last executing test programs: 1m25.230526127s ago: executing program 1 (id=290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000030a1b000000000000000000020000000900010073797a30000000000900030073797a3200000000340008"], 0x88}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x120) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r2, 0x141601) ioctl$TCSETSF(r3, 0x541d, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0xee}, 0x7}}}, 0x7) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='zonefs\x00', 0x2000493, 0x0) 1m25.161084995s ago: executing program 1 (id=291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000000100)}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/170, 0xaa}], 0x4, 0x81, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01030000000000000000010000000900010073797a30000000000900030073798430000000005c000000060a010400000000000000000100000008000b4000000000340004"], 0xd0}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="8e0250ff9c1187dec1c37332c3a9da9737"], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000180)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x181280, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) 1m24.63095714s ago: executing program 1 (id=297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x401, 0x401, 0x4, 0xa9}}}}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r3 = syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x904021, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000340), &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x41, 0x4007, @fd_index=0x5, 0x4, 0x0, 0x0, 0x18, 0x1}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in6=@remote, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1m24.561375422s ago: executing program 1 (id=299): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) dup2(r1, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2c, 0x0, r2, 0x6}, 0x10) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x44}}, 0x0) 1m23.671344095s ago: executing program 1 (id=311): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000001c0)={0x5, 0x1}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000001c0)={0x5, 0x1}) (async) 1m23.670798274s ago: executing program 1 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x84800) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000017c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc}, {@in=@empty, 0x0, 0x33}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3}, {0x4}, {}, 0x70bd2a, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0x2d26cc3e, 0x5, 0x1400000, 0x8, 0xb, 0x0, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x9}) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000200)=@md0, r11, &(0x7f0000000300)) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (async) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) ioctl$I2C_SLAVE(r12, 0x703, 0x15d) (async) ioctl$I2C_SLAVE(r12, 0x703, 0x15d) r13 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',privport,access=', @ANYRESDEC]) 1m8.569704717s ago: executing program 32 (id=312): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x84800) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000000400)={0x2020}, 0x2020) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000017c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc}, {@in=@empty, 0x0, 0x33}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3}, {0x4}, {}, 0x70bd2a, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x7ff, 0x2d26cc3e, 0x5, 0x1400000, 0x8, 0xb, 0x0, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x9}) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000200)=@md0, r11, &(0x7f0000000300)) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (async) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r12, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) ioctl$I2C_SLAVE(r12, 0x703, 0x15d) (async) ioctl$I2C_SLAVE(r12, 0x703, 0x15d) r13 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB=',privport,access=', @ANYRESDEC]) 1m3.739779159s ago: executing program 0 (id=642): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x401, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40008) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8cc}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10005800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x50}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xfe, 0x4}, {0xff, 0x7}], "fc93ec711c913882"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r1) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x20c, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff5cdc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x94}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x51b}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x79d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x20c}}, 0x40004) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000007c0)="6ed98317fed9ca367b3af8edad6545cb86c08e9a1b600084e7c9d6fa6b765870637c0d007f0b5ef648aa516b304f4b76fad732e7f8557c8ffcbcf3a6adfa413bc782d94f2ff6854cd6efdcf0b6442b43b27ca55f8b925f6ab753f529faaf4c56298cf829ef88137131c85117ea67c2cae0b2709a273068826124b9cc4cc23640dbc7d35c4d3b9ae8a4727a5a097a62835d5a7026cf8fd623f9b416b02def", 0x9e) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x90, r8, 0x435, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfb3a, 0x19}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "620e7711767b33dd0e3f6e9b72739e5c97082ff5c78d1832"}]]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x8) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a40), 0x40, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a80)={0xffffffffffffffff, r9}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x11, 0x8, 0x70bd27, 0x25dfdbfb, {0x12}, [@generic="edc2cb60fc09bf222577110e7014cd25b7d863e672805622dae63d7562a6c1a8cbc0f4eb295270ea04dd38"]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r3) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14000000}, 0x40080) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r9) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x18, r12, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000fc0)={'nicvf0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001000)={'wlan0\x00'}) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001080), r9) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r13, 0x200, 0x6, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, 0x1402, 0x8, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, r8, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x63}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000085) 1m3.734089134s ago: executing program 0 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xabd0}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r1, 0xffffffffffffffff, 0x0) 1m3.679119139s ago: executing program 0 (id=648): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2, 0x600aa}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x24008040) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m3.621128963s ago: executing program 0 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, r4, 0x1f, 0x0, @val=@netfilter={0x7, 0x0, 0xffff0001}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001440)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cipher_null)\x00'}, 0x5a) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x2, 0x5, 0xffff1000, 0x2000, &(0x7f00006f2000/0x2000)=nil}) (async, rerun: 32) r6 = accept(r5, 0x0, 0x0) (rerun: 32) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000700)=ANY=[], 0x28}}, 0x8000) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="fcffffff0000000002004e24ac141419000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000800000002004e24ac1414320000009e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1772b8e91272500000000000000000000000000000000000000fffffffffffffff40000000000000000000000000000000000000000000000000000000002004e20ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14142e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e210a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010200"/1168], 0x490) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x4}, 0x73) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=ANY=[@ANYBLOB="4c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000d0001000000050000000100000008000a00", @ANYRES32=r7], 0x4c}}, 0x0) (rerun: 64) socket(0x22, 0x80000, 0x3) 1m3.61846776s ago: executing program 0 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd50, 0x0, &(0x7f0000000200)="0c006a8bcc48edee2667ae79cc37", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, 0x0, 0x0, 0x2000000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000100)="66b9da0800000f320f01c40f21e166b80f0000000f23c80f21f86635040070000f23f80f20c06635040000000f22c066b9800000c00f326635004000000f30a566b92103000066b81f00000066ba000000000f300f320f32", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xd93]}}) 1m3.331199757s ago: executing program 0 (id=661): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x30) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='#@{*]^-^}$\\/-^.-:', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)="40aa", 0xfffffffffffffebb, 0x102, 0x1}) io_uring_enter(r1, 0x567, 0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0)=0x111002, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r8, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r9) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv2(r5, &(0x7f0000000500)=[{&(0x7f0000000480)=""/101, 0x65}], 0x1, 0x8, 0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20044013}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) 48.352068309s ago: executing program 33 (id=661): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x30) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='#@{*]^-^}$\\/-^.-:', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, &(0x7f0000000340)="40aa", 0xfffffffffffffebb, 0x102, 0x1}) io_uring_enter(r1, 0x567, 0x1e, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000000c0)=0x111002, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r8, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r9) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv2(r5, &(0x7f0000000500)=[{&(0x7f0000000480)=""/101, 0x65}], 0x1, 0x8, 0x5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20044013}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) 1.366255222s ago: executing program 4 (id=1738): creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000a00)=0x27, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0xfffffffffffffffc, 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001500)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000003900)={0x14}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x4, "eb9c22c2"}, &(0x7f00000001c0)=0x2c) open(&(0x7f0000000240)='./bus\x00', 0x34117e, 0x44) 1.255104332s ago: executing program 4 (id=1740): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="0602b18f"], 0x18) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x1b0) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045000078ac1e0001ac1414aa030490781200183f2500000000000000000100007f0000010800000000186371ae9b1c030000000000000000"], 0x0) (async) setsockopt(r1, 0xff, 0x7, &(0x7f0000000000)="fa794bfa", 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x2000000, 0x0, {{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xe6}}, 0x0, 0x1a0b1}}, 0xf8}}, 0x20000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) (async) read$snddsp(r0, &(0x7f0000000080)=""/17, 0x11) (async) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x3, r0}) 1.254924372s ago: executing program 4 (id=1741): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000)) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000440)=""/198) (async) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000440)=""/198) 1.190584064s ago: executing program 4 (id=1743): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x800) read$usbfs(r0, &(0x7f0000000040)=""/134, 0x86) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@void, @void, @arp=@generic={0x309, 0xa01, 0x6, 0x7, 0x8, @broadcast, "3063ce2e3055a7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, 0x1b) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0x5000, 0xeeef0000, 0x8, 0x5, 0x1, 0x80, 0xb, 0x6, 0x7, 0x5, 0x9, 0xd}, {0xeeef0000, 0x4, 0x9, 0x2, 0xdf, 0x5, 0x7f, 0x2, 0xb, 0x40, 0x69, 0x1}, {0x4000, 0xd000, 0x3, 0xf7, 0x9, 0xe, 0x0, 0x1, 0x8, 0x3, 0x2, 0x58}, {0xeeee0000, 0xeeee0000, 0x3, 0x4, 0x9, 0x80, 0xff, 0x10, 0xf, 0xb5, 0x1, 0x6}, {0x10000, 0x8000000, 0xf, 0x4, 0x7, 0x0, 0x1, 0x9, 0x0, 0x5, 0x2, 0x1}, {0xf000, 0x100000, 0xb, 0x5, 0x8, 0x1, 0xf7, 0x9, 0x3, 0xff, 0x5, 0x9}, {0x3000, 0x4, 0xa, 0x1, 0x5b, 0x2, 0x4, 0x4, 0x84, 0xf, 0x10, 