] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1141'. [ 146.180622][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.186844][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.243467][T10149] team0: Port device team_slave_0 added [ 146.262394][T10149] team0: Port device team_slave_1 added [ 146.265272][ T6113] bridge_slave_1: left allmulticast mode [ 146.267121][ T6113] bridge_slave_1: left promiscuous mode [ 146.268979][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.273420][ T6113] bridge_slave_0: left allmulticast mode [ 146.275637][ T6113] bridge_slave_0: left promiscuous mode [ 146.277942][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.546707][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.550820][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.554847][ T6113] bond0 (unregistering): Released all slaves [ 146.593133][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.595398][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.603766][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.641962][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.644564][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.653080][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.713443][T10149] hsr_slave_0: entered promiscuous mode [ 146.715720][T10149] hsr_slave_1: entered promiscuous mode [ 146.717829][T10149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.720186][T10149] Cannot create hsr debugfs directory [ 146.912713][T10149] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.938110][T10149] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.947661][T10149] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.976232][ T6113] hsr_slave_0: left promiscuous mode [ 146.978630][ T6113] hsr_slave_1: left promiscuous mode [ 146.980828][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.985056][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.988951][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.992169][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.038807][ T6113] veth1_macvtap: left promiscuous mode [ 147.041284][ T6113] veth0_macvtap: left promiscuous mode [ 147.043989][ T6113] veth1_vlan: left promiscuous mode [ 147.046334][ T6113] veth0_vlan: left promiscuous mode [ 147.730620][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 147.798613][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 147.852080][T10176] netlink: 'syz.0.1144': attribute type 23 has an invalid length. [ 147.953988][ T5299] Bluetooth: hci0: command tx timeout [ 148.042916][ T5299] Bluetooth: hci2: command tx timeout [ 148.312958][T10149] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.380604][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.399995][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.410181][ T6092] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.414490][ T6092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.420275][ T6092] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.423154][ T6092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.501236][T10207] loop5: detected capacity change from 0 to 524287999 [ 148.554713][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.706246][T10149] veth0_vlan: entered promiscuous mode [ 148.714541][T10149] veth1_vlan: entered promiscuous mode [ 148.732366][T10149] veth0_macvtap: entered promiscuous mode [ 148.736123][T10149] veth1_macvtap: entered promiscuous mode [ 148.744005][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.750403][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.755305][T10149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.757964][T10149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.760659][T10149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.764567][T10149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.767630][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 148.767640][ T40] audit: type=1400 audit(2000000323.769:862): avc: denied { create } for pid=10225 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 148.776110][ T40] audit: type=1400 audit(2000000323.769:863): avc: denied { listen } for pid=10225 comm="syz.0.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 148.864425][T10226] block nbd0: server does not support multiple connections per device. [ 148.868106][T10226] block nbd0: shutting down sockets [ 148.889972][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.892481][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.906754][ T40] audit: type=1400 audit(2000000323.909:864): avc: denied { write } for pid=10228 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 148.907001][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.908784][T10229] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.918027][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.963040][ T40] audit: type=1400 audit(2000000323.959:865): avc: denied { ioctl } for pid=10232 comm="syz.5.1139" path="socket:[35348]" dev="sockfs" ino=35348 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.069986][ T40] audit: type=1400 audit(2000000324.069:866): avc: denied { getopt } for pid=10236 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.078501][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 149.123402][T10237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1160'. [ 149.145927][ T40] audit: type=1400 audit(2000000324.149:867): avc: denied { read write } for pid=10238 comm="syz.5.1158" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.148098][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 149.165943][T10239] program syz.5.1158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.165953][ T40] audit: type=1400 audit(2000000324.169:868): avc: denied { ioctl } for pid=10238 comm="syz.5.1158" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.193881][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 149.200843][T10241] macsec0: entered promiscuous mode [ 149.286145][T10245] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 149.288740][T10245] [U] J"—e:ÀÆ" [ 149.369043][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 149.372631][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 149.376244][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 149.379734][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 149.384799][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 149.388216][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 149.428207][ T40] audit: type=1400 audit(2000000324.429:869): avc: denied { name_connect } for pid=10258 comm="syz.3.1167" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 149.622962][ T72] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.635534][ T40] audit: type=1400 audit(2000000324.639:870): avc: denied { getopt } for pid=10271 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.772925][ T72] usb 5-1: Using ep0 maxpacket: 16 [ 149.776922][ T72] usb 5-1: config 0 has no interfaces? [ 149.779262][ T72] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 149.783367][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.788570][ T72] usb 5-1: config 0 descriptor?? [ 149.942247][T10279] loop5: detected capacity change from 0 to 524287999 [ 149.994444][ T4370] usb 5-1: USB disconnect, device number 13 [ 150.033178][ T5299] Bluetooth: hci0: command tx timeout [ 150.113000][ T5299] Bluetooth: hci2: command tx timeout [ 150.344183][ T40] audit: type=1400 audit(2000000325.349:871): avc: denied { read write } for pid=10286 comm="syz.5.1175" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 150.452098][T10287] openvswitch: netlink: Flow actions attr not present in new flow. [ 151.537332][T10328] xt_hashlimit: size too large, truncated to 1048576 [ 151.849318][T10350] futex_wake_op: syz.5.1195 tries to shift op by 32; fix this program [ 151.864759][T10350] exFAT-fs (nullb0): invalid boot record signature [ 151.866850][T10350] exFAT-fs (nullb0): failed to read boot sector [ 151.868807][T10350] exFAT-fs (nullb0): failed to recognize exfat type [ 151.880293][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.884847][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.887387][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.889913][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.892430][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.895340][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.897882][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.900368][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.903144][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 151.905657][T10352] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 152.112983][ T5299] Bluetooth: hci0: command tx timeout [ 152.192782][T10386] bridge5: port 1(veth0_to_bond) entered blocking state [ 152.195491][T10386] bridge5: port 1(veth0_to_bond) entered disabled state [ 152.197712][T10386] veth0_to_bond: entered allmulticast mode [ 152.200232][T10386] veth0_to_bond: entered promiscuous mode [ 152.211611][T10387] vlan2: entered allmulticast mode [ 152.214490][T10387] veth1: entered allmulticast mode [ 152.216966][T10387] bridge5: port 2(vlan2) entered blocking state [ 152.219511][T10387] bridge5: port 2(vlan2) entered disabled state [ 152.224717][T10387] vlan2: entered promiscuous mode [ 152.226775][T10387] veth1: entered promiscuous mode [ 152.777254][T10413] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1642504120 (13140032960 ns) > initial count (744665392 ns). Using initial count to start timer. [ 152.788135][T10413] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 153.066672][T10422] ip6t_srh: unknown srh match flags 4000 [ 153.218792][T10424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.395192][T10441] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 153.694003][T10450] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 154.027074][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 154.027144][ T40] audit: type=1400 audit(2000000329.029:880): avc: denied { create } for pid=10480 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 154.066960][ T40] audit: type=1400 audit(2000000329.069:881): avc: denied { read } for pid=10482 comm="syz.0.1236" path="socket:[36402]" dev="sockfs" ino=36402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.072400][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.173843][T10489] vlan3: entered promiscuous mode [ 154.175920][T10489] bridge0: entered promiscuous mode [ 154.193178][ T5299] Bluetooth: hci0: command tx timeout [ 154.228020][ T40] audit: type=1326 audit(2000000329.229:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.237255][ T40] audit: type=1326 audit(2000000329.229:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.248898][ T40] audit: type=1326 audit(2000000329.229:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.259852][ T40] audit: type=1326 audit(2000000329.229:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.267641][ T40] audit: type=1326 audit(2000000329.229:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.272236][T10495] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 154.275399][ T40] audit: type=1326 audit(2000000329.229:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.275433][ T40] audit: type=1326 audit(2000000329.229:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.275461][ T40] audit: type=1326 audit(2000000329.229:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10492 comm="syz.0.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe898d8e929 code=0x7ffc0000 [ 154.358091][T10497] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 154.396499][T10499] __nla_validate_parse: 35 callbacks suppressed [ 154.396511][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 155.127938][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 155.307251][T10530] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1250'. [ 155.378820][T10535] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1251'. [ 156.565202][T10577] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1262'. [ 156.568155][T10577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1262'. [ 156.640955][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1263'. [ 156.645602][T10583] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.669789][T10585] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1265'. [ 156.840357][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1261'. [ 157.005314][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 157.025535][T10611] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.028354][T10611] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.031067][T10611] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.034663][T10611] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.044075][T10611] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.046940][T10611] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.049763][T10611] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.052550][T10611] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.142161][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.146052][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.150042][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.155178][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.158481][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.330834][T10625] lo speed is unknown, defaulting to 1000 [ 157.337358][T10625] lo speed is unknown, defaulting to 1000 [ 157.339870][T10625] lo speed is unknown, defaulting to 1000 [ 157.353550][T10623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.365719][T10617] chnl_net:caif_netlink_parms(): no params data found [ 157.444258][T10625] infiniband syz0: set active [ 157.445817][T10625] infiniband syz0: added lo [ 157.449137][ T72] lo speed is unknown, defaulting to 1000 [ 157.449622][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.453860][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.456149][T10617] bridge_slave_0: entered allmulticast mode [ 157.458734][T10617] bridge_slave_0: entered promiscuous mode [ 157.461958][T10617] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.464388][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.466712][T10617] bridge_slave_1: entered allmulticast mode [ 157.471428][T10617] bridge_slave_1: entered promiscuous mode [ 157.472125][T10625] RDS/IB: syz0: added [ 157.475407][T10625] smc: adding ib device syz0 with port count 1 [ 157.477946][T10625] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 157.490405][ T72] lo speed is unknown, defaulting to 1000 [ 157.515567][T10625] lo speed is unknown, defaulting to 1000 [ 157.518382][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.525049][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.563805][T10617] team0: Port device team_slave_0 added [ 157.568759][T10617] team0: Port device team_slave_1 added [ 157.623161][T10625] lo speed is unknown, defaulting to 1000 [ 157.623506][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.627344][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.635499][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.640970][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.644876][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.653958][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.716543][T10617] hsr_slave_0: entered promiscuous mode [ 157.719719][T10617] hsr_slave_1: entered promiscuous mode [ 157.722564][T10617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.725734][T10617] Cannot create hsr debugfs directory [ 157.758482][T10625] lo speed is unknown, defaulting to 1000 [ 157.868123][T10625] lo speed is unknown, defaulting to 1000 [ 157.885718][T10617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 157.890657][T10617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 157.895203][T10617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.899078][T10617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.918413][T10617] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.920635][T10617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.922947][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.926143][T10617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.958923][T10625] lo speed is unknown, defaulting to 1000 [ 157.961172][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.970052][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.975871][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.998463][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.013902][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.016398][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.027966][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.030250][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.113703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.117218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.120653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.124095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.127552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.130979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.134493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.137938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.163429][T10647] program syz.5.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.188537][T10650] fuse: Bad value for 'user_id' [ 158.190374][T10650] fuse: Bad value for 'user_id' [ 158.194600][T10651] tmpfs: Unknown parameter '/dev/fuse' [ 158.199089][T10650] fuse: Bad value for 'user_id' [ 158.200677][T10650] fuse: Bad value for 'user_id' [ 158.232507][T10655] program syz.5.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.536048][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.781057][T10617] veth0_vlan: entered promiscuous mode [ 158.792401][T10617] veth1_vlan: entered promiscuous mode [ 158.809851][T10617] veth0_macvtap: entered promiscuous mode [ 158.814636][T10617] veth1_macvtap: entered promiscuous mode [ 158.824078][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.831381][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.836448][T10617] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.839190][T10617] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.841983][T10617] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.845420][T10617] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.929816][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.932380][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.953624][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.956228][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.233612][ T5299] Bluetooth: hci4: command tx timeout [ 159.244988][T10688] validate_nla: 88 callbacks suppressed [ 159.245003][T10688] netlink: 'syz.6.1289': attribute type 10 has an invalid length. [ 159.265341][T10688] team0: Port device geneve0 added [ 159.726991][T10695] netlink: 'syz.5.1292': attribute type 10 has an invalid length. [ 159.783248][T10695] lo: entered promiscuous mode [ 159.789991][T10695] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.795026][ T6003] lo speed is unknown, defaulting to 1000 [ 159.797332][ T6003] syz0: Port: 1 Link DOWN [ 159.799533][ T6003] lo speed is unknown, defaulting to 1000 [ 159.895800][T10700] Bluetooth: MGMT ver 1.23 [ 159.903272][ T40] kauditd_printk_skb: 1025 callbacks suppressed [ 159.903286][ T40] audit: type=1400 audit(2000000334.899:1915): avc: denied { ioctl } for pid=10699 comm="syz.0.1294" path="socket:[38664]" dev="sockfs" ino=38664 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 159.975218][T10697] kvm: pic: single mode not supported [ 159.978250][T10697] kvm: pic: single mode not supported [ 159.980624][T10697] kvm: pic: level sensitive irq not supported [ 159.983899][T10697] kvm: pic: single mode not supported [ 160.047119][ T40] audit: type=1400 audit(2000000335.049:1916): avc: denied { setopt } for pid=10696 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.883022][ T6003] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 161.033023][ T6003] usb 11-1: Using ep0 maxpacket: 8 [ 161.036210][ T6003] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.039606][ T6003] usb 11-1: config 179 has no interface number 0 [ 161.042232][ T6003] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 161.047181][ T6003] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 161.051801][ T6003] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.056939][ T6003] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.061061][ T6003] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.066789][ T6003] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 161.070539][ T6003] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.080634][T10707] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 161.099446][ T6003] xpad 11-1:179.65: probe with driver xpad failed with error -5 [ 161.296319][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.299122][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.302014][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.305401][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.308308][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.311083][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.317898][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.320637][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.323030][ T5299] Bluetooth: hci4: command tx timeout [ 161.325779][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.328535][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.380018][ T6002] usb 11-1: USB disconnect, device number 2 [ 161.652900][ C0] net_ratelimit: 40513 callbacks suppressed [ 161.652913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.658704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.662700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.667424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.671253][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.675184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.678992][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.682867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.687013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.690825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.828899][T10746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10746 comm=syz.0.1305 [ 161.907189][ T40] audit: type=1400 audit(2000000336.909:1917): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 161.942906][T10749] BIDI support in bsg has been removed. [ 161.951413][ T40] audit: type=1400 audit(2000000336.949:1918): avc: denied { setopt } for pid=10748 comm="syz.0.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 162.197417][T10775] netlink: 'syz.6.1312': attribute type 1 has an invalid length. [ 162.375898][T10787] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 162.726416][T10789] __nla_validate_parse: 5 callbacks suppressed [ 162.726429][T10789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1317'. [ 163.008045][ T40] audit: type=1400 audit(2000000338.009:1919): avc: denied { mount } for pid=10800 comm="syz.3.1320" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 163.046814][ T40] audit: type=1400 audit(2000000338.049:1920): avc: denied { watch } for pid=10802 comm="syz.3.1321" path="/43/file0" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 163.054218][ T40] audit: type=1400 audit(2000000338.049:1921): avc: denied { watch_sb watch_reads } for pid=10802 comm="syz.3.1321" path="/43/file0" dev="tmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 163.057966][T10803] hpfs: Bad magic ... probably not HPFS [ 163.066864][T10805] hpfs: Bad magic ... probably not HPFS [ 163.383159][T10818] loop5: detected capacity change from 0 to 524287999 [ 163.402945][ T5299] Bluetooth: hci4: command tx timeout [ 163.452621][T10818] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1325'. [ 164.399054][ T40] audit: type=1400 audit(2000000339.399:1922): avc: denied { map } for pid=10824 comm="syz.5.1328" path="socket:[41272]" dev="sockfs" ino=41272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 164.476435][T10830] QAT: failed to copy from user. [ 164.640112][T10831] kvm: kvm [10829]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 164.648671][T10831] kvm: kvm [10829]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x80 [ 164.662400][T10831] kvm: kvm [10829]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 164.667077][T10831] kvm: kvm [10829]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 164.901936][T10841] netdevsim netdevsim0: Direct firmware load for . [ 164.901936][T10841] failed with error -2 [ 164.906841][T10841] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 164.906841][T10841] [ 164.912327][ T40] audit: type=1400 audit(2000000339.909:1923): avc: denied { firmware_load } for pid=10839 comm="syz.0.1331" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 165.075123][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.086924][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.156871][ C3] vcan0: j1939_tp_rxtimer: 0xffff888054a85400: rx timeout, send abort [ 165.160014][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888054a85400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.191334][T10846] netlink: 'syz.3.1335': attribute type 3 has an invalid