0xe}, {0x80a0000, 0x1000, 0xa, 0x1b, 0x3, 0x6, 0x9, 0x6, 0x5, 0x3, 0xc, 0xfb}, {0x8080000, 0x81}, {0xeeef0000, 0x1000}, 0x26, 0x0, 0x2000, 0x142000, 0x0, 0x101, 0xffff1000, [0xf, 0x8, 0x3, 0x1]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x10, 0x20, 0x2ee, 0x800, {{0x1b, 0x4, 0x0, 0xf, 0x6c, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @private=0xa010101, {[@lsrr={0x83, 0x1b, 0x2e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @local, @remote, @broadcast, @local]}, @end, @lsrr={0x83, 0x7, 0x49, [@empty]}, @generic={0x89, 0xb, "a8170b6b9c3de36edd"}, @timestamp={0x44, 0x8, 0x45, 0x0, 0x9, [0x7f]}, @lsrr={0x83, 0x13, 0x9, [@dev={0xac, 0x14, 0x14, 0x38}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @end, @ssrr={0x89, 0xb, 0xb4, [@local, @rand_addr=0x64010102]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1600}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getlink={0x28, 0x12, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x3c210}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa827}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008844}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x170, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x2600c885}, 0x40000) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000700)={0x3ff, "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"}) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/93, 0x5d}, {&(0x7f00000008c0)=""/26, 0x1a}], 0x2, 0xd702, 0xd2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000940)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000009c0)={0x7, 0x7}) recvfrom$inet(r1, &(0x7f0000000a00)=""/57, 0x39, 0x100, &(0x7f0000000a40)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept(r6, &(0x7f0000000a80)=@in={0x2, 0x0, @initdev}, &(0x7f0000000b00)=0x80) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r6) write$tun(r7, &(0x7f0000000b40)={@void, @val={0x0, 0x3, 0xf, 0xffff, 0x40, 0xfc01}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x400, 0x0, 0x1}, {0x80, 0x0, 0x1}], @llc={@snap={0xab, 0x1, "1f48", "afe255", 0x890d, "1d8cb698043b75b4b19e28a8beaa"}}}}}}}, 0x3f) statx(r5, &(0x7f0000000b80)='./file0\x00', 0x100, 0x20, &(0x7f0000000bc0)) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000cc0)=""/187) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000dc0)={0x0, &(0x7f0000000d80)}) ioctl$TCSBRKP(r7, 0x5425, 0x6) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000e00)={0x8, 0x0, [{0x7, 0x9, 0x0, 0x9, 0x6, 0x80000001, 0x6}, {0x80000000, 0x5, 0x2, 0x63b0000, 0x2, 0x8000, 0x4}, {0x80000019, 0x2, 0x5, 0x8, 0x7, 0x9, 0x8001}, {0xc0000000, 0x8, 0x1, 0x4, 0xce, 0x2, 0x5cd9}, {0x80000007, 0x8, 0x0, 0x7, 0x9, 0x2, 0x10001}, {0xc0000001, 0x400, 0x1, 0x4, 0xb4, 0x1ff, 0x7}, {0x80000008, 0x7, 0x2, 0x40, 0x5, 0x5, 0xf7}, {0xc0000001, 0x0, 0x5, 0x6, 0x6, 0x1ff, 0x2}]}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000f80)={0x8, 0x10, 0x6799eee8, 0x3cf0000, 0x17, "d1adb0e421e21e7e6c6dde828cb86f4ea05ad7"}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x400c330d, &(0x7f0000000fc0)={0x0, 0x687}) syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r4) 1.189661916s ago: executing program 4 (id=1744): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="0df1d7327849c332c68dd7f5e25625f07abfcc8a5e2895b1a8108fc6b5b15085a8fbc8b43611cdd0d9ac9cfc05b4e44e3276b4e8994170943891c2b80100cb2279f0a2533300"/80, @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x4048800}, 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) epoll_create1(0x80000) 1.11052017s ago: executing program 4 (id=1746): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x9, 0xffffe63d, 0x24, @remote, @mcast1, 0x7800, 0x700, 0x26d}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000380)={0x3, 0x0, 0x10001}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000003c0)={0x34f0, r6}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r11 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r10) dup(r11) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x2c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0xd, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040054) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000007c0)="76389e147583ddd0579ba56a5cfd", 0x0, 0x3400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r12) 1.030509071s ago: executing program 3 (id=1751): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423f, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r8, 0xfffffffffffffc01, 0x0) tee(r5, r8, 0x60000000000, 0x1000000000000000) read$FUSE(r7, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x8004) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r10, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ioctl$SG_SCSI_RESET(r10, 0x2284, 0x0) 880.690865ms ago: executing program 2 (id=1753): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0xffff, {0x0, 0x1}, {0x4c, 0x2}, @period={0x59, 0x0, 0x1, 0x1, 0x6, {0x0, 0x0, 0x1, 0x8}, 0x0, 0x0}}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x100, 0x80, {}, {0xffffffffffffffff}, 0x5, 0x7}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000005c0)=@sg0, r2, &(0x7f00000001c0)) (async) poll(&(0x7f00000000c0)=[{r0, 0xc}, {r1, 0x20}], 0x2, 0xbd59) syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x18d402) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) statfs(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000540)=""/103) (async) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000400), &(0x7f0000000480)='./file1/file0\x00', 0xe, 0x3) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00010000ac1c0012800b000100697036746e6c00000c000280080014002e000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000000206050000000000000000000000000005000400fd0000000900020073f97a3da70473f23e2ac68008000a4000000006"], 0x34}}, 0x0) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000000b0601020000000000000000030000000900020073797a30000000000500010007000000480008800c000018400000000000000009100007800c00194000000000000000050c00078008000a400000ffff0c000780050015000600"/112], 0x70}}, 0x80) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0x4c001) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="66b8b2008ed00f7827c4e1816617c4c225dd1c03b805000000b9638c00000f01c135000020000f22e00f01dfb8010000000f01c18fe978c6f80f0764314ef1", 0x3f}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) (async) openat$cgroup_subtree(r3, &(0x7f0000000340), 0x2, 0x0) (async) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0xee01) 880.491221ms ago: executing program 2 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050025bd7000fedbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="0800050006"], 0x34}, 0x1, 0x0, 0x0, 0x40048}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r7, &(0x7f00000006c0)=[{&(0x7f0000000800)=""/51, 0x33}], 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_off}, {@nfs_export_on}]}) 810.292846ms ago: executing program 2 (id=1755): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x0, 0x0, 0x2}}) 808.917924ms ago: executing program 2 (id=1756): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x400, 0x2, 0x1, 0x0, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 719.611269ms ago: executing program 2 (id=1757): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='fscache_cache\x00', r1, 0x0, 0x8}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000180)={0x8, 0x8, 0xd6fe, 0x4, 0x19d44a6a82b40336, 0x5}) 549.125378ms ago: executing program 2 (id=1759): sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="200028af7000fddbdf256d0000000c5982868ec4a1ec00aacc95"], 0x20}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8050) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x0, 0x0, 0x1d0, 0xf0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x440, 0xb, 0x0, {[{{@uncond, 0x74000000, 0xa8, 0xf0, 0x3006000, {0x0, 0xe004}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x28}, @ipv6=@empty, 0x3f}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x328}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [], [0x0, 0xffffffff], 'veth0_to_bond\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'veth0_to_bond\x00', 'ip6_vti0\x00', {}, {}, 0xc}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04f1011104"], 0x7) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x28}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000340)=r2}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={0x228, r7, 0x200, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1f8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x168, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '))*:@%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+-)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '\'-{:.{\\\a\xc8${/%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x19}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff00}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '](^!n\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ca3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'SNPT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+-)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x20, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x5}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="53ed5390820160c18a9062a9d9a5880c1f52cfd744baee6aff36e424a16fd37efd69224de707a79751e8b5f857f8c1515429c00d", 0x34}, {&(0x7f00000000c0)="06d35d129b9f1c8949b6647d67bbec1fd89e3f833d1b89bdbbf02a78", 0x1c}, {&(0x7f0000000580)="12fd998f940abc8e35f5cadc7a6f23e401a8c9370c01eb1d8bdd96b85a64f3d00931d63c100b11f337e9cc0efe59501e8521601add9669eb9246f3b2533b83b5d66429f9e3fffc169a6760ada033102dc94bde8a20c8bd88861eed6e0474112925356c89dae27866a9d3f8f26082446c6bf2bb586a85874073c6d8c468b83287893dbe1e8b4aa6056e7b5fd7206db38a9b69f2e1d92d1e0d1807e718f1447f593d52a2540379cd8abf80efaf4d511ed33e803debcc58da35be322e442ae64ec49546b59cc8977a49573cdcfb61ebcae2a436ab4d592702400b1b37f6451b816daded19eb3e2f04b7de95a13ed5205a96fa6fc76ab27e145b8944692d13a3245ebe780ee7bbc377af596a81914abdaac393344a862cf869b004aa146036882d24fbca799ae895f85dc90931ea7a470733436abf50ae36af9ebb1058c452f4f7f8e1990cffef7b35326af499be5a604a5dfcef65ab4251dfe06e10b8f3c141f520cf3157c36b3d6c208110154f30a42fa8f4de57a966b8d0c7c20517ac4857b284478addd1b847ba2539d9af0591bcd19773b4fbba69fa1932a3bea2a52e150b9db8a952706de34c34c4345949fdebaffea6a10dc23d29eb6d849422541866718ca8552e3ba2b02a5671114ef982e2e6b7c6e96689f1f9fad4ca677974d5049f7b8ebf53b6e4f1fd0f4aa8ae49927affefdc1920f67dfbfd91d409a64889cdadc4edc92f9668788ce490dc32bdbe95a5841f48097191956900bb79bd51688e78992d926b2eabcd683c2f02144aae1d90d4bb4cb32f923f8db9ae1e32f1f8272d243916c7d2ec4e5339e87174d52c0ee017d07fd98f3c0b04f2ed5b1e112baebe5d5a957ffab5ffe014d638ec3263e526f7c9986963c4565af7fd18c970b3247538d9ca1b68b478ab08b18f141606987537a6a8a4ba6721334c6b2d8b03411471a8fb9daddeb96610b499036b43d93f43d4e9963373382a6cd252b2a35ebe0e15d433122be8a5b68f95417c8682d65cd2dc7f64ad99c129f19e1c49d5b7b2b5696ff48408f2d397fe6850293f99e2888e3be480a12ce403ff151731c19f8d11d33c417f6d246f4a86bd12c4b8f499a8a0ec442bb4fbee43ad4a17be215da40c593acbd4e5d2090bdec13c98741e3d32701ccfd9e0c456ae0e735866f95965308b3ec1d437f25f97f66b4e505c071153bd279301807a5100a9dc7d529e8779516d9f8fdf669453b3ba5d5d6fec68cfd6715192a51babf21eb0e5bfea9922bb900921c2433351f9bcb424002f0243b8bb57b8a3991aca9f631666180953660afd9157d1b2a794359c549e4005ebe6648c726d976148f03098477fc552f72d84cf5f1306405a9fb0a44beee26801d302edb709b38bbb91a0757d529a5829ced989e11a675c3565e07b4f2b78cc4f6673834ddd24f03e72ecedc9a226f3ce6dafed2646e437f00e103037c34a707bbe8a3c107ade4f41ab4d5ab80b513418d05a0b344841736657ac19991e5c66b8a33f8bc32024315dd6cb03e0a828b60d4a23ddaefedc228fc5b553bd581c06af8bd3641f6857e1cab4ed5d29ca75f598e6d4bf17abf1c297e9f3dde539b9b00f5c1d1ed68ce79950f72abcb476d71bc055f7476f9fe4fdd4c7785b5bdfe7d33448404c65c46e7572c590877663423321fb6be5df90ce6b6b0618f29dffd78cdf8075eb1462d6aa42e39f3a8f42f95f16169422e9cc03165bfeef11ad1db8b1855a12abc628ab6fa31ef60b9c4906acd8b4f7772690d3cff3700a4b7d2fe1af6f2f674fc187c20c179d8714c8ba5804d0907be52b487bd2cff7d8fda163a59236a8acf3c10fdd18ab29397d038975edce39cda011448d0a37e761dcf0fa88d7b6ef2d2de8b4acee0c28819eb8b668321d6a59a9fbb8a42c24316dca6b30d26750efd2b118937f7e4f73c8b568d48adda63d9da7a161e7c40539ff741a3b8e2ee9328e75ac5cd6a6be862ca127fdf8da0db3697758a161cc6b5903087df00f4b3afe8868643f78c5c12a7587cfb445e02d9a78cc8a2799a667d25d86f3c5b39f3b324e280d72914ee6bc07c2cf1a51761459d1e28aa4423d3f95975a98edb1e6c7e5ed06747b711fc14e1d9ff66d0751d440ea1ccc886bdec09cdbaa309d7809ef90704f2fc92aee9a93d420b296383516792df9a6923a6aa04c39dbb209bf43eb341ced52c3aac4c2ff901f7d67b59dc0bb770c06c84f37b75bce846ce5f277c0d02784a9c5cf499cd85cdf2f8a52b1a690790e474f10e153eda3d0c93183b79891eda6861fa9e39e111e376c9224a1d500dcf8f8fdca708c5fa40078b245059b317aad2180b0296f5394b87f6c6fa7ff443ec3bdedcf3dfd6ba0c6bf8463b07