length. [ 165.221009][T10846] tmpfs: Bad value for 'huge' [ 165.222801][T10846] tmpfs: Bad value for 'huge' [ 165.225183][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.229640][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.232577][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.237141][T10846] tmpfs: Bad value for 'huge' [ 165.238773][T10846] tmpfs: Bad value for 'huge' [ 165.240372][T10846] tmpfs: Bad value for 'huge' [ 165.241996][T10846] tmpfs: Bad value for 'huge' [ 165.244341][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.247224][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.250092][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.253733][T10846] tmpfs: Bad value for 'huge' [ 165.255462][T10846] tmpfs: Bad value for 'huge' [ 165.257280][T10846] tmpfs: Bad value for 'huge' [ 165.258886][T10846] tmpfs: Bad value for 'huge' [ 165.260476][T10846] tmpfs: Bad value for 'huge' [ 165.262610][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.265708][T10846] tmpfs: Bad value for 'huge' [ 165.267319][T10846] tmpfs: Bad value for 'huge' [ 165.268901][T10846] tmpfs: Bad value for 'huge' [ 165.270425][T10846] tmpfs: Bad value for 'huge' [ 165.271985][T10846] tmpfs: Bad value for 'huge' [ 165.274979][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 165.279816][T10846] tmpfs: Bad value for 'huge' [ 165.281497][T10846] tmpfs: Bad value for 'huge' [ 165.283385][T10846] tmpfs: Bad value for 'huge' [ 165.285032][T10846] tmpfs: Bad value for 'huge' [ 165.286644][T10846] tmpfs: Bad value for 'huge' [ 165.288232][T10846] tmpfs: Bad value for 'huge' [ 165.289843][T10846] tmpfs: Bad value for 'huge' [ 165.291502][T10846] tmpfs: Bad value for 'huge' [ 165.295335][T10846] tmpfs: Bad value for 'huge' [ 165.297155][T10846] tmpfs: Bad value for 'huge' [ 165.298798][T10846] tmpfs: Bad value for 'huge' [ 165.300353][T10846] tmpfs: Bad value for 'huge' [ 165.307005][T10846] tmpfs: Bad value for 'huge' [ 165.308616][T10846] tmpfs: Bad value for 'huge' [ 165.310220][T10846] tmpfs: Bad value for 'huge' [ 165.311815][T10846] tmpfs: Bad value for 'huge' [ 165.313747][T10846] tmpfs: Bad value for 'huge' [ 165.369976][T10849] bridge0: port 3(vlan2) entered blocking state [ 165.372000][T10849] bridge0: port 3(vlan2) entered disabled state [ 165.374203][T10849] vlan2: entered allmulticast mode [ 165.375831][T10849] bond0: entered allmulticast mode [ 165.377440][T10849] bond_slave_0: entered allmulticast mode [ 165.379207][T10849] bond_slave_1: entered allmulticast mode [ 165.382022][T10849] vlan2: entered promiscuous mode [ 165.383783][T10849] bond0: entered promiscuous mode [ 165.385361][T10849] bond_slave_0: entered promiscuous mode [ 165.387206][T10849] bond_slave_1: entered promiscuous mode [ 165.506036][ T40] audit: type=1400 audit(2000000340.509:1924): avc: denied { map } for pid=10857 comm="syz.3.1339" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.514818][ T40] audit: type=1400 audit(2000000340.509:1925): avc: denied { execute } for pid=10857 comm="syz.3.1339" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 165.542031][ T40] audit: type=1400 audit(2000000340.539:1926): avc: denied { relabelfrom } for pid=10857 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 165.548490][ T40] audit: type=1400 audit(2000000340.539:1927): avc: denied { relabelto } for pid=10857 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 165.752253][ T40] audit: type=1400 audit(2000000340.749:1928): avc: denied { connect } for pid=10865 comm="syz.0.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.128525][ T40] audit: type=1400 audit(2000000341.129:1929): avc: denied { create } for pid=10884 comm="syz.5.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.134639][ T40] audit: type=1400 audit(2000000341.129:1930): avc: denied { ioctl } for pid=10884 comm="syz.5.1347" path="socket:[41431]" dev="sockfs" ino=41431 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 166.162950][ T1456] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 166.266449][ T40] audit: type=1400 audit(2000000341.269:1931): avc: denied { execute } for pid=10892 comm="syz.0.1349" path="/dev/dsp" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 166.288413][ T40] audit: type=1400 audit(2000000341.289:1932): avc: denied { append } for pid=10894 comm="syz.5.1350" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 166.314173][ T1456] usb 11-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.317536][ T1456] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.321519][ T1456] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.326562][ T1456] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 166.330283][ T1456] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.336679][ T1456] usb 11-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 166.339536][ T1456] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.349386][ T1456] usb 11-1: Product: syz [ 166.351095][ T1456] usb 11-1: Manufacturer: syz [ 166.352935][ T1456] usb 11-1: SerialNumber: syz [ 166.356186][ T1456] usb 11-1: config 0 descriptor?? [ 166.359617][T10883] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 166.365575][ T1456] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input20 [ 166.662926][ C0] net_ratelimit: 60325 callbacks suppressed [ 166.662938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.668612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.672219][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.675998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.679777][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.683533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.687299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.690946][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.694677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.698335][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.719266][ T6002] usb 11-1: USB disconnect, device number 3 [ 166.870729][ T40] audit: type=1400 audit(2000000341.869:1933): avc: denied { ioctl } for pid=10909 comm="syz.3.1354" path="/dev/ptyqa" dev="devtmpfs" ino=137 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 166.881881][T10910] kAFS: Can only specify source 'none' with -o dyn [ 167.277220][T10920] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 167.277703][T10919] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 167.280085][T10920] overlayfs: missing 'lowerdir' [ 167.311777][T10919] overlayfs: missing 'lowerdir' [ 167.325870][T10923] xt_hashlimit: overflow, rate too high: 0 [ 167.391199][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.706551][T10960] gretap0: entered promiscuous mode [ 167.713112][T10960] gretap0: left promiscuous mode [ 167.830166][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.832690][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.837232][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.839695][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.842133][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.845079][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.847534][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.849931][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.852335][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.855416][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.857959][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.860373][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.863306][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.865743][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.868398][ T4370] hid-generic 00A0:0006:0003.0006: unknown main item tag 0x0 [ 167.878893][ T4370] hid-generic 00A0:0006:0003.0006: hidraw1: HID v0.05 Device [syz1] on syz0 [ 167.879889][T10976] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 167.885284][T10976] qnx6: wrong signature (magic) in superblock #1. [ 167.887167][T10976] qnx6: unable to read the first superblock [ 167.898249][T10976] __nla_validate_parse: 32 callbacks suppressed [ 167.898261][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1374'. [ 167.911276][T10976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1374'. [ 167.914249][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1374'. [ 167.916847][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1374'. [ 168.038941][T10989] SELinux: failed to load policy [ 168.146716][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1380'. [ 168.835466][T11009] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=11009 comm=syz.5.1383 [ 169.043736][ T5951] Bluetooth: hci4: unknown advertising packet type: 0xf5 [ 169.043771][ T5951] Bluetooth: hci4: unknown advertising packet type: 0x6d [ 169.046222][ T5951] Bluetooth: hci4: unknown advertising packet type: 0xe7 [ 169.122454][ T6002] hid (null): invalid report_count -1468760555 [ 169.127097][T11024] SELinux: policydb version -142928124 does not match my version range 15-34 [ 169.131314][T11024] SELinux: failed to load policy [ 169.135693][ T6002] hid (null): unknown global tag 0xd [ 169.146908][ T6002] hid-generic 04A3:0001:7FFFFFFF.0007: invalid report_count -1468760555 [ 169.149613][ T6002] hid-generic 04A3:0001:7FFFFFFF.0007: item 0 4 1 9 parsing failed [ 169.152516][ T6002] hid-generic 04A3:0001:7FFFFFFF.0007: probe with driver hid-generic failed with error -22 [ 169.162981][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 169.231220][T11030] netlink: 'syz.6.1391': attribute type 2 has an invalid length. [ 169.238696][T11030] netlink: 'syz.6.1391': attribute type 8 has an invalid length. [ 169.241241][T11030] netlink: 1148 bytes leftover after parsing attributes in process `syz.6.1391'. [ 169.252838][ C0] sched: DL replenish lagged too much [ 169.316375][ T24] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 169.319507][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.322769][ T24] usb 10-1: Product: syz [ 169.324990][ T24] usb 10-1: Manufacturer: syz [ 169.326504][ T24] usb 10-1: SerialNumber: syz [ 169.329269][ T24] usb 10-1: config 0 descriptor?? [ 169.412949][ T4370] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 169.537000][T11016] netlink: 'syz.5.1385': attribute type 13 has an invalid length. [ 169.572966][ T4370] usb 5-1: Invalid ep0 maxpacket: 16 [ 169.609891][ T24] usb 10-1: USB disconnect, device number 2 [ 169.703077][ T4370] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 169.862950][ T4370] usb 5-1: Invalid ep0 maxpacket: 16 [ 169.864955][ T4370] usb usb5-port1: attempt power cycle [ 170.222954][ T4370] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 170.244449][ T4370] usb 5-1: Invalid ep0 maxpacket: 16 [ 170.250486][T11043] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1394'. [ 170.255469][T11044] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1394'. [ 170.382977][ T4370] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 170.404559][ T4370] usb 5-1: Invalid ep0 maxpacket: 16 [ 170.409492][ T4370] usb usb5-port1: unable to enumerate USB device [ 170.433010][ T5944] Bluetooth: hci3: command 0x0406 tx timeout [ 170.435533][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 170.589452][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1397'. [ 170.592301][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1397'. [ 170.635646][T11055] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.640172][T11053] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 170.678058][T11057] SELinux: policydb string length 2097416 does not match expected length 8 [ 170.681012][T11057] SELinux: failed to load policy [ 170.794510][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 170.794521][ T40] audit: type=1400 audit(2000000345.799:1949): avc: denied { shutdown } for pid=11068 comm="syz.5.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 170.980439][ T40] audit: type=1400 audit(2000000345.979:1950): avc: denied { append } for pid=11074 comm="syz.6.1404" name="v4l-subdev6" dev="devtmpfs" ino=971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 171.059288][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.341098][ T40] audit: type=1400 audit(2000000346.339:1951): avc: denied { append } for pid=11081 comm="syz.5.1406" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.616190][ T40] audit: type=1400 audit(2000000346.619:1952): avc: denied { bind } for pid=11087 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 171.622449][ T40] audit: type=1400 audit(2000000346.619:1953): avc: denied { mount } for pid=11087 comm="syz.3.1407" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 171.629675][ T40] audit: type=1400 audit(2000000346.619:1954): avc: denied { mounton } for pid=11087 comm="syz.3.1407" path="/63/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 171.638144][ T40] audit: type=1400 audit(2000000346.629:1955): avc: denied { unmount } for pid=9960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 171.672870][ C0] net_ratelimit: 60082 callbacks suppressed [ 171.672882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.678506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.682258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.686055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.689832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.693604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.697466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.701257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.705061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.708790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.737923][T11091] could not open pipe file descriptor [ 172.018596][T11097] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 172.245053][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.253144][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.255296][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.257381][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.259436][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.261589][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.264161][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.267296][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.269448][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.271690][T11109] rdma_rxe: rxe_newlink: failed to add lo [ 172.555220][ T40] audit: type=1400 audit(2000000347.559:1956): avc: denied { write } for pid=11119 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 173.182901][ T40] audit: type=1400 audit(2000000348.179:1957): avc: denied { connect } for pid=11138 comm="syz.5.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.893053][T11149] binder: 11148:11149 ioctl c0306201 200000000180 returned -22 [ 174.915668][T11149] __nla_validate_parse: 3 callbacks suppressed [ 174.915680][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1425'. [ 174.948569][ T40] audit: type=1400 audit(2000000349.949:1958): avc: denied { write } for pid=11152 comm="syz.6.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.987712][T11151] lo speed is unknown, defaulting to 1000 [ 175.419017][T11188] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1440'. [ 175.424382][T11189] netlink: 404 bytes leftover after parsing attributes in process `syz.5.1440'. [ 175.701613][T11206] netlink: 'syz.5.1445': attribute type 1 has an invalid length. [ 175.742661][T11206] netlink: 'syz.5.1445': attribute type 10 has an invalid length. [ 175.752952][T11206] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1445'. [ 175.757940][T11206] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 175.760447][T11206] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.780113][T11206] 9pnet_fd: Insufficient options for proto=fd [ 175.827611][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 175.827623][ T40] audit: type=1400 audit(2000000350.829:1967): avc: denied { accept } for pid=11212 comm="syz.3.1448" path="socket:[44082]" dev="sockfs" ino=44082 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.915859][ T40] audit: type=1400 audit(2000000350.919:1968): avc: denied { read } for pid=11212 comm="syz.3.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.946760][ T40] audit: type=1400 audit(2000000350.949:1969): avc: denied { setopt } for pid=11219 comm="syz.5.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.953964][ T40] audit: type=1400 audit(2000000350.949:1970): avc: denied { map } for pid=11219 comm="syz.5.1449" path="socket:[44092]" dev="sockfs" ino=44092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.972642][ T40] audit: type=1400 audit(2000000350.949:1971): avc: denied { read } for pid=11219 comm="syz.5.1449" path="socket:[44092]" dev="sockfs" ino=44092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.020603][T11225] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1451'. [ 176.070827][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1453'. [ 176.086083][T11228] syzkaller1: entered allmulticast mode [ 176.176309][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1454'. [ 176.357958][ T40] audit: type=1400 audit(2000000351.359:1972): avc: denied { connect } for pid=11241 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 176.476516][ T40] audit: type=1400 audit(2000000351.479:1973): avc: denied { write } for pid=11251 comm="syz.3.1460" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 176.482493][T11252] input: syz0 as /devices/virtual/input/input21 [ 176.557296][T11257] 9pnet_fd: Insufficient options for proto=fd [ 176.593254][ T60] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 176.682854][ C0] net_ratelimit: 52632 callbacks suppressed [ 176.682864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.688529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.692272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.696083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.699783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.703588][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.707390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.711179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.714930][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.718658][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.752908][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 176.756356][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.760227][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.763514][ T60] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 176.766417][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.778836][ T60] usb 5-1: config 0 descriptor?? [ 176.791515][T11270] kvm: kvm [11269]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000000 [ 176.794870][T11270] kvm: kvm [11269]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000000000 [ 176.924587][T11274] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1466'. [ 176.936782][T11274] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 177.045680][T11288] netlink: 'syz.3.1471': attribute type 7 has an invalid length. [ 177.048715][T11288] netlink: 'syz.3.1471': attribute type 8 has an invalid length. [ 177.065943][ T40] audit: type=1400 audit(2000000352.069:1974): avc: denied { sqpoll } for pid=11286 comm="syz.3.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 177.126727][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.130579][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.203459][ T60] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 177.505992][ T837] usb 5-1: USB disconnect, device number 18 [ 177.791582][T11314] program syz.3.1477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.902927][T11316] binder: 11315:11316 ioctl c00c620f 200000000540 returned -22 [ 178.193097][T11321] cgroup: fork rejected by pids controller in /syz6 [ 178.371902][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1485'. [ 178.623912][ T40] audit: type=1400 audit(2000000353.619:1975): avc: denied { create } for pid=11373 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 178.695610][T11378] netlink: 212364 bytes leftover after parsing attributes in process `syz.6.1487'. [ 178.836323][ T40] audit: type=1400 audit(2000000353.839:1976): avc: denied { create } for pid=11386 comm="syz.6.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 178.887057][T11391] ubi: mtd0 is already attached to ubi0 [ 178.902465][T11383] block device autoloading is deprecated and will be removed. [ 178.915138][T11383] syz.5.1489: attempt to access beyond end of device [ 178.915138][T11383] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 178.921778][ T24] hid-generic 0005:10CF:0009.0009: unknown main item tag 0x0 [ 178.936207][ T24] hid-generic 0005:10CF:0009.0009: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 179.386430][T11414] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 179.389939][T11414] SELinux: failed to load policy [ 180.156956][T11419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.193665][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 180.196434][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1502'. [ 180.348065][T11426] loop5: detected capacity change from 0 to 524287999 [ 181.692904][ C0] net_ratelimit: 98339 callbacks suppressed [ 181.692917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.692919][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.694972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.698685][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.702300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.706048][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.709678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.713376][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.716990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.720633][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.967397][T11426] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1504'. [ 182.027431][T11429] vivid-000: ================= START STATUS ================= [ 182.029903][T11429] vivid-000: RDS Tx I/O Mode: Controls [ 182.031874][T11429] vivid-000: RDS Program ID: 32904 [ 182.033760][T11429] vivid-000: RDS Program Type: 3 [ 182.035530][T11429] vivid-000: RDS PS Name: VIVID-TX [ 182.037198][T11429] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 182.040301][T11429] vivid-000: RDS Stereo: true [ 182.041743][T11429] vivid-000: RDS Artificial Head: false [ 182.045913][T11429] vivid-000: RDS Compressed: false [ 182.047734][T11429] vivid-000: RDS Dynamic PTY: false [ 182.049390][T11429] vivid-000: RDS Traffic Announcement: false [ 182.051232][T11429] vivid-000: RDS Traffic Program: true [ 182.054624][T11429] vivid-000: RDS Music: true [ 182.057103][T11429] vivid-000: ================== END STATUS ================== [ 182.060437][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 182.060446][ T40] audit: type=1400 audit(2000000357.059:1979): avc: denied { getopt } for pid=11428 comm="syz.0.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.179312][ T40] audit: type=1400 audit(2000000357.179:1980): avc: denied { write } for pid=11430 comm="syz.6.1506" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 182.187077][ T40] audit: type=1400 audit(2000000357.179:1981): avc: denied { remount } for pid=11430 comm="syz.6.1506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 182.253482][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 182.308427][ T40] audit: type=1400 audit(2000000357.309:1982): avc: denied { map } for pid=11450 comm="syz.0.1511" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 182.409677][T11464] loop5: detected capacity change from 0 to 524287999 [ 182.481189][T11469] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1516'. [ 182.629675][T11476] : entered promiscuous mode [ 182.643045][ T836] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 182.689054][ T40] audit: type=1400 audit(2000000357.689:1983): avc: denied { create } for pid=11475 comm="syz.0.1519" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 182.792919][ T836] usb 10-1: Using ep0 maxpacket: 32 [ 182.798974][ T836] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1023 [ 182.802273][ T836] usb 10-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.806362][ T836] usb 10-1: config 1 interface 0 has no altsetting 0 [ 182.810176][ T836] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.813167][ T836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.815740][ T836] usb 10-1: Product: Э [ 182.817144][ T836] usb 10-1: Manufacturer: 쀦㌛ꈑ癷å®î—œê¡³ì¯ìµ‰çˆ©é¯é®¡ã®žè·°ï„¡ê«¸â²±êš éœ¨á§›ï¹Šæ©â°•᱊꽉컊퉢é–譢Ꟁᦊ哂맪ሞ詼籧둅⤾캨â¶ï˜¬ì•´ï¥žé½¸ä¼£ê¤Ÿä“á´’è”†î§³ë¤‹ã¼“ã³½ç±¨ë”‹ç¡ˆâ¶æ îº§è˜æ ‹ä‰­ï«Žêž©É—鶀칹謌ꄭæªï†§æ¡ë•€î˜ºî¾Šæ±ƒè„€î¶¥ë˜³ç·Ÿîºšç¯¨ã¼”ä ¥ë´éº³è¶žå©¸èНæ±êƒ³é—Œî¢¶îŸ„æ—–ä¤æ¯ê²³ã쩎ç½ã„¬è¾—ã¿à­ˆç‘¿çªî³Ÿå® [ 182.835213][ T836] usb 10-1: SerialNumber: 虇 [ 182.840942][T11463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 182.843355][T11463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 183.110600][ T836] usb 10-1: USB disconnect, device number 3 [ 183.467201][T11480] pim6reg: entered allmulticast mode [ 183.598363][ T40] audit: type=1400 audit(2000000358.599:1984): avc: denied { unlink } for pid=5949 comm="syz-executor" name="file0" dev="tmpfs" ino=2415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 183.635918][T11483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 183.698265][ T40] audit: type=1400 