e4c3e2d977dd3bfa2375de3b1a5a71c965ddb36664162088b777e33dfebbbf56c00ff9834e108635a552f865168ba4c8610f265d3ff352937d999ecfc88ca61d33177a76f713e933569514bd06f08723cbe2d5da5597846e63aaa797ede413c99158d50e13afedea45123510e73d099055a764fdffe3595f4b28571208a2318b58b65425c7d3c7c4d3f87c91dac68d65a7f5705ba55da06c2b2113d3c35183af7d2663d35b238f256ae676ace7391ca2cb8484e147d95c3b9a624da0e103ac2e10ee03a960a5c287edb026c8b21355348147619ef02f178db770ec09a12255a4982f39e07d5157599c6dda78aeea0133f68d18cf2af8ae810d12f84b2084426972c7126776adcdc657e09597c28b6801bd7f539e63ca9f7f01001c914830cf70b680ff3c9e6bfb17c542ce60869c8613309a8a1f91ba60e9d5aca49c1e097a47f14859ec2aaa5f4b0637ac1e9f462d8143ca8d049d03eaaec3872ce3cdfbb4370c426929c1e1f3a705bc1792dc4bf6ed712e117777ae066b002d81617c2120bcc538384c2714c1b52fb75548c71003771866eefe79ebb7c11e4991fb6cf9230bc4885cb812c749c55df5107aa4486ed7be2ef32c6a191f98f32599807477c815b9c0778183f6c2f568dc7d6714745503b0f0887ccd074fc74b8b6b4754b6520886402c8dc99c6b4786b978b2750afe515c08efa66560dcdd1684a498d7c6560e466ec7b51c2f827c16db05e0f05b9ebb7103bb876884c2fca094ed28a00e04f11087e7c598f1f48080f476d5c3825e2f8e86107f094564c112054a5994d6f6393adb7ca21aa441562321249b6318896e8bdd8428c91e8a25f50293a454da5e024536a404d1c90e0e14a1c2373e3fb51a04cfb8dd4ff26aab2ee8fa164e9ba2b6fd6aa15f980de3bbce0882a7fd10e981bbfb95783f79b84f5ece871dd57d2d369e92edd612531f0e56330698fbf42cfefeaa52b25fa725bd7ff59d0e6eb8120020832d06dc57f364ab384670bd7e082dcd2ebe7764dd460e2dcffe760945ffbdba1516404094dc23bfc82d460de21c0a0df6abd1eb7a0896689a9d3c1408ba7b87bfec4ac9e49647b39d219bc1f4791192db501f9e785b1cde547be6f49c79bf9974bd1c3d2b0cb0bcc75d9f4bf54286388226d7e4b08fac017d0e28081936e64eb8668dd060af012eec7de943961aecc6439a979ac9354e791b7c551fa571fc25ae44fad686e4e2068a9a663fccdc0b7198d507cf71380f1e31331a780db07baaf40c57494b0a2feded5970b2c4bee341777a3309f8f7c9686294a0a16768eada05d7b0129eb4ce86fadd2653f2fe71012b977ae9fd01e2858316c494a02b293157c42494435e3b798788695a55a5832e320a94b4e2b303823ca9b291ee3add56057ad59c369275c57318b5961ccd0814a903902c0865ea7d51c39a3f30ede0825abece99353f569b8915318482e0689a8aec4653e97d996d4d1d96039a0a32d21a5cd406516dc3f94bcb805b59a03aa021e18a237ce2583c180eb2459e0dc8c6650ff0745ff806657a3f7332f67a82ef3e6edbfebd3db585d38545bfa9a4615b9e08b6b71d354c197f0c6ca0be50e30fd135bd8f99838586f3b34a7434bdfc93596e6e09c401c9038516f6acc63d3ef1bb7315acae0c1c252846fe57a90de9bece1994e75b5f1afa8d0e07c93ac5f4c85e3ea0deacb4b9c12aaf31f0b1f533b7a5307943e80b168457ba550449ca3ff8fa350416feee7d1463adc6f50d0c92fdcf91a292a89e810c14d496d38b7ff6c8fb7dba4f5475e1345c80ee22c3535b9b027f25f33b06cc1d73fabf8e6c3fdc8ae50d1e65cee2af4c288773f9968300fbc791b89e574e28c1b3bddb141bb7d7619091c1b15c6f9b93e7c1d4d65b076a4fc662322eff90a210696e1ca461a81bcf7236fb6a7ce650a0f2b6438bed61f242cb7928b094f4e152b76f573a28cb473cabbd972f122a0390956601091a7dfa67cced62e89c4a305cd492ff4fb6baf67eba31431e8970033601bd1f1fd3ac7bf7683943764bbf3b08a3119a946285d43d4955a45e1c99c83666d22dad4b36fb930d590527b38ecb446b90defedccd76dc8cbd0ffa7bf71957b7623262c4c56533f5517e4f212ecc6a7de4509bb3e05e0a78029b9b9a71f6e3a0c5860e4c6659fca0ab904904130cdc1182e4d111446487328d5922f52d9c4f34488f6fb99571345f19a151c3fa6c36c481e1c99f29b143066c469b515ad0556b665fb95ee91ddcdc663df843d2351eac9d67e193532c0353569e3a84ea0df3e3f3ad5d82423a668e30d030a9c371d9b6343ac66c460c7d2f11cd023e2e623e604d72e1446bad51998fc3f89cd6235f5c25c15aa9451e1c494700efcae486486b96d89d4d8f815b8eaaa593169fd57d7574e0158a669bba56343800a401450e8df8d13448c3d16236001cb18358b34742c382ebfe3e36ccd8cae89eab4905cef7a60503bcd950d03afab6c3fc44faae6ebe1ef89003b710a70afe2c5b4d53f4a17c3c09a99d9f1c140ce9e6faa56c83e1a88eb0d4312ea83b417a3cfdcde4277b4373a6d654fc09b7bbc1312e1ba1e409895cd929e98e6b795330a040311ecfe49b86eed6221770d4a90eff39d266e53a0249db3945b2095a86b5827e250681af8ac02b44fefe2e727949c941410781fe9372098d6ecd1f739ca69f23490f9a613a3dd1597d41c40ee7b0145066e015fc4b618ea92bcd3df35b311058387a0b21210c1c620394e48e8b6600707d04efa6883b4a45594f03928a1512896730d823b900cd878ca967238ef4ccf59553fc7de5230a0f8ff08d1fdd3f2eeb96f958ad43dc9d59f895f3ba3ba374e8db95ea51f6e5bbcea3581b018e193043ff8afc5b7dcde2a51c0b2f59fa7139eb8645f7063c009e8f8dcae871c86af680c2dbc3661f55d9e7cfd43c0130693dcbc9025fb85a4250644d3188b6b7a64d28476369563bfc119e9f2d73bcf7a251cf0c9b9ca435374adf243c8f737044997130c607bab0108641834252a4eadfc9a57b011804846bd17fa97620abcbac4ef6dd803bca7e033b9efea32c3914fe6a898f8fd42c42f3cd0b0ac048205583017f20bc5b8c4bf4c077c708a994215384f28d47169889129f6f8e06e83b1cb5eaea8e70e8e343d5cd8c7fcfdd3462cabed5fb40f70c6e8f6d138409c878f09132eb67c3c449f0c67765ace18a0ce3c5cc050ef6457e6eae75e26804ef4acb1b7e696f2401813a94333b5ffee6c5a7212fc0296cf0714b93484940c6615381fb253b2094d3efd770495260e000f89e89fe4f340a1e96e8fb54082e9cad06f9df1486c1880a05bd6dff39c52d7c837d8b928212e5c21765348c2555afc48eab140daf23013d08d03ee0d86e40509c6d674f3eedc4b7b04970e4b7702b7da42f17dd8", 0x1000}, {&(0x7f0000000180)="c6b883b42367ba32dec6d0cda5a98c189c527572d251d6a2c7f69c53e9ba85f647fb331c9ff128ba", 0x28}], 0x4) 400.894463ms ago: executing program 5 (id=1763): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 340.37566ms ago: executing program 5 (id=1764): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0xfffffffffffffffc, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000990000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001080), 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) 340.208013ms ago: executing program 5 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x8000000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfe167c0e923301b61c42cb1d11f41d00bdab2aae0e00005a56", 0x1c}], 0x1) 210.587014ms ago: executing program 5 (id=1766): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f00000000c0)="c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000660f381d94940400000063df", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) rt_sigpending(&(0x7f0000000040), 0x8) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r3, 0x5402) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080dd09deff422c34188ce6c7c58", '\x00', "006e34e400"}, 0x28) (async) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 209.934391ms ago: executing program 5 (id=1767): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0xf, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a331286dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a331286dd", 0x0, 0x10700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008c04"]) (async) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008c04"]) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000000)="e1", 0x1, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) splice(r3, 0x0, r2, 0x0, 0x7ffff041, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x7ffff041, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x2}, 0x4050) 160.687002ms ago: executing program 3 (id=1768): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) (async) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000140)=@rc, 0x80, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/245, 0xf5}], 0x1}, 0x40000100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000010000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001500)=ANY=[], 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="f00000001a0093cf26bd7000fddbdf25ff7fd36b27d9a6bde300000000000000ff0100000000000000000000000000013d2200054e240002020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000004d332000000ac1e01010000000000000000"], 0xf0}}, 0x28008004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) 160.563618ms ago: executing program 3 (id=1769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000002640)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x3d, 0x107, 0x0, 0x25dfdbff, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0xfff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8004) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 90.830996ms ago: executing program 3 (id=1770): write(0xffffffffffffffff, &(0x7f0000000000)="f3a0b7b4565bd1374cb473f064688f3b2b7c1832defbf74b553dfe27911a27504e5b8c7d93ccbe8c835a60793814aa22e463f96eaa299aaa1dd93beface3a2d4138bd15d8d92afb232a4f6b16e7bedb01444ea7a9dc092dadf805f99d57b9a5418980267817ce0aa60ff02e17eed81adf832", 0x72) (async) write(0xffffffffffffffff, &(0x7f0000000000)="f3a0b7b4565bd1374cb473f064688f3b2b7c1832defbf74b553dfe27911a27504e5b8c7d93ccbe8c835a60793814aa22e463f96eaa299aaa1dd93beface3a2d4138bd15d8d92afb232a4f6b16e7bedb01444ea7a9dc092dadf805f99d57b9a5418980267817ce0aa60ff02e17eed81adf832", 0x72) unshare(0x6a040000) 829.825µs ago: executing program 3 (id=1771): ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x5609, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) 611.52µs ago: executing program 5 (id=1772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x17, 0x54, 0x1e5}, 0x18}}, 0x4080) 0s ago: executing program 3 (id=1773): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ppoll(&(0x7f0000000040)=[{r1, 0x1106}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0xf, 0x0, [0x7ffffffc], [0x8203], 0x1}}}) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) read(r3, &(0x7f0000000440)=""/227, 0xe3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fe766b399900"/24], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x46bb, 0x1, 0x1, "cdf922c1060000000000000000000000000023000039a8d775b8d0fed900"}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad30900942824251d7d17b5191584cdd4fbfffffffffffffffff1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) recvmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000003c0)=""/31, 0x1f}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x888e, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r9, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000000) readv(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x1) kernel console output (not intermixed with test programs): x 0 as target [ 87.647618][ T8340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.657404][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 87.657415][ T39] audit: type=1400 audit(1741010320.829:589): avc: denied { getopt } for pid=8331 comm="syz.3.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.659600][ T8340] input: syz0 as /devices/virtual/input/input14 [ 87.672021][ T39] audit: type=1400 audit(1741010320.849:590): avc: denied { map } for pid=8341 comm="syz.4.699" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.734395][ T8344] loop9: detected capacity change from 0 to 1 [ 87.737899][ T8344] Dev loop9: unable to read RDB block 1 [ 87.739915][ T8344] loop9: unable to read partition table [ 87.742556][ T8332] veth1_vlan: left promiscuous mode [ 87.743745][ T8344] loop9: partition table beyond EOD, truncated [ 87.759354][ T8344] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.815414][ T8347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.927533][ T8349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 87.930837][ T5946] Bluetooth: hci4: command tx timeout [ 87.999797][ T39] audit: type=1400 audit(1741010321.169:591): avc: denied { mounton } for pid=8350 comm="syz.4.703" path="/proc/91/cgroup" dev="proc" ino=21378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 88.160122][ T39] audit: type=1400 audit(1741010321.329:592): avc: denied { getopt } for pid=8361 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.233821][ T8364] openvswitch: netlink: IP tunnel dst address not specified [ 88.236828][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 88.278214][ T8368] xt_hashlimit: size too large, truncated to 1048576 [ 88.633195][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 88.689374][ T39] audit: type=1400 audit(1741010321.859:593): avc: denied { map } for pid=8377 comm="syz.4.711" path="socket:[23106]" dev="sockfs" ino=23106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 88.701249][ T8385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.704912][ T8385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.715412][ T39] audit: type=1326 audit(1741010321.889:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8391 comm="syz.2.715" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feeca18d169 code=0x0 [ 88.732663][ T39] audit: type=1400 audit(1741010321.909:595): avc: denied { create } for pid=8393 comm="syz.4.716" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.738508][ T39] audit: type=1400 audit(1741010321.909:596): avc: denied { mounton } for pid=8393 comm="syz.4.716" path="/34/file0" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.770444][ T5946] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 88.777673][ T39] audit: type=1400 audit(1741010321.949:597): avc: denied { setattr } for pid=8393 comm="syz.4.716" name="file0" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.812750][ T39] audit: type=1400 audit(1741010321.989:598): avc: denied { append } for pid=8399 