audit(2000000358.699:1985): avc: denied { view } for pid=11484 comm="syz.6.1522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 183.888917][ T40] audit: type=1400 audit(2000000358.889:1986): avc: denied { append } for pid=11498 comm="syz.6.1528" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.889037][T11499] random: crng reseeded on system resumption [ 183.896953][ T40] audit: type=1400 audit(2000000358.889:1987): avc: denied { open } for pid=11498 comm="syz.6.1528" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 183.907957][ T40] audit: type=1400 audit(2000000358.909:1988): avc: denied { firmware_load } for pid=75 comm="kworker/u32:5" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 183.940526][T11495] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 183.959362][T11502] netlink: 'syz.3.1525': attribute type 7 has an invalid length. [ 184.056331][T11512] pimreg: entered allmulticast mode [ 184.059537][T11512] netlink: 'syz.6.1531': attribute type 6 has an invalid length. [ 184.061754][T11512] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1531'. [ 184.106028][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.123663][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.172333][T11523] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan1, syncid = 0, id = 0 [ 184.235171][T11530] loop5: detected capacity change from 0 to 524287999 [ 184.316309][T11535] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1535'. [ 184.337333][T11534] binder: BC_ACQUIRE_RESULT not supported [ 184.339200][T11534] binder: 11533:11534 ioctl c0306201 200000000180 returned -22 [ 184.729944][T11542] overlayfs: failed to resolve './file0': -2 [ 184.869383][T11546] tipc: Started in network mode [ 184.890701][T11546] tipc: Node identity 2, cluster identity 4711 [ 184.892912][T11546] tipc: Node number set to 2 [ 185.352128][ T5299] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 185.355343][ T5299] CPU: 1 UID: 0 PID: 5299 Comm: kworker/u33:1 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 185.355359][ T5299] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.355368][ T5299] Workqueue: hci4 hci_rx_work [ 185.355403][ T5299] Call Trace: [ 185.355407][ T5299] [ 185.355412][ T5299] dump_stack_lvl+0x16c/0x1f0 [ 185.355430][ T5299] sysfs_warn_dup+0x7f/0xa0 [ 185.355454][ T5299] sysfs_create_dir_ns+0x24b/0x2b0 [ 185.355469][ T5299] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.355483][ T5299] ? find_held_lock+0x2b/0x80 [ 185.355498][ T5299] ? do_raw_spin_unlock+0x172/0x230 [ 185.355510][ T5299] kobject_add_internal+0x2c4/0x9b0 [ 185.355530][ T5299] kobject_add+0x16e/0x240 [ 185.355541][ T5299] ? __pfx_kobject_add+0x10/0x10 [ 185.355563][ T5299] ? do_raw_spin_unlock+0x172/0x230 [ 185.355576][ T5299] ? kobject_put+0xab/0x5a0 [ 185.355595][ T5299] device_add+0x288/0x1a70 [ 185.355612][ T5299] ? __pfx_dev_set_name+0x10/0x10 [ 185.355623][ T5299] ? __pfx_device_add+0x10/0x10 [ 185.355639][ T5299] ? mgmt_send_event_skb+0x2fb/0x460 [ 185.355658][ T5299] hci_conn_add_sysfs+0x17e/0x230 [ 185.355675][ T5299] le_conn_complete_evt+0x1075/0x1d70 [ 185.355700][ T5299] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 185.355714][ T5299] ? hci_event_packet+0x459/0x11c0 [ 185.355733][ T5299] hci_le_conn_complete_evt+0x23c/0x370 [ 185.355751][ T5299] hci_le_meta_evt+0x354/0x5e0 [ 185.355767][ T5299] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 185.355786][ T5299] hci_event_packet+0x685/0x11c0 [ 185.355802][ T5299] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 185.355819][ T5299] ? __pfx_hci_event_packet+0x10/0x10 [ 185.355837][ T5299] ? kcov_remote_start+0x3c9/0x6d0 [ 185.355850][ T5299] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.355868][ T5299] hci_rx_work+0x2c5/0x16b0 [ 185.355884][ T5299] ? rcu_is_watching+0x12/0xc0 [ 185.355899][ T5299] process_one_work+0x9cf/0x1b70 [ 185.355916][ T5299] ? __pfx_process_one_work+0x10/0x10 [ 185.355930][ T5299] ? assign_work+0x1a0/0x250 [ 185.355948][ T5299] worker_thread+0x6c8/0xf10 [ 185.355964][ T5299] ? __pfx_worker_thread+0x10/0x10 [ 185.355975][ T5299] kthread+0x3c2/0x780 [ 185.355985][ T5299] ? __pfx_kthread+0x10/0x10 [ 185.355995][ T5299] ? rcu_is_watching+0x12/0xc0 [ 185.356007][ T5299] ? __pfx_kthread+0x10/0x10 [ 185.356017][ T5299] ret_from_fork+0x5d4/0x6f0 [ 185.356033][ T5299] ? __pfx_kthread+0x10/0x10 [ 185.356042][ T5299] ret_from_fork_asm+0x1a/0x30 [ 185.356060][ T5299] [ 185.356134][ T5299] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.442152][ T5299] Bluetooth: hci4: failed to register connection device [ 185.564293][ T5947] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 185.567295][ T5947] CPU: 2 UID: 0 PID: 5947 Comm: kworker/u33:5 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 185.567312][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.567320][ T5947] Workqueue: hci4 hci_rx_work [ 185.567340][ T5947] Call Trace: [ 185.567344][ T5947] [ 185.567348][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 185.567366][ T5947] sysfs_warn_dup+0x7f/0xa0 [ 185.567381][ T5947] sysfs_create_dir_ns+0x24b/0x2b0 [ 185.567396][ T5947] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 185.567412][ T5947] ? find_held_lock+0x2b/0x80 [ 185.567428][ T5947] ? do_raw_spin_unlock+0x172/0x230 [ 185.567440][ T5947] kobject_add_internal+0x2c4/0x9b0 [ 185.567460][ T5947] kobject_add+0x16e/0x240 [ 185.567469][ T5947] ? __pfx_kobject_add+0x10/0x10 [ 185.567480][ T5947] ? do_raw_spin_unlock+0x172/0x230 [ 185.567491][ T5947] ? kobject_put+0xab/0x5a0 [ 185.567510][ T5947] device_add+0x288/0x1a70 [ 185.567527][ T5947] ? __pfx_dev_set_name+0x10/0x10 [ 185.567537][ T5947] ? __pfx_device_add+0x10/0x10 [ 185.567554][ T5947] ? mgmt_send_event_skb+0x2fb/0x460 [ 185.567572][ T5947] hci_conn_add_sysfs+0x17e/0x230 [ 185.567589][ T5947] le_conn_complete_evt+0x1075/0x1d70 [ 185.567608][ T5947] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 185.567624][ T5947] ? hci_event_packet+0x459/0x11c0 [ 185.567643][ T5947] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 185.567664][ T5947] ? skb_pull_data+0x166/0x210 [ 185.567679][ T5947] hci_le_meta_evt+0x354/0x5e0 [ 185.567696][ T5947] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 185.567714][ T5947] hci_event_packet+0x685/0x11c0 [ 185.567730][ T5947] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 185.567747][ T5947] ? __pfx_hci_event_packet+0x10/0x10 [ 185.567764][ T5947] ? kcov_remote_start+0x3c9/0x6d0 [ 185.567777][ T5947] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.567795][ T5947] hci_rx_work+0x2c5/0x16b0 [ 185.567812][ T5947] ? rcu_is_watching+0x12/0xc0 [ 185.567826][ T5947] process_one_work+0x9cf/0x1b70 [ 185.567843][ T5947] ? __pfx_process_one_work+0x10/0x10 [ 185.567857][ T5947] ? assign_work+0x1a0/0x250 [ 185.567874][ T5947] worker_thread+0x6c8/0xf10 [ 185.567891][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 185.567901][ T5947] kthread+0x3c2/0x780 [ 185.567911][ T5947] ? __pfx_kthread+0x10/0x10 [ 185.567921][ T5947] ? rcu_is_watching+0x12/0xc0 [ 185.567933][ T5947] ? __pfx_kthread+0x10/0x10 [ 185.567943][ T5947] ret_from_fork+0x5d4/0x6f0 [ 185.567957][ T5947] ? __pfx_kthread+0x10/0x10 [ 185.567967][ T5947] ret_from_fork_asm+0x1a/0x30 [ 185.567984][ T5947] [ 185.567999][ T5947] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.654024][ T5947] Bluetooth: hci4: failed to register connection device [ 185.918800][T11584] loop5: detected capacity change from 0 to 524287999 [ 186.006993][T11586] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1551'. [ 186.239654][T11594] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1553'. [ 186.502317][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1560'. [ 186.702909][ C3] net_ratelimit: 115195 callbacks suppressed [ 186.702911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.702921][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.703219][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.704914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.708564][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.712220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.715785][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.716153][T11621] sch_tbf: burst 0 is lower than device geneve0 mtu (1514) ! [ 186.719349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.723004][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.726534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 187.299443][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 187.299455][ T40] audit: type=1400 audit(2000000362.299:2004): avc: denied { setopt } for pid=11647 comm="syz.5.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.333816][T11652] program syz.5.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.362992][T11653] program syz.5.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.499839][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1571'. [ 187.564037][T11670] loop5: detected capacity change from 0 to 524287999 [ 187.669706][T11674] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1574'. [ 187.920088][T11680] tmpfs: Bad value for 'mpol' [ 187.990689][ T40] audit: type=1400 audit(2000000362.989:2005): avc: denied { read } for pid=11684 comm="syz.6.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.011051][T11688] xt_NFQUEUE: number of total queues is 0 [ 188.087034][ T40] audit: type=1400 audit(2000000363.089:2006): avc: denied { accept } for pid=11694 comm="syz.6.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.201614][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 188.233060][ T40] audit: type=1400 audit(2000000363.229:2007): avc: denied { append } for pid=11696 comm="syz.6.1584" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.252914][ T40] audit: type=1400 audit(2000000363.229:2008): avc: denied { ioctl } for pid=11696 comm="syz.6.1584" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.539586][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1593'. [ 188.557493][T11714] IPVS: Error joining to the multicast group [ 188.571115][ T40] audit: type=1400 audit(2000000363.569:2009): avc: denied { ioctl } for pid=11715 comm="syz.0.1591" path="pid:[4026532877]" dev="nsfs" ino=4026532877 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 188.769840][T11731] netlink: 'syz.5.1597': attribute type 10 has an invalid length. [ 188.772345][T11731] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1597'. [ 188.775303][T11731] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 188.777601][T11731] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 188.874469][ T40] audit: type=1400 audit(2000000363.869:2010): avc: denied { setattr } for pid=11736 comm="syz.0.1596" name="/" dev="configfs" ino=2147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 189.127456][ T40] audit: type=1326 audit(2000000364.129:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.1600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ffc0000 [ 189.135736][ T40] audit: type=1326 audit(2000000364.129:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.1600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ffc0000 [ 189.145366][ T40] audit: type=1326 audit(2000000364.139:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.1600" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7feec738e929 code=0x7ffc0000 [ 189.152762][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1600'. [ 189.210320][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1602'. [ 189.213613][T11745] xfrm1: entered promiscuous mode [ 189.215364][T11745] xfrm1: entered allmulticast mode [ 189.474423][T11763] loop5: detected capacity change from 0 to 524287999 [ 189.614311][T11771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=11771 comm=syz.6.1608 [ 190.039122][T11781] netlink: 'syz.5.1609': attribute type 10 has an invalid length. [ 190.059838][T11781] batman_adv: batadv0: Adding interface: team0 [ 190.061869][T11781] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.069780][T11781] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 190.076263][T11781] input: syz1 as /devices/virtual/input/input22 [ 190.186374][T11782] netlink: 'syz.5.1609': attribute type 10 has an invalid length. [ 190.191865][T11782] team0: entered promiscuous mode [ 190.197531][T11782] team_slave_0: entered promiscuous mode [ 190.201646][T11782] team_slave_1: entered promiscuous mode [ 190.205086][T11782] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.208036][T11782] batman_adv: batadv0: Interface activated: team0 [ 190.210201][T11782] batman_adv: batadv0: Interface deactivated: team0 [ 190.212354][T11782] batman_adv: batadv0: Removing interface: team0 [ 190.231249][T11782] bridge0: port 3(team0) entered blocking state [ 190.237035][T11782] bridge0: port 3(team0) entered disabled state [ 190.240317][T11782] team0: entered allmulticast mode [ 190.245337][T11782] team_slave_0: entered allmulticast mode [ 190.252917][T11782] team_slave_1: entered allmulticast mode [ 190.267665][T11782] bridge0: port 3(team0) entered blocking state [ 190.269802][T11782] bridge0: port 3(team0) entered forwarding state [ 190.613153][T11796] binder_alloc: 11795: binder_alloc_buf size 4168 failed, no address space [ 190.617342][T11796] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 191.023542][T11827] Invalid ELF header type: 0 != 1 [ 191.044726][T11832] loop5: detected capacity change from 0 to 524287999 [ 191.115988][T11839] __nla_validate_parse: 5 callbacks suppressed [ 191.116006][T11839] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1623'. [ 191.205467][T11838] netlink: 'syz.3.1625': attribute type 29 has an invalid length. [ 191.209033][T11838] netlink: 'syz.3.1625': attribute type 29 has an invalid length. [ 191.215706][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 191.218981][T11838] netlink: 588 bytes leftover after parsing attributes in process `syz.3.1625'. [ 191.235087][T11831] delete_channel: no stack [ 191.493518][T11864] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 191.512304][T11865] 9pnet_fd: Insufficient options for proto=fd [ 191.546560][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1633'. [ 191.712872][ C3] net_ratelimit: 109672 callbacks suppressed [ 191.712888][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.712915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.714976][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.718644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.723208][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.726789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.730068][ T5947] Bluetooth: Unexpected continuation frame (len 34) [ 191.730449][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.734130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.737749][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.739848][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.606589][T11894] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 192.608612][T11894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.626808][T11894] vhci_hcd vhci_hcd.0: Device attached [ 192.642605][T11895] vhci_hcd: connection closed [ 192.646894][ T6111] vhci_hcd: stop threads [ 192.650378][ T6111] vhci_hcd: release socket [ 192.652093][ T6111] vhci_hcd: disconnect device [ 192.707280][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1644'. [ 192.712234][T11900] loop4: detected capacity change from 0 to 7 [ 192.716540][ T7994] Dev loop4: unable to read RDB block 7 [ 192.718346][ T7994] loop4: unable to read partition table [ 192.720130][ T7994] loop4: partition table beyond EOD, truncated [ 192.728263][T11900] Dev loop4: unable to read RDB block 7 [ 192.730084][T11900] loop4: unable to read partition table [ 192.731913][T11900] loop4: partition table beyond EOD, truncated [ 192.734221][T11900] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.765888][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1645'. [ 192.889488][T11903] xt_hashlimit: size too large, truncated to 1048576 [ 193.106452][T11910] netlink: 604 bytes leftover after parsing attributes in process `syz.6.1645'. [ 193.150868][T11904] netlink: 'syz.6.1645': attribute type 29 has an invalid length. [ 193.162440][T11903] netlink: 'syz.6.1645': attribute type 29 has an invalid length. [ 193.227704][T11912] /dev/sr0: Can't open blockdev [ 193.252975][ T7520] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 193.386786][T11921] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.413534][ T7520] usb 5-1: Using ep0 maxpacket: 16 [ 193.419789][ T7520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.424475][ T7520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.427751][ T7520] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.431781][ T7520] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.435029][ T7520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.441602][ T7520] usb 5-1: config 0 descriptor?? [ 193.614477][T11913] /dev/sr0: Can't open blockdev [ 193.661677][T11921] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.850694][ T7520] microsoft 0003:045E:07DA.000A: unexpected long global item [ 193.854773][ T7520] microsoft 0003:045E:07DA.000A: parse failed [ 193.856768][ T7520] microsoft 0003:045E:07DA.000A: probe with driver microsoft failed with error -22 [ 193.944039][T11921] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.955336][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.053524][T11907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1646'. [ 194.246798][T11921] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.350232][T11921] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.365060][T11921] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.377667][T11921] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.397829][T11921] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.275349][T11959] overlayfs: missing 'lowerdir' [ 195.488608][T11964] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1661'. [ 195.916311][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1663'. [ 196.499587][ T6003] usb 5-1: USB disconnect, device number 19 [ 196.722850][ C3] net_ratelimit: 110742 callbacks suppressed [ 196.722858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.722863][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.722963][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.724873][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.728524][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.732228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.735954][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.739524][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.743213][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.746832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 197.755853][T11990] netlink: 'syz.5.1670': attribute type 4 has an invalid length. [ 200.449316][T11995] input: syz0 as /devices/virtual/input/input25 [ 200.488110][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1672'. [ 200.524966][T11994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.570195][T11994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.572442][T11994] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 200.585288][T11994] bond1: (slave vcan1): Error -95 calling set_mac_address [ 200.622295][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 200.622310][ T40] audit: type=1400 audit(2000000375.619:2044): avc: denied { bind } for pid=12004 comm="syz.6.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.730364][T12010] macvlan2: entered promiscuous mode [ 200.741840][T12019] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1679'. [ 201.083056][ T29] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 201.237956][ T29] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.241160][ T29] usb 11-1: config 0 has no interfaces? [ 201.257164][T12050] usb usb4: usbfs: process 12050 (syz.5.1683) did not claim interface 0 before use [ 201.270743][ T29] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 201.274633][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.284983][ T29] usb 11-1: config 0 descriptor?? [ 201.425543][T12036] cgroup: fork rejected by pids controller in /syz0 [ 201.489813][ T29] usb 11-1: USB disconnect, device number 4 [ 201.713139][ T837] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 201.732875][ C3] net_ratelimit: 108967 callbacks suppressed [ 201.732888][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.733019][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.734989][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.739004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.742676][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.747677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.751339][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.755989][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.759510][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.764602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.864971][ T837] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.868329][ T837] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.871089][ T837] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.876058][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.879461][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 201.882718][ T837] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 201.886058][ T837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.894073][T12061] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 201.898806][ T837] hub 10-1:1.0: bad descriptor, ignoring hub [ 201.906558][T12085] rtc_cmos 00:05: Alarms can be up to one day in the future [ 201.907239][ T837] hub 10-1:1.0: probe with driver hub failed with error -5 [ 201.911363][ T837] cdc_wdm 10-1:1.0: skipping garbage [ 201.915370][ T837] cdc_wdm 10-1:1.0: skipping garbage [ 201.921592][ T837] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 201.927819][ T837] cdc_wdm 10-1:1.0: Unknown control protocol [ 202.118459][T12089] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.122666][ T40] audit: type=1400 audit(2000000377.109:2045): avc: denied { read write } for pid=12054 comm="syz.5.1684" name="cdc-wdm0" dev="devtmpfs" ino=3140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 202.140483][ T40] audit: type=1400 audit(2000000377.109:2046): avc: denied { open } for pid=12054 comm="syz.5.1684" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 202.362592][T12114] loop5: detected capacity change from 0 to 524287999 [ 202.399897][T12114] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1691'. [ 202.417706][T12122] No control pipe specified [ 202.434674][ T837] usb 10-1: USB disconnect, device number 4 [ 202.443872][T12061] cdc_wdm 10-1:1.0: Error autopm - -16 [ 202.524875][ T40] audit: type=1400 audit(2000000377.529:2047): avc: denied { getopt } for pid=12125 comm="syz.0.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.597646][ T837] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 202.634695][T12131] No buffer was provided with the request [ 202.696685][T12124] /dev/sr0: Can't open blockdev [ 202.744584][ T837] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.748728][ T837] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.755202][ T837] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.759731][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 202.766459][ T837] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 202.770705][ T837] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 202.774779][ T837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.782502][T12090] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 202.788232][ T837] hub 10-1:1.0: bad descriptor, ignoring hub [ 202.792187][ T837] hub 10-1:1.0: probe with driver hub failed with error -5 [ 202.798453][ T837] cdc_wdm 10-1:1.0: skipping garbage [ 202.801814][ T837] cdc_wdm 10-1:1.0: skipping garbage [ 202.806355][ T837] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 202.811079][ T837] cdc_wdm 10-1:1.0: Unknown control protocol [ 202.962751][T12140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12140 comm=syz.0.1702 [ 202.981605][T12142] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1703'. [ 203.032081][T12150] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1706'. [ 203.045408][ T40] audit: type=1400 audit(2000000378.049:2048): avc: denied { setopt } for pid=12146 comm="syz.6.