comm="syz.4.717" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 88.818995][ T8400] usb usb8: usbfs: process 8400 (syz.4.717) did not claim interface 6 before use [ 88.855481][ T8402] overlayfs: empty lowerdir [ 89.422695][ T8424] netlink: 'syz.4.724': attribute type 12 has an invalid length. [ 89.651888][ T8444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.728'. [ 89.685228][ T8450] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 89.688926][ T8450] cramfs: wrong magic [ 89.753135][ T8456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.730'. [ 89.793398][ T5946] Bluetooth: hci1: Invalid handle: 0xc687 > 0x0eff [ 89.867791][ T8465] netlink: 'syz.3.732': attribute type 2 has an invalid length. [ 89.871055][ T8464] afs: Unknown parameter ' [ 89.871055][ T8464] ' [ 89.904237][ T8468] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 89.908050][ T8468] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.733'. [ 90.254522][ T8490] fuse: Bad value for 'fd' [ 90.885247][ T8521] netlink: 'syz.2.747': attribute type 10 has an invalid length. [ 90.889024][ T8521] syz_tun: entered promiscuous mode [ 90.893360][ T8521] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.986000][ T8530] PKCS8: Unsupported PKCS#8 version [ 91.031536][ T8533] netlink: zone id is out of range [ 91.510823][ T30] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.682185][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.685890][ T30] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.688463][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.693598][ T30] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.696079][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.700989][ T30] usb 9-1: config 0 descriptor?? [ 92.093485][ T8553] SET target dimension over the limit! [ 92.095284][ T8553] netlink: 'syz.3.761': attribute type 7 has an invalid length. [ 92.114335][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.116558][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.119035][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.121748][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.123836][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.125902][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.128424][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.131947][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.134536][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.136631][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.138701][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.145441][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.147525][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.148222][ T8573] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 92.149574][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.152152][ T8573] NCSI netlink: No device for ifindex 0 [ 92.156351][ T30] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 92.158971][ T30] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 92.183245][ T30] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 92.273023][ T8579] bridge_slave_0: left allmulticast mode [ 92.274779][ T8579] bridge_slave_0: left promiscuous mode [ 92.276839][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.280619][ T8579] bridge_slave_1: left allmulticast mode [ 92.284903][ T8579] bridge_slave_1: left promiscuous mode [ 92.286679][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.291965][ T8579] bond0: (slave bond_slave_0): Releasing backup interface [ 92.296223][ T8579] bond0: (slave bond_slave_1): Releasing backup interface [ 92.307110][ T8579] team0: Port device team_slave_0 removed [ 92.316060][ T8579] team0: Port device team_slave_1 removed [ 92.317995][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.320042][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.324378][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.326495][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.333717][ T8579] bond0: (slave ): Releasing backup interface [ 92.415701][ T1325] usb 9-1: USB disconnect, device number 3 [ 92.480953][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 92.621144][ T6000] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.651020][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 92.683148][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 92.690849][ T30] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 92.693695][ T30] usb 7-1: can't read configurations, error -71 [ 92.792208][ T6000] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 92.794434][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 92.797438][ T6000] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 92.800468][ T6000] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.804966][ T6000] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.807485][ T6000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.810657][ T6000] usb 8-1: config 0 descriptor?? [ 92.814269][ T8585] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 92.838824][ T39] kauditd_printk_skb: 81 callbacks suppressed [ 92.838839][ T39] audit: type=1400 audit(1741010326.009:680): avc: denied { mounton } for pid=8592 comm="syz.2.772" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 92.875257][ T39] audit: type=1400 audit(1741010326.049:681): avc: denied { ioctl } for pid=8594 comm="syz.2.773" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 92.898516][ T39] audit: type=1400 audit(1741010326.069:682): avc: denied { search } for pid=8596 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.910799][ T39] audit: type=1400 audit(1741010326.079:683): avc: denied { read } for pid=8597 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.917014][ T39] audit: type=1400 audit(1741010326.079:684): avc: denied { open } for pid=8597 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.923987][ T39] audit: type=1400 audit(1741010326.079:685): avc: denied { getattr } for pid=8597 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.930991][ T39] audit: type=1400 audit(1741010326.089:686): avc: denied { write } for pid=8596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1769 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.937229][ T39] audit: type=1400 audit(1741010326.089:687): avc: denied { add_name } for pid=8596 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.944298][ T39] audit: type=1400 audit(1741010326.089:688): avc: denied { create } for pid=8596 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.950421][ T39] audit: type=1400 audit(1741010326.089:689): avc: denied { write open } for pid=8596 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb7.ipv4ll" dev="tmpfs" ino=5238 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.220906][ T6000] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 93.224920][ T6000] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 93.228971][ T6000] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 93.305223][ T8620] program syz.4.782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.550614][ T8633] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.559314][ T25] usb 8-1: USB disconnect, device number 7 [ 93.563482][ T8628] 9pnet: Found fid 0 not clunked [ 93.607535][ T8635] program syz.3.787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.614256][ T8639] Unsupported ieee802154 address type: 0 [ 93.757023][ T8658] random: crng reseeded on system resumption [ 93.762267][ T30] kernel read not supported for file /zero (pid: 30 comm: kworker/1:0) [ 93.878912][ T8673] __nla_validate_parse: 2 callbacks suppressed [ 93.878923][ T8673] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.797'. [ 93.883659][ T8673] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.797'. [ 93.887127][ T8674] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.797'. [ 93.890002][ T8674] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.797'. [ 93.926533][ T8678] program syz.3.798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.019771][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'. [ 94.129717][ T8705] input: syz0 as /devices/virtual/input/input16 [ 94.400252][ T8725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.428016][ T8727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8727 comm=syz.4.808 [ 94.494462][ T8725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.577911][ T8725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.660649][ T8725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.739861][ T8725] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.745509][ T8725] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.751255][ T8725] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.756275][ T8725] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.001466][ T8752] overlayfs: failed to decode file handle (len=7, type=248, flags=0, err=-22) [ 95.270869][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 95.432276][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.435313][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.438081][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.441737][ T56] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.444323][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.447937][ T56] usb 8-1: config 0 descriptor?? [ 95.653631][ T5950] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 95.855829][ T56] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 95.860068][ T56] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 95.865357][ T56] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 96.731820][ T8772] input: syz0 as /devices/virtual/input/input17 [ 96.738903][ T8772] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 96.755704][ T8772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.760172][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 96.780715][ T8772] bond0: (slave bridge0): Releasing backup interface [ 96.870796][ T8778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.909688][ T8781] sp0: Synchronizing with TNC [ 97.505117][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.833'. [ 97.674389][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.836'. [ 97.707800][ T8824] vlan2: entered allmulticast mode [ 97.797679][ T8833] kvm: emulating exchange as write [ 97.836308][ T8837] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.846170][ T45] Bluetooth: hci5: Frame reassembly failed (-84) [ 97.911244][ T56] usb 8-1: USB disconnect, device number 8 [ 97.969497][ T8843] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=8843 comm=syz.2.842 [ 97.974354][ T39] kauditd_printk_skb: 116 callbacks suppressed [ 97.974364][ T39] audit: type=1400 audit(1741010331.149:806): avc: denied { read } for pid=8842 comm="syz.2.842" path="socket:[25138]" dev="sockfs" ino=25138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.975045][ T8844] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=8844 comm=syz.2.842 [ 98.111687][ T8846] overlayfs: conflicting lowerdir path [ 98.174539][ T39] audit: type=1400 audit(1741010331.349:807): avc: denied { map } for pid=8849 comm="syz.3.845" path="socket:[25812]" dev="sockfs" ino=25812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.181009][ T39] audit: type=1400 audit(1741010331.359:808): avc: denied { read accept } for pid=8849 comm="syz.3.845" path="socket:[25812]" dev="sockfs" ino=25812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.208655][ T39] audit: type=1400 audit(1741010331.379:809): avc: denied { write } for pid=8851 comm="syz.3.846" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.211882][ T8852] syz.3.846 (8852) used obsolete PPPIOCDETACH ioctl [ 98.215225][ T39] audit: type=1400 audit(1741010331.379:810): avc: denied { open } for pid=8851 comm="syz.3.846" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.218349][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 98.223385][ T39] audit: type=1400 audit(1741010331.379:811): avc: denied { ioctl } for pid=8851 comm="syz.3.846" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.232541][ T39] audit: type=1400 audit(1741010331.399:812): avc: denied { write } for pid=8851 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.237932][ T39] audit: type=1400 audit(1741010331.399:813): avc: denied { read } for pid=8851 comm="syz.3.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.326245][ T39] audit: type=1400 audit(1741010331.499:814): avc: denied { create } for pid=8855 comm="syz.3.