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.118741][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1707'. [ 203.123888][ T837] usb 10-1: USB disconnect, device number 5 [ 203.131201][T12156] mkiss: ax0: crc mode is auto. [ 203.190429][T12163] syz.3.1710: attempt to access beyond end of device [ 203.190429][T12163] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 203.199839][T12163] FAT-fs (nbd3): unable to read boot sector [ 203.288811][T12166] binder: 12165:12166 ioctl 4018620d 0 returned -22 [ 203.291656][T12166] binder: 12165:12166 ioctl c0306201 200000000240 returned -11 [ 203.402274][ T40] audit: type=1400 audit(2000000378.399:2049): avc: denied { mounton } for pid=12171 comm="syz.3.1714" path="/137/bus" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 203.402334][T12172] 9pnet_rdma: rdma_create_trans (12172): problem binding to privport: 13 [ 203.530082][T12173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.633634][T12187] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1718'. [ 203.666349][T12191] overlayfs: failed to get inode (-116) [ 203.674644][T12191] overlayfs: failed to get inode (-116) [ 203.684496][T12191] overlayfs: failed to get inode (-116) [ 203.693215][T12191] overlayfs: failed to get inode (-116) [ 203.695863][T12191] xt_hashlimit: size too large, truncated to 1048576 [ 203.764134][ T40] audit: type=1400 audit(2000000378.759:2050): avc: denied { create } for pid=12190 comm="syz.0.1720" name="#21" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.772127][ T40] audit: type=1400 audit(2000000378.769:2051): avc: denied { link } for pid=12190 comm="syz.0.1720" name="#21" dev="tmpfs" ino=2640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.779478][ T40] audit: type=1400 audit(2000000378.769:2052): avc: denied { rename } for pid=12190 comm="syz.0.1720" name="#22" dev="tmpfs" ino=2640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 203.787525][ T40] audit: type=1400 audit(2000000378.789:2053): avc: denied { ioctl } for pid=12194 comm="syz.5.1722" path="socket:[47930]" dev="sockfs" ino=47930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.948936][T12211] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 203.956054][T12205] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1724'. [ 203.997860][T12212] MINIX-fs: blocksize too small for device [ 204.007461][T12205] MINIX-fs: blocksize too small for device [ 204.526468][T12243] devpts: Unknown parameter '18446744073709551615' [ 204.558260][T12245] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 204.879701][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1739'. [ 204.883394][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1739'. [ 204.887035][T12251] netlink: 'syz.6.1739': attribute type 14 has an invalid length. [ 205.277628][T12257] 9pnet: Could not find request transport: v [ 205.582070][T12296] xt_hashlimit: size too large, truncated to 1048576 [ 205.699079][ T5947] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 205.908654][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 205.908665][ T40] audit: type=1400 audit(2000000380.909:2061): avc: denied { setopt } for pid=12295 comm="syz.5.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 206.059877][ T40] audit: type=1400 audit(2000000381.059:2062): avc: denied { connect } for pid=12319 comm="syz.5.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.096565][ T40] audit: type=1400 audit(2000000381.099:2063): avc: denied { write } for pid=12324 comm="syz.5.1764" dev="sockfs" ino=50225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 206.152911][T12332] loop6: detected capacity change from 0 to 7 [ 206.342907][ T29] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 206.414591][T12343] netlink: 'syz.0.1768': attribute type 62 has an invalid length. [ 206.503119][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 206.506896][T12347] __nla_validate_parse: 4 callbacks suppressed [ 206.506911][T12347] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1769'. [ 206.507436][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.515522][ T29] usb 10-1: config 0 has no interfaces? [ 206.519186][ T29] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 206.522041][ T29] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 206.524641][ T29] usb 10-1: Product: syz [ 206.526095][ T29] usb 10-1: Manufacturer: syz [ 206.527706][ T29] usb 10-1: SerialNumber: syz [ 206.538557][ T29] usb 10-1: config 0 descriptor?? [ 206.742877][ C3] net_ratelimit: 109169 callbacks suppressed [ 206.742881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.742889][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.742985][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.744892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.745819][ T29] usb 10-1: USB disconnect, device number 6 [ 206.748472][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.752091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.755648][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.757658][ T40] audit: type=1400 audit(2000000381.749:2064): avc: denied { mounton } for pid=12324 comm="syz.5.1764" path="/proc/518/cgroup" dev="proc" ino=50259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 206.759173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 206.760953][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.764555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.340264][T12362] xfs: Unknown parameter 'usrquota/controlC#' [ 207.343443][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 207.428793][ T40] audit: type=1400 audit(2000000382.429:2065): avc: denied { create } for pid=12374 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 207.442897][ T40] audit: type=1400 audit(2000000382.439:2066): avc: denied { getopt } for pid=12374 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 207.478281][T12377] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1778'. [ 207.834106][T12399] block nbd5: NBD_DISCONNECT [ 207.842917][T12399] block nbd5: Disconnected due to user request. [ 207.845049][T12399] block nbd5: shutting down sockets [ 208.055497][ T40] audit: type=1400 audit(2000000383.059:2067): avc: denied { setopt } for pid=12404 comm="syz.6.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 208.260403][T12432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1793'. [ 208.396146][T12440] input: syz0 as /devices/virtual/input/input26 [ 208.414245][ T40] audit: type=1400 audit(2000000383.419:2068): avc: denied { create } for pid=12442 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 208.435455][ T40] audit: type=1400 audit(2000000383.439:2069): avc: denied { sys_admin } for pid=12442 comm="syz.3.1798" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 208.511691][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 208.557576][T12440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62766 sclass=netlink_route_socket pid=12440 comm=syz.6.1797 [ 208.914478][ T40] audit: type=1400 audit(2000000383.919:2070): avc: denied { ioctl } for pid=12452 comm="syz.6.1801" path="socket:[50655]" dev="sockfs" ino=50655 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 209.039468][T12464] program syz.3.1804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.317333][T12487] dlm: no locking on control device [ 209.817412][ T6003] IPVS: starting estimator thread 0... [ 209.819687][T12522] fuse: Bad value for 'fd' [ 209.923195][T12523] IPVS: using max 44 ests per chain, 105600 per kthread [ 210.322109][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1823'. [ 210.443184][ T836] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 210.443415][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 210.445971][ T836] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 210.715307][T12545] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 210.722151][T12545] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1827'. [ 210.843220][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1827'. [ 210.912904][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 210.912915][ T40] audit: type=1326 audit(2000000385.909:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.929838][ T40] audit: type=1326 audit(2000000385.919:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.942208][ T40] audit: type=1326 audit(2000000385.919:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.950197][ T40] audit: type=1326 audit(2000000385.919:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.963394][ T40] audit: type=1326 audit(2000000385.919:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.972787][ T40] audit: type=1326 audit(2000000385.919:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.984795][ T40] audit: type=1326 audit(2000000385.919:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 210.994180][ T40] audit: type=1326 audit(2000000385.919:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 211.006322][ T40] audit: type=1326 audit(2000000385.919:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 211.019216][ T40] audit: type=1326 audit(2000000385.919:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12552 comm="syz.3.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec738e929 code=0x7ff00000 [ 211.422424][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1832'. [ 211.427523][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1832'. [ 211.752885][ C0] net_ratelimit: 117677 callbacks suppressed [ 211.752893][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.752898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.753016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.754949][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.758834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.762371][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.766012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.769519][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.773221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 211.776877][ C3] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.791250][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1835'. [ 211.858949][T12569] xt_time: unknown flags 0xb4 [ 212.193733][ T1120] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 212.196777][ T1120] sr 2:0:0:0: [sr0] tag#20 Sense Key : Illegal Request [current] [ 212.199141][ T1120] sr 2:0:0:0: [sr0] tag#20 Add. Sense: Invalid command operation code [ 212.201557][ T1120] sr 2:0:0:0: [sr0] tag#20 CDB: Write(10) 2a 00 00 00 00 04 00 00 02 00 [ 212.213047][ T1120] critical target error, dev sr0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 212.216532][ T1120] buffer_io_error: 7 callbacks suppressed [ 212.216540][ T1120] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 212.221333][T12586] __vm_enough_memory: pid: 12586, comm: syz.0.1838, bytes: 21200157011968 not enough memory for the allocation [ 212.260482][T12586] lo speed is unknown, defaulting to 1000 [ 212.326216][T12588] tipc: Enabling of bearer rejected, failed to enable media [ 212.490925][T12590] syz.6.1841: attempt to access beyond end of device [ 212.490925][T12590] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 212.501390][T12590] syz.6.1841: attempt to access beyond end of device [ 212.501390][T12590] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 212.512572][T12590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 212.517227][ T836] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 212.519626][ T836] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 212.523187][ C2] ------------[ cut here ]------------ [ 212.524469][T12590] syz.6.1841: attempt to access beyond end of device [ 212.524469][T12590] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 212.525220][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 212.532188][ C2] WARNING: CPU: 2 PID: 12555 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 212.532726][T12590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 212.535061][ C2] Modules linked in: [ 212.535103][ C2] CPU: 2 UID: 0 PID: 12555 Comm: syz.3.1829 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 212.535118][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.535126][ C2] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 212.535138][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 00 ff ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 a6 56 38 00 90 0f 0b 90 e9 1b f6 ff [ 212.535149][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 212.535158][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae278 [ 212.535165][ C2] RDX: ffff888012faa440 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 212.535172][ C2] RBP: ffff88802b2e0970 R08: 0000000000000001 R09: 0000000000000000 [ 212.535178][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000c918f [ 212.535185][ C2] R13: 0000000000000100 R14: ffff88802202c178 R15: 0000000000000001 [ 212.535192][ C2] FS: 00007feec82086c0(0000) GS:ffff8880d6952000(0000) knlGS:0000000000000000 [ 212.535214][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.535224][ C2] CR2: 0000000000000000 CR3: 000000002e8df000 CR4: 0000000000352ef0 [ 212.535231][ C2] Call Trace: [ 212.535235][ C2] [ 212.535243][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 212.535256][ C2] call_timer_fn+0x197/0x620 [ 212.535271][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 212.535288][ C2] ? __run_timers+0x559/0x960 [ 212.535304][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 212.535317][ C2] __run_timers+0x569/0x960 [ 212.535335][ C2] ? __pfx___run_timers+0x10/0x10 [ 212.535365][ C2] run_timer_base+0x114/0x190 [ 212.535385][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 212.535406][ C2] ? rcu_is_watching+0x12/0xc0 [ 212.535426][ C2] run_timer_softirq+0x1a/0x40 [ 212.535446][ C2] handle_softirqs+0x219/0x8e0 [ 212.535470][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 212.535498][ C2] __irq_exit_rcu+0x109/0x170 [ 212.535517][ C2] irq_exit_rcu+0x9/0x30 [ 212.535538][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 212.535560][ C2] [ 212.535563][ C2] [ 212.535568][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.535580][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 212.535594][ C2] Code: 00 00 5b e9 22 73 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 68 bf 10 12 <65> 8b 05 79 bf 10 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 212.535605][ C2] RSP: 0018:ffffc90005977950 EFLAGS: 00000246 [ 212.535614][ C2] RAX: 0000000000000000 RBX: ffffffff8d1427ac RCX: ffffffff8b7d6a3f [ 212.535621][ C2] RDX: ffff888012faa440 RSI: ffffffff8b7d6a52 RDI: 0000000000000001 [ 212.535627][ C2] RBP: ffffc900059779f8 R08: 0000000000000001 R09: 0000000000000000 [ 212.550453][T12590] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 212.555933][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 212.555944][ C2] R13: ffffffff8bb227c1 R14: ffffc90005977a78 R15: 0000000000000000 [ 212.555956][ C2] ? format_decode+0x7ef/0xd40 [ 212.555971][ C2] ? format_decode+0x802/0xd40 [ 212.555985][ C2] format_decode+0x802/0xd40 [ 212.555996][ C2] ? kasan_save_free_info+0x3b/0x60 [ 212.556009][ C2] ? __pfx_format_decode+0x10/0x10 [ 212.556020][ C2] ? __pfx_number+0x10/0x10 [ 212.556030][ C2] ? __secure_computing+0x287/0x3b0 [ 212.556049][ C2] vsnprintf+0x156/0x1160 [ 212.556065][ C2] ? __pfx_vsnprintf+0x10/0x10 [ 212.556082][ C2] audit_log_vformat+0x21c/0x890 [ 212.556100][ C2] ? __pfx_audit_log_vformat+0x10/0x10 [ 212.556118][ C2] ? __lock_acquire+0x622/0x1c90 [ 212.556136][ C2] audit_log_format+0xe3/0x130 [ 212.556152][ C2] ? __pfx_audit_log_format+0x10/0x10 [ 212.556170][ C2] ? find_held_lock+0x2b/0x80 [ 212.560205][T12590] UDF-fs: Scanning with blocksize 512 failed [ 212.561153][ C2] audit_log_d_path+0x36/0x200 [ 212.561167][ C2] audit_log_d_path_exe+0x46/0x70 [ 212.561178][ C2] audit_log_task+0x31d/0x3f0 [ 212.561191][ C2] ? __pfx_audit_log_task+0x10/0x10 [ 212.561204][ C2] ? __pfx_migrate_enable+0x10/0x10 [ 212.561218][ C2] audit_seccomp+0x79/0x290 [ 212.572372][T12590] syz.6.1841: attempt to access beyond end of device [ 212.572372][T12590] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 212.574648][ C2] __seccomp_filter+0x60e/0xea0 [ 212.574672][ C2] ? __pfx___seccomp_filter+0x10/0x10 [ 212.574687][ C2] ? rcu_is_watching+0x12/0xc0 [ 212.574702][ C2] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 212.574726][ C2] __secure_computing+0x287/0x3b0 [ 212.586819][T12590] syz.6.1841: attempt to access beyond end of device [ 212.586819][T12590] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 212.587840][ C2] syscall_trace_enter+0x89/0x260 [ 212.587858][ C2] do_syscall_64+0x347/0x4c0 [ 212.587876][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.587887][ C2] RIP: 0033:0x7feec738e929 [ 212.601431][T12590] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 212.602280][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.602294][ C2] RSP: 002b:00007feec82080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.602306][ C2] RAX: ffffffffffffffda RBX: 00007feec75b6088 RCX: 00007feec738e929 [ 212.602313][ C2] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feec75b6088 [ 212.602320][ C2] RBP: 00007feec75b6080 R08: 0000000000000000 R09: 0000000000000000 [ 212.602327][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feec75b608c [ 212.602333][ C2] R13: 0000000000000000 R14: 00007ffe803fb280 R15: 00007ffe803fb368 [ 212.610259][T12590] syz.6.1841: attempt to access beyond end of device [ 212.610259][T12590] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 212.610780][ C2] [ 212.610789][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.610797][ C2] CPU: 2 UID: 0 PID: 12555 Comm: syz.3.1829 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 212.610811][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.610818][ C2] Call Trace: [ 212.610822][ C2] [ 212.610826][ C2] dump_stack_lvl+0x3d/0x1f0 [ 212.610844][ C2] panic+0x71c/0x800 [ 212.610860][ C2] ? __pfx_panic+0x10/0x10 [ 212.610875][ C2] ? show_trace_log_lvl+0x29b/0x3e0 [ 212.610894][ C2] ? check_panic_on_warn+0x1f/0xb0 [ 212.610911][ C2] ? __queue_work+0xc9c/0x10f0 [ 212.610922][ C2] check_panic_on_warn+0xab/0xb0 [ 212.610938][ C2] __warn+0xf6/0x3c0 [ 212.610952][ C2] ? __queue_work+0xc9c/0x10f0 [ 212.610964][ C2] report_bug+0x3c3/0x580 [ 212.610977][ C2] ? __queue_work+0xc9c/0x10f0 [ 212.610988][ C2] handle_bug+0x184/0x210 [ 212.610998][ C2] exc_invalid_op+0x17/0x50 [ 212.611008][ C2] asm_exc_invalid_op+0x1a/0x20 [ 212.611019][ C2] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 212.611030][ C2] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 00 ff ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 a6 56 38 00 90 0f 0b 90 e9 1b f6 ff [ 212.611041][ C2] RSP: 0018:ffffc90000648be8 EFLAGS: 00010082 [ 212.611050][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae278 [ 212.611056][ C2] RDX: ffff888012faa440 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 212.611063][ C2] RBP: ffff88802b2e0970 R08: 0000000000000001 R09: 0000000000000000 [ 212.611069][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920000c918f [ 212.611076][ C2] R13: 0000000000000100 R14: ffff88802202c178 R15: 0000000000000001 [ 212.611086][ C2] ? __warn_printk+0x198/0x350 [ 212.611100][ C2] ? __warn_printk+0x1a5/0x350 [ 212.611116][ C2] ? __queue_work+0xc9b/0x10f0 [ 212.611131][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 212.611142][ C2] call_timer_fn+0x197/0x620 [ 212.611157][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 212.611174][ C2] ? __run_timers+0x559/0x960 [ 212.611190][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 212.611202][ C2] __run_timers+0x569/0x960 [ 212.611221][ C2] ? __pfx___run_timers+0x10/0x10 [ 212.611244][ C2] run_timer_base+0x114/0x190 [ 212.611259][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 212.611274][ C2] ? rcu_is_watching+0x12/0xc0 [ 212.611288][ C2] run_timer_softirq+0x1a/0x40 [ 212.611303][ C2] handle_softirqs+0x219/0x8e0 [ 212.611318][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 212.611333][ C2] __irq_exit_rcu+0x109/0x170 [ 212.611344][ C2] irq_exit_rcu+0x9/0x30 [ 212.611356][ C2] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 212.611371][ C2] [ 212.611375][ C2] [ 212.611379][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 212.611391][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 212.611404][ C2] Code: 00 00 5b e9 22 73 20 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 65 48 8b 15 68 bf 10 12 <65> 8b 05 79 bf 10 12 a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 [ 212.611413][ C2] RSP: 0018:ffffc90005977950 EFLAGS: 00000246 [ 212.611422][ C2] RAX: 0000000000000000 RBX: ffffffff8d1427ac RCX: ffffffff8b7d6a3f [ 212.611428][ C2] RDX: ffff888012faa440 RSI: ffffffff8b7d6a52 RDI: 0000000000000001 [ 212.611435][ C2] RBP: ffffc900059779f8 R08: 0000000000000001 R09: 0000000000000000 [ 212.611442][ C2] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000004 [ 212.611448][ C2] R13: ffffffff8bb227c1 R14: ffffc90005977a78 R15: 0000000000000000 [ 212.611458][ C2] ? format_decode+0x7ef/0xd40 [ 212.611470][ C2] ? format_decode+0x802/0xd40 [ 212.611483][ C2] format_decode+0x802/0xd40 [ 212.611499][ C2] ? kasan_save_free_info+0x3b/0x60 [ 212.611511][ C2] ? __pfx_format_decode+0x10/0x10 [ 212.611522][ C2] ? __pfx_number+0x10/0x10 [ 212.611533][ C2] ? __secure_computing+0x287/0x3b0 [ 212.611550][ C2] vsnprintf+0x156/0x1160 [ 212.611567][ C2] ? __pfx_vsnprintf+0x10/0x10 [ 212.611585][ C2] audit_log_vformat+0x21c/0x890 [ 212.611604][ C2] ? __pfx_audit_log_vformat+0x10/0x10 [ 212.611623][ C2] ? __lock_acquire+0x622/0x1c90 [ 212.611640][ C2] audit_log_format+0xe3/0x130 [ 212.611656][ C2] ? __pfx_audit_log_format+0x10/0x10 [ 212.611675][ C2] ? find_held_lock+0x2b/0x80 [ 212.611690][ C2] audit_log_d_path+0x36/0x200 [ 212.611701][ C2] audit_log_d_path_exe+0x46/0x70 [ 212.611712][ C2] audit_log_task+0x31d/0x3f0 [ 212.611724][ C2] ? __pfx_audit_log_task+0x10/0x10 [ 212.611737][ C2] ? __pfx_migrate_enable+0x10/0x10 [ 212.611751][ C2] audit_seccomp+0x79/0x290 [ 212.611767][ C2] __seccomp_filter+0x60e/0xea0 [ 212.611783][ C2] ? __pfx___seccomp_filter+0x10/0x10 [ 212.611797][ C2] ? rcu_is_watching+0x12/0xc0 [ 212.611812][ C2] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 212.611828][ C2] __secure_computing+0x287/0x3b0 [ 212.611844][ C2] syscall_trace_enter+0x89/0x260 [ 212.611855][ C2] do_syscall_64+0x347/0x4c0 [ 212.611871][ C2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.611882][ C2] RIP: 0033:0x7feec738e929 [ 212.611890][ C2] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.611900][ C2] RSP: 002b:00007feec82080e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 212.611910][ C2] RAX: ffffffffffffffda RBX: 00007feec75b6088 RCX: 00007feec738e929 [ 212.611917][ C2] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feec75b6088 [ 212.611923][ C2] RBP: 00007feec75b6080 R08: 0000000000000000 R09: 0000000000000000 [ 212.611930][ C2] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feec75b608c [ 212.611936][ C2] R13: 0000000000000000 R14: 00007ffe803fb280 R15: 00007ffe803fb368 [ 212.611950][ C2] [ 212.613266][ C2] Kernel Offset: disabled VM DIAGNOSIS: 17:33:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=0000000000000005 RCX=ffffffff95d3aed8 RDX=0000000000000003 RSI=0000000000000005 RDI=ffff888025632ff8 RBP=ffff888025632440 RSP=ffffc900000069c8 R8 =0000000000000000 R9 =0000000000000000 R10=00000000000000c8 R11=0000000000000001 R12=ffff888025632f30 R13=ffff888025632ff8 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff81985a63 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000004a00 CR3=000000002afa1000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9b84488 00007fbcf9b84480 00007fbcf9b84478 00007fbcf9b84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcfa6ed100 00007fbcf9b84440 00007fbcf9b80004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9b84498 00007fbcf9b84490 00007fbcf9b84488 00007fbcf9b84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff855bfce0 RDI=ffffffff9b088320 RBP=ffffffff9b0882e0 RSP=ffffc90003d4f350 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff36110b6 R15=dffffc0000000000 RIP=ffffffff855bfd07 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbcfa80c6c0 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbcf99746c0 CR3=000000002afa1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000c2fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf97883a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcf9a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000041 RCX=ffffffff819b82a2 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000648798 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000c90f6 R13=0000000000000000 R14=ffff888026492440 R15=ffffc90000648868 RIP=ffffffff81bc1a20 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007feec82086c0 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002e8df000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7584488 00007feec7584480 00007feec7584478 00007feec7584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec80ed100 00007feec7584440 00007feec7584458 00007feec75844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feec7584498 00007feec7584490 00007feec7584488 00007feec7584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffc900006f7d18 RCX=ffffc900006f7c6c RDX=0000000000000000 RSI=ffffffff8ddf4c2b RDI=ffff8880542accc4 RBP=ffffc900006f7da8 RSP=ffffc900006f7d08 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000095286 R12=ffffffff81a78040 R13=ffffc900006f7dd8 R14=0000000000000000 R15=ffffc900006f7d4c RIP=ffffffff816ac72e RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555579b2500 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd11397e2d8 CR3=0000000060eee000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040004000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffce568cba0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd113811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd113811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd113811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd113811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd113811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd113811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000