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.431329][ T8861] kvm: pic: non byte write [ 98.627722][ T8870] Cannot find del_set index 128 as target [ 98.744144][ T39] audit: type=1326 audit(1741010331.919:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8869 comm="syz.3.854" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ee1b8d169 code=0x0 [ 99.506319][ T8873] netlink: 24 bytes leftover after parsing attributes in process `syz.3.855'. [ 99.850842][ T5946] Bluetooth: hci5: command 0x1003 tx timeout [ 99.854797][ T5950] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.898041][ T8891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8891 comm=syz.4.858 [ 100.011460][ T8897] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.095183][ T8897] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.214533][ T8897] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.273195][ T8897] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.372923][ T8897] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.378998][ T8897] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.387512][ T8897] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.394397][ T8897] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.711357][ T5946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.719827][ T5946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.724610][ T5946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.729575][ T5946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.735101][ T5946] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.737231][ T5946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 101.008396][ T8908] netlink: 'syz.2.865': attribute type 9 has an invalid length. [ 101.608636][ T8918] overlay: Unknown parameter 'obj_user' [ 101.628805][ T8922] openvswitch: netlink: Message has 93 unknown bytes. [ 101.638290][ T8922] nilfs2: Unknown parameter 'bPWùæ½"‹¶Ï°k2ÿ}ýÿrŽ´ÕÇ' [ 101.681065][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.872'. [ 101.683819][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.872'. [ 101.694179][ T8924] could not allocate digest TFM handle cryptd(blake2b-160) [ 101.752526][ T8905] chnl_net:caif_netlink_parms(): no params data found [ 101.770015][ T8939] netlink: 46 bytes leftover after parsing attributes in process `syz.3.873'. [ 101.807837][ T8928] kvm: pic: non byte write [ 101.812053][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.814123][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.816143][ T8905] bridge_slave_0: entered allmulticast mode [ 101.818271][ T8905] bridge_slave_0: entered promiscuous mode [ 101.821373][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.823365][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.825465][ T8905] bridge_slave_1: entered allmulticast mode [ 101.827579][ T8905] bridge_slave_1: entered promiscuous mode [ 101.851102][ T8905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.855019][ T8905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.881506][ T8905] team0: Port device team_slave_0 added [ 101.887763][ T8905] team0: Port device team_slave_1 added [ 101.905741][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.907707][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.915141][ T8905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.918883][ T8905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.920900][ T8905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.927984][ T8905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.952163][ T8905] hsr_slave_0: entered promiscuous mode [ 101.954635][ T8905] hsr_slave_1: entered promiscuous mode [ 101.956435][ T8905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.958532][ T8905] Cannot create hsr debugfs directory [ 102.035802][ T8905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.064383][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.067630][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.076421][ T8905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.080429][ T8905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.084208][ T8905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.095197][ T8905] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.097275][ T8905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.099604][ T8905] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.102549][ T8905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.127104][ T8905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.145142][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.147974][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.158141][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.162897][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.178020][ T8954] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 102.178390][ T8905] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.180243][ T8954] netlink: 56 bytes leftover after parsing attributes in process `syz.4.875'. [ 102.186849][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.188959][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.192439][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.195257][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.213573][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.216465][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.296112][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.298914][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.345599][ T8905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.673229][ T8969] netlink: 'syz.3.876': attribute type 2 has an invalid length. [ 102.815074][ T5946] Bluetooth: hci5: command tx timeout [ 102.888598][ T65] bond0 (unregistering): Released all slaves [ 102.907329][ T8905] veth0_vlan: entered promiscuous mode [ 102.926374][ T8905] veth1_vlan: entered promiscuous mode [ 102.953884][ T8905] veth0_macvtap: entered promiscuous mode [ 102.955201][ T8905] veth1_macvtap: entered promiscuous mode [ 102.958807][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.958819][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.958826][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.958834][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.965218][ T8905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.009052][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.009071][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.009081][ T8905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.009092][ T8905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.009931][ T8905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.018324][ T8905] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.035508][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 103.035519][ T39] audit: type=1400 audit(1741010336.209:842): avc: denied { getopt } for pid=8988 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.057023][ T8905] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.057054][ T8905] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.057076][ T8905] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.069481][ T39] audit: type=1400 audit(1741010336.239:843): avc: denied { mounton } for pid=8991 comm="syz.3.884" path="/251/file0" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.074339][ T39] audit: type=1400 audit(1741010336.249:844): avc: denied { mount } for pid=8991 comm="syz.3.884" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.079772][ T39] audit: type=1400 audit(1741010336.249:845): avc: denied { remount } for pid=8991 comm="syz.3.884" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.083335][ T39] audit: type=1400 audit(1741010336.259:846): avc: denied { mounton } for pid=8991 comm="syz.3.884" path="/251/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 103.144900][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 103.147493][ T8992] unknown channel width for channel at 909000KHz? [ 103.162177][ T39] audit: type=1400 audit(1741010336.339:847): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.183544][ T39] audit: type=1400 audit(1741010336.359:848): avc: denied { write } for pid=8997 comm="syz.2.886" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.188155][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.193015][ T39] audit: type=1400 audit(1741010336.359:849): avc: denied { map } for pid=8997 comm="syz.2.886" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.193487][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.248047][ T9011] sctp: [Deprecated]: syz.4.889 (pid 9011) Use of int in maxseg socket option. [ 103.248047][ T9011] Use struct sctp_assoc_value instead [ 103.252016][ T39] audit: type=1400 audit(1741010336.419:850): avc: denied { getopt } for pid=9010 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.260380][ T39] audit: type=1400 audit(1741010336.429:851): avc: denied { setattr } for pid=9010 comm="syz.4.889" name="SCTP" dev="sockfs" ino=24380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.296529][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.298745][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.352928][ T9028] cgroup2: Unknown parameter 'memïry_localevents' [ 103.385351][ T65] hsr_slave_0: left promiscuous mode [ 103.390837][ T65] hsr_slave_1: left promiscuous mode [ 103.423911][ T65] veth0_macvtap: left promiscuous mode [ 103.450853][ T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 104.326337][ T9047] netlink: 'syz.4.899': attribute type 20 has an invalid length. [ 104.600566][ T9043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.898'. [ 104.604732][ T9043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.898'. [ 104.654856][ T9051] netlink: 'syz.2.900': attribute type 18 has an invalid length. [ 104.684893][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.902'. [ 104.756343][ T9073] xt_hashlimit: size too large, truncated to 1048576 [ 104.758436][ T9073] xt_hashlimit: max too large, truncated to 1048576 [ 104.762884][ T9073] syz.3.906: attempt to access beyond end of device [ 104.762884][ T9073] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 104.766621][ T9073] VFS: unable to read V7 FS superblock on device nbd3. [ 104.768499][ T9073] VFS: could not find a valid V7 on nbd3. [ 104.840017][ T9082] netlink: 48 bytes leftover after parsing attributes in process `syz.3.908'. [ 104.900847][ T5946] Bluetooth: hci5: command tx timeout [ 104.936780][ T9092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.911'. [ 104.939361][ T9092] netem: unknown loss type 13 [ 104.941965][ T9092] netem: change failed [ 104.945984][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 105.136465][ T9119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.917'. [ 105.167367][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.916'. [ 105.185496][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 105.318488][ T5938] cgroup: fork rejected by pids controller in /syz2 [ 105.369838][ T8063] bond0: (slave syz_tun): Releasing backup interface [ 105.615507][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.620325][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.623077][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.625521][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.626585][ T9174] netlink: 48 bytes leftover after parsing attributes in process `syz.4.927'. [ 105.628819][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.633431][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.699800][ T9180] netlink: 'syz.4.928': attribute type 30 has an invalid length. [ 105.722562][ T9170] chnl_net:caif_netlink_parms(): no params data found [ 105.770571][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.775814][ T9170] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.777887][ T9170] bridge_slave_0: entered allmulticast mode [ 105.779997][ T9170] bridge_slave_0: entered promiscuous mode [ 105.786615][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.788385][ T9170] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.791109][ T9170] bridge_slave_1: entered allmulticast mode [ 105.793691][ T9170] bridge_slave_1: entered promiscuous mode [ 105.820515][ T9170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.824376][ T9170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.849909][ T9170] team0: Port device team_slave_0 added [ 105.853035][ T9170] team0: Port device team_slave_1 added [ 105.877209][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.879236][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.886659][ T9170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.893730][ T9170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.896642][ T9170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.907530][ T9170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.941895][ T9170] hsr_slave_0: entered promiscuous mode [ 105.944192][ T9170] hsr_slave_1: entered promiscuous mode [ 105.946139][ T9170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.948922][ T9170] Cannot create hsr debugfs directory [ 106.065425][ T9170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.093854][ T5946] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 106.226428][ T9170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.313152][ T9170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.380055][ T9236] lo speed is unknown, defaulting to 1000 [ 106.384713][ T9236] lo speed is unknown, defaulting to 1000 [ 106.387580][ T9236] lo speed is unknown, defaulting to 1000 [ 106.411789][ T9170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.438068][ T9236] infiniband syz0: set active [ 106.439949][ T9236] infiniband syz0: added lo [ 106.440655][ T25] lo speed is unknown, defaulting to 1000 [ 106.462296][ T9236] RDS/IB: syz0: added [ 106.465281][ T9236] smc: adding ib device syz0 with port count 1 [ 106.467938][ T9236] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 106.476048][ T9236] lo speed is unknown, defaulting to 1000 [ 106.482220][ T7858] lo speed is unknown, defaulting to 1000 [ 106.530472][ T9170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.541523][ T9170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.552427][ T9236] lo speed is unknown, defaulting to 1000 [ 106.552582][ T9170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.559992][ T9170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.571557][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.573566][ T9170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.575749][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.577705][ T9170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.606255][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.608274][ T9236] lo speed is unknown, defaulting to 1000 [ 106.614073][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.617764][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.635814][ T9170] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.639638][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.641702][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.645681][ T9236] lo speed is unknown, defaulting to 1000 [ 106.647019][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.649395][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.691099][ T9236] lo speed is unknown, defaulting to 1000 [ 106.734405][ T9236] lo speed is unknown, defaulting to 1000 [ 106.756243][ T9170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.772524][ T9170] veth0_vlan: entered promiscuous mode [ 106.778091][ T9170] veth1_vlan: entered promiscuous mode [ 106.792096][ T9170] veth0_macvtap: entered promiscuous mode [ 106.795857][ T9170] veth1_macvtap: entered promiscuous mode [ 106.810504][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.813486][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.816065][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.818847][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.822432][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.825236][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.828543][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.839822][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.845182][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.848347][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.852103][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.855187][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.860810][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.865055][ T9170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.870234][ T9170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.876037][ T9170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.878515][ T9170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.879350][ T9262] MINIX-fs: blocksize too small for device [ 106.881142][ T9170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.914211][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.916382][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.936619][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.938833][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.972282][ T5946] Bluetooth: hci5: command tx timeout [ 107.081375][ T9298] 9pnet_virtio: no channels available for device syz [ 107.472065][ T7858] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.559770][ T9330] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 107.632146][ T7858] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.635245][ T7858] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 107.637995][ T7858] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.640469][ T7858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.657911][ T9315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.665461][ T7858] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 107.690996][ T5946] Bluetooth: hci0: command tx timeout [ 107.812642][ T9335] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 107.815583][ T9335] SELinux: failed to load policy [ 107.869214][ T8] usb 10-1: USB disconnect, device number 2 [ 108.068770][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 108.068786][ T39] audit: type=1400 audit(1741010341.239:911): avc: denied { nlmsg_read } for pid=9352 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 108.148815][ T9360] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 108.148822][ T39] audit: type=1400 audit(1741010341.319:912): avc: denied { setopt } for pid=9359 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 108.182417][ T39] audit: type=1400 audit(1741010341.359:913): avc: denied { bind } for pid=9361 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.189436][ T9363] fuse: Unknown parameter '' [ 108.189834][ T39] audit: type=1400 audit(1741010341.359:914): avc: denied { listen } for pid=9361 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.198683][ T39] audit: type=1400 audit(1741010341.369:915): avc: denied { create } for pid=9361 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.205266][ T39] audit: type=1400 audit(1741010341.369:916): avc: denied { accept } for pid=9361 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.218346][ T9360] batadv_slave_1: entered promiscuous mode [ 108.221025][ T9359] batadv_slave_1: left promiscuous mode [ 108.309519][ T5946] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 108.366478][ T9380] netlink: 'syz.3.985': attribute type 29 has an invalid length. [ 108.540821][ T39] audit: type=1400 audit(1741010341.709:917): avc: denied { name_bind } for pid=9386 comm="syz.3.988" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.546791][ T39] audit: type=1401 audit(1741010341.709:918): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 108.722580][ T9393] kvm: kvm [9392]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 108.731023][ T8998] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 108.754521][ C3] vkms_vblank_simulate: vblank timer overrun [ 108.920956][ T8998] usb 9-1: Using ep0 maxpacket: 8 [ 108.924421][ T8998] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 108.928243][ T8998] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.933769][ T8998] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.937263][ T8998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.946937][ T8998] usbtmc 9-1:16.0: bulk endpoints not found [ 109.020851][ T39] audit: type=1400 audit(1741010342.189:919): avc: denied { ioctl } for pid=9414 comm="syz.3.996" path="socket:[30791]" dev="sockfs" ino=30791 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.050980][ T5946] Bluetooth: hci5: command tx timeout [ 109.118637][ T9428] openvswitch: netlink: Multiple metadata blocks provided [ 109.153532][ T39] audit: type=1400 audit(1741010342.319:920): avc: denied { mount } for pid=9431 comm="syz.3.999" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 109.161040][ T9435] overlayfs: overlapping lowerdir path [ 109.196368][ T9439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 109.199714][ T9439] overlayfs: missing 'lowerdir' [ 109.303719][ T9448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.416050][ T5946] Bluetooth: hci5: Invalid handle: 0xc687 > 0x0eff [ 109.715471][ T9470] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 109.770930][ T5950] Bluetooth: hci0: command tx timeout [ 110.048541][ T9487] __nla_validate_parse: 23 callbacks suppressed [ 110.048559][ T9487] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1014'. [ 110.373663][ T9517] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1024'. [ 110.603902][ T9538] qrtr: Invalid version 0 [ 110.638974][ T9545] lo speed is unknown, defaulting to 1000 [ 110.749088][ T9555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1034'. [ 110.810148][ T9559] overlayfs: failed to resolve './file1': -2 [ 110.868459][ T9561] virtio-fs: tag <(null)> not found [ 110.871379][ T9561] virtio-fs: tag <(null)> not found [ 110.962078][ T9574] qrtr: Invalid version 0 [ 111.046500][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1044'. [ 111.271285][ T9603] qrtr: Invalid version 0 [ 111.390826][ T9613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1054'. [ 111.504877][ T9] usb 9-1: USB disconnect, device number 4 [ 111.521506][ T9617] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 111.687320][ T9629] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 111.729789][ T9636] qrtr: Invalid version 0 [ 111.752263][ T9634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.767306][ T9639] fuse: Bad value for 'rootmode' [ 111.832123][ T9647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1064'. [ 111.850818][ T5950] Bluetooth: hci0: command tx timeout [ 111.922788][ T9657] input: syz0 as /devices/virtual/input/input21 [ 111.927889][ T9657] input: failed to attach handler leds to device input21, error: -6 [ 112.036636][ T9665] qrtr: Invalid version 0 [ 112.068501][ T9670] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1074'. [ 112.111652][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 112.159582][ T30] kernel read not supported for file /swradio0 (pid: 30 comm: kworker/1:0) [ 112.194523][ T9691] qrtr: Invalid version 0 [ 112.253643][ T9702] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1085'. [ 112.498788][ T9715] kvm: pic: non byte write [ 112.510075][ T9715] kvm: pic: non byte write [ 112.585722][ T9714] ufs: You didn't specify the type of your ufs filesystem [ 112.585722][ T9714] [ 112.585722][ T9714] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 112.585722][ T9714] [ 112.585722][ T9714] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 112.594978][ T9714] ufs: ufstype=old is supported read-only [ 112.597585][ T9714] ufs: ufs_fill_super(): bad magic number [ 112.813261][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'. [ 113.151009][ T9754] Bluetooth: Invalid esc byte 0x03 [ 113.197849][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 113.197866][ T39] audit: type=1326 audit(1741010346.369:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9759 comm="syz.4.1106" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff59c78d169 code=0x0 [ 113.249990][ T9766] xt_hashlimit: size too large, truncated to 1048576 [ 113.252025][ T9766] xt_hashlimit: max too large, truncated to 1048576 [ 113.254042][ T6278] Bluetooth: (null): Invalid header checksum [ 113.256234][ T6278] Bluetooth: (null): Invalid header checksum [ 113.357884][ T9774] lo speed is unknown, defaulting to 1000 [ 113.362302][ T65] Bluetooth: (null): Invalid header checksum [ 113.403358][ T9778] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 113.471510][ T1226] Bluetooth: (null): Invalid header checksum [ 113.479724][ T39] audit: type=1400 audit(1741010346.649:950): avc: denied { write } for pid=9788 comm="syz.5.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.581838][ T45] Bluetooth: (null): Invalid header checksum [ 113.703322][ T1140] Bluetooth: (null): Invalid header checksum [ 113.707189][ T39] audit: type=1400 audit(1741010346.879:951): avc: denied { append } for pid=9797 comm="syz.3.1116" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.812428][ T1226] Bluetooth: (null): Invalid header checksum [ 113.931170][ T5950] Bluetooth: hci0: command tx timeout [ 114.093578][ T39] audit: type=1400 audit(1741010347.269:952): avc: denied { bind } for pid=9819 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 114.098968][ T39] audit: type=1400 audit(1741010347.269:953): avc: denied { name_bind } for pid=9819 comm="syz.4.1125" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 114.105708][ T39] audit: type=1400 audit(1741010347.269:954): avc: denied { node_bind } for pid=9819 comm="syz.4.1125" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 114.112272][ T39] audit: type=1400 audit(1741010347.279:955): avc: denied { listen } for pid=9819 comm="syz.4.1125" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 114.117769][ T39] audit: type=1400 audit(1741010347.279:956): avc: denied { accept } for pid=9819 comm="syz.4.1125" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 114.158118][ T9822] fuse: Bad value for 'fd' [ 114.158164][ T39] audit: type=1400 audit(1741010347.329:957): avc: denied { mounton } for pid=9819 comm="syz.4.1125" path="/151/file0" dev="tmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 114.254325][ T9843] netlink: 'syz.2.1131': attribute type 13 has an invalid length. [ 114.256812][ T9844] netlink: 'syz.2.1131': attribute type 13 has an invalid length. [ 114.333352][ T39] audit: type=1400 audit(1741010347.509:958): avc: denied { append } for pid=9847 comm="syz.2.1133" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 114.379072][ T9856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9856 comm=syz.2.1137 [ 114.430590][ T9864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.495199][ T9869] syz.4.1141: attempt to access beyond end of device [ 114.495199][ T9869] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 114.499877][ T9869] VFS: could not find a valid V7 on nbd4. [ 114.871023][ T9813] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 114.918554][ T9874] syz.3.1143 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.958318][ T9876] kvm: user requested TSC rate below hardware speed [ 115.270013][ T9889] __nla_validate_parse: 14 callbacks suppressed [ 115.270026][ T9889] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1148'. [ 115.335650][ T9895] ufs: Invalid option: "grpquota" or missing value [ 115.337558][ T9895] ufs: wrong mount options [ 115.354212][ T9897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1152'. [ 115.394946][ T9902] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 115.394968][ T9900] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 115.411905][ T9902] netlink: 'syz.2.1153': attribute type 4 has an invalid length. [ 115.443164][ T9906] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 115.445849][ T9906] SELinux: failed to load policy [ 115.520095][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.524795][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.576894][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1160'. [ 115.727041][ T9938] SELinux: failed to load policy [ 115.992436][ T9974] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1170'. [ 116.063162][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.066675][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.078424][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.080606][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.083267][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.085264][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.087289][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.089260][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.091841][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.093971][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.095933][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.097926][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.100036][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.102754][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.104876][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.106932][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.108920][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.112318][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.114324][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.116290][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.118230][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.120278][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.122419][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.124387][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.126352][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.128335][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.130517][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.132751][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.134875][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.136821][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.138867][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.141166][ T8] hid-generic 0006:0003:0000.0006: unknown main item tag 0x0 [ 116.143641][ T8] hid-generic 0006:0003:0000.0006: hidraw1: VIRTUAL HID v0.00 Device [syz1] on syz0 [ 116.295285][T10006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1180'. [ 116.340559][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1183'. [ 116.391503][T10023] tmpfs: Bad value for 'mpol' [ 116.401056][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 116.419853][T10027] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 116.460265][T10035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36712 sclass=netlink_route_socket pid=10035 comm=syz.2.1188 [ 116.507615][T10042] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1190'. [ 116.581517][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 116.588038][ T30] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 116.591721][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.594135][ T30] usb 8-1: Product: syz [ 116.595318][ T30] usb 8-1: Manufacturer: syz [ 116.597441][ T30] usb 8-1: SerialNumber: syz [ 116.603685][ T30] usb 8-1: config 0 descriptor?? [ 116.618439][T10056] MPI: mpi too large (16392 bits) [ 116.680635][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 116.804954][T10084] macvlan0: entered allmulticast mode [ 116.806472][T10084] veth1_vlan: entered allmulticast mode [ 116.808351][ T30] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 116.812271][T10085] veth1_vlan: left allmulticast mode [ 116.824889][T10085] macvlan0 (unregistering): left allmulticast mode [ 116.835531][ T9965] sctp: [Deprecated]: syz.3.1168 (pid 9965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.835531][ T9965] Use struct sctp_sack_info instead [ 116.912409][ T30] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 116.920428][ T30] usb 8-1: USB disconnect, device number 10 [ 116.923254][T10088] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1200'. [ 117.198666][T10107] Cannot find map_set index 0 as target [ 117.228983][T10111] batadv_slave_1: entered promiscuous mode [ 117.242946][T10111] lo speed is unknown, defaulting to 1000 [ 117.345545][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1205'. [ 117.471661][T10110] batadv_slave_1: left promiscuous mode [ 117.554759][T10133] cgroup: Invalid name [ 118.525259][T10183] befs: (nullb0): No write support. Marking filesystem read-only [ 118.529895][T10183] befs: (nullb0): invalid magic header [ 118.571465][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 118.571476][ T39] audit: type=1400 audit(1741010351.739:980): avc: denied { read } for pid=10178 comm="syz.4.1218" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.623814][ T39] audit: type=1400 audit(1741010351.799:981): avc: denied { accept } for pid=10198 comm="syz.3.1225" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.634259][ T39] audit: type=1400 audit(1741010351.809:982): avc: denied { listen } for pid=10203 comm="syz.5.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.641050][T10179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.645688][T10179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.647423][T10179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.649090][T10179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.660030][T10179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.666690][T10179] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 118.668364][T10179] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 118.671883][T10179] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 118.675343][T10179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.675881][ T39] audit: type=1326 audit(1741010351.849:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10203 comm="syz.5.1226" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7814d8d169 code=0x0 [ 118.737052][ T39] audit: type=1400 audit(1741010351.909:984): avc: denied { read } for pid=10203 comm="syz.5.1226" path="socket:[32478]" dev="sockfs" ino=32478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.809828][ T5950] Bluetooth: hci0: unexpected event 0x23 length: 7 < 13 [ 118.851981][T10232] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 119.051783][T10254] tipc: Enabling of bearer rejected, failed to enable media [ 119.092890][ T39] audit: type=1400 audit(1741010352.269:985): avc: denied { ioctl } for pid=10260 comm="syz.3.1242" path="socket:[34880]" dev="sockfs" ino=34880 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.206619][ T39] audit: type=1400 audit(1741010608.371:986): avc: denied { getopt } for pid=10262 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.506064][ T39] audit: type=1326 audit(1741010608.671:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10273 comm="syz.5.1247" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7814d8d169 code=0x0 [ 119.570847][ T56] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 119.668073][ T39] audit: type=1400 audit(1741010608.831:988): avc: denied { cmd } for pid=10277 comm="syz.2.1248" path="socket:[32691]" dev="sockfs" ino=32691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.740932][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 119.744246][ T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 119.747397][ T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.758717][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.762124][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.765953][ T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.769757][ T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.773550][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.800544][ T39] audit: type=1400 audit(1741010608.961:989): avc: denied { mounton } for pid=10289 comm="syz.2.1251" path="/95/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 119.812147][T10292] VFS: could not find a valid V7 on sr0. [ 119.988724][ T56] usb 8-1: usb_control_msg returned -32 [ 119.990339][ T56] usbtmc 8-1:16.0: can't read capabilities [ 120.023091][T10302] tc_dump_action: action bad kind [ 120.130376][T10316] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 120.279156][ T56] IPVS: starting estimator thread 0... [ 120.375074][T10343] fuse: Unknown parameter '00000000000000000005' [ 120.380940][T10331] IPVS: using max 37 ests per chain, 88800 per kthread [ 120.439812][T10354] __nla_validate_parse: 15 callbacks suppressed [ 120.439823][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1274'. [ 120.509651][T10362] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1276'. [ 120.630980][T10373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.634294][T10373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.650870][ T5950] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.650957][ T5946] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.650973][ T5294] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.731631][ T5946] Bluetooth: hci5: command 0x0c1a tx timeout [ 120.777951][T10385] option changes via remount are deprecated (pid=10384 comm=syz.5.1284) [ 120.870944][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 120.903671][T10389] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1286'. [ 121.010835][ T9] usb 9-1: device descriptor read/64, error -71 [ 121.250859][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 121.380868][ T9] usb 9-1: device descriptor read/64, error -71 [ 121.491044][ T9] usb usb9-port1: attempt power cycle [ 121.512109][T10410] netlink: 'syz.5.1292': attribute type 11 has an invalid length. [ 121.724545][T10424] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1295'. [ 121.790696][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1297'. [ 121.822559][ T5946] Bluetooth: hci5: unexpected event for opcode 0x0419 [ 121.827859][T10430] kernel profiling enabled (shift: 3) [ 121.850826][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 121.881230][ T9] usb 9-1: device descriptor read/8, error -71 [ 122.130909][ T9] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 122.153584][ T9] usb 9-1: device descriptor read/8, error -71 [ 122.261087][ T9] usb usb9-port1: unable to enumerate USB device [ 122.340834][ T56] usb 8-1: USB disconnect, device number 11 [ 122.408423][T10450] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1306'. [ 122.447149][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1307'. [ 122.569278][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 122.616694][T10459] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 122.730967][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.802105][T10466] xt_cgroup: xt_cgroup: no path or classid specified [ 122.968419][ T5946] Bluetooth: hci0: unexpected event for opcode 0x080b [ 123.052527][T10473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1315'. [ 123.229977][T10487] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1321'. [ 123.612869][T10512] netlink: 'syz.3.1327': attribute type 18 has an invalid length. [ 123.620853][ T5981] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 123.671651][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 123.671663][ T39] audit: type=1400 audit(1741010612.831:1004): avc: denied { ioctl } for pid=10520 comm="syz.4.1330" path="socket:[34563]" dev="sockfs" ino=34563 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.752289][T10519] : entered promiscuous mode [ 123.787098][ T5981] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 123.789218][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 123.793735][ T5981] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.797153][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.800212][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 123.805024][ T5981] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 123.807127][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 123.810186][ T5981] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.815835][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.818927][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 123.823172][ T5981] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 123.825373][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 123.828358][ T5981] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.833580][T10531] new mount options do not match the existing superblock, will be ignored [ 123.834609][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.840446][ T39] audit: type=1400 audit(1741010613.001:1005): avc: denied { setopt } for pid=10530 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.844354][ T5981] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 123.852470][ T5981] usb 7-1: string descriptor 0 read error: -22 [ 123.852508][ T5981] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.852520][ T5981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.855751][ T5981] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 123.908618][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.908749][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.017933][ T39] audit: type=1400 audit(1741010613.181:1006): avc: denied { map } for pid=10557 comm="syz.3.1341" path="socket:[36228]" dev="sockfs" ino=36228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 124.023216][T10558] hpfs: Bad magic ... probably not HPFS [ 124.109451][T10571] netlink: 'syz.3.1345': attribute type 21 has an invalid length. [ 124.194210][ T39] audit: type=1400 audit(1741010613.361:1007): avc: denied { create } for pid=10577 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 124.257334][T10585] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.263287][T10585] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 124.265958][T10585] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 124.268137][T10585] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 124.274096][ T39] audit: type=1804 audit(1741010613.441:1008): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1349" name="/newroot/192/file0/file0" dev="ramfs" ino=34677 res=1 errno=0 [ 124.400858][T10591] unsupported nla_type 14345 [ 124.403199][ T39] audit: type=1400 audit(1741010613.571:1009): avc: denied { write } for pid=10588 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.404506][T10591] nbd: must specify a size in bytes for the device [ 124.424595][ T39] audit: type=1400 audit(1741010613.591:1010): avc: denied { unmount } for pid=7788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 124.508109][ T5946] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 124.653876][ T39] audit: type=1400 audit(1741010613.821:1011): avc: denied { connect } for pid=10601 comm="syz.3.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.666431][ T39] audit: type=1400 audit(1741010613.821:1012): avc: denied { ioctl } for pid=10601 comm="syz.3.1355" path="socket:[36260]" dev="sockfs" ino=36260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 124.684343][ T39] audit: type=1400 audit(1741010613.841:1013): avc: denied { write } for pid=10604 comm="syz.4.1356" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 124.688205][T10535] dccp_close: ABORT with 214 bytes unread [ 124.820853][ T5946] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.360845][ T56] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 125.532420][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.535989][ T56] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.538495][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.541795][ T56] usb 8-1: config 0 descriptor?? [ 125.545823][ T56] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 125.747408][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.760225][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.766304][ T6000] usb 8-1: USB disconnect, device number 12 [ 125.775004][T10663] lo speed is unknown, defaulting to 1000 [ 126.121483][T10667] netlink: 'syz.4.1377': attribute type 2 has an invalid length. [ 126.124350][T10667] __nla_validate_parse: 16 callbacks suppressed [ 126.124362][T10667] netlink: 16138 bytes leftover after parsing attributes in process `syz.4.1377'. [ 126.173385][ T6000] usb 7-1: USB disconnect, device number 13 [ 126.246255][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 126.272740][T10682] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1381'. [ 126.364726][T10688] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 126.366862][T10688] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1384'. [ 126.369345][T10688] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 126.376970][T10688] netlink: 'syz.3.1384': attribute type 2 has an invalid length. [ 126.387256][T10678] bond0: (slave bond_slave_0): Releasing backup interface [ 126.513793][T10699] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1388'. [ 126.514351][T10706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1391'. [ 126.554009][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1392'. [ 126.761991][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 126.767283][T10729] tmpfs: Unknown parameter 'm' [ 126.771481][T10729] 9pnet_fd: Insufficient options for proto=fd [ 126.771985][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'. [ 126.772017][T10729] bridge_slave_1: left allmulticast mode [ 126.772103][T10729] bridge_slave_1: left promiscuous mode [ 126.772204][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.776547][T10729] bridge_slave_0: left allmulticast mode [ 126.796171][T10729] bridge_slave_0: left promiscuous mode [ 126.796264][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.827212][T10732] input: syz0 as /devices/virtual/input/input22 [ 126.827228][T10732] input: failed to attach handler leds to device input22, error: -6 [ 126.855318][T10734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1400'. [ 126.999155][T10744] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.068395][T10747] qrtr: Invalid version 47 [ 127.141415][ T1325] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 127.212589][ T5950] Bluetooth: hci3: command 0x1003 tx timeout [ 127.214700][ T5946] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 127.300938][ T1325] usb 7-1: Using ep0 maxpacket: 8 [ 127.304323][ T1325] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.307152][ T1325] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.309750][ T1325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 127.313089][ T1325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 127.316143][ T1325] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 127.318675][ T1325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.323890][ T1325] hub 7-1:1.0: bad descriptor, ignoring hub [ 127.325716][ T1325] hub 7-1:1.0: probe with driver hub failed with error -5 [ 127.328090][ T1325] cdc_wdm 7-1:1.0: skipping garbage [ 127.329593][ T1325] cdc_wdm 7-1:1.0: skipping garbage [ 127.335992][ T1325] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 127.338147][ T1325] cdc_wdm 7-1:1.0: Unknown control protocol [ 127.930863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.933269][T10736] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 127.936636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 128.038888][T10766] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 128.042590][T10766] SELinux: failed to load policy [ 128.160863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.379885][T10779] overlayfs: unescaped trailing colons in lowerdir mount option. [ 128.398423][T10790] tmpfs: Bad value for 'mpol' [ 128.422150][ T1325] usb 7-1: USB disconnect, device number 14 [ 128.433741][T10793] netlink: 'syz.4.1421': attribute type 15 has an invalid length. [ 129.066572][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 129.066587][ T39] audit: type=1400 audit(1741010618.231:1037): avc: denied { accept } for pid=10834 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.079084][T10840] tipc: Trying to set illegal importance in message [ 129.114414][ T5940] IPVS: starting estimator thread 0... [ 129.170999][T10850] XFS (nullb0): Invalid superblock magic number [ 129.211218][T10846] IPVS: using max 37 ests per chain, 88800 per kthread [ 129.236402][T10861] qrtr: Invalid version 0 [ 129.379792][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.384856][T10879] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.387904][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.512733][T10885] SELinux: syz.2.1451 (10885) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.523573][T10885] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 129.524636][T10887] Bluetooth: MGMT ver 1.23 [ 129.530232][T10885] syz_tun: entered promiscuous mode [ 129.626511][ T39] audit: type=1400 audit(1741010618.791:1038): avc: denied { create } for pid=10899 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.725750][ T39] audit: type=1326 audit(1741010618.891:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10911 comm="syz.2.1459" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97b3f8d169 code=0x0 [ 129.954416][T10917] loop6: detected capacity change from 0 to 524287999 [ 130.074876][ T39] audit: type=1400 audit(1741010619.241:1040): avc: denied { ioctl } for pid=10922 comm="syz.4.1463" path="socket:[36751]" dev="sockfs" ino=36751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 130.146010][T10874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.147884][T10874] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.150192][T10874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.152212][T10874] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 130.154111][T10874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.191633][T10928] SET target dimension over the limit! [ 130.193621][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.195792][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.199261][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.201876][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.204108][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.206272][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.208406][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.210639][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.213598][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.215994][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.218271][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.220470][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.223016][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.225234][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.227486][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.229725][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.232309][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.234565][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.236735][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.239019][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.241289][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.243480][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.245657][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.247877][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.250399][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.252803][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.255038][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.257234][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.259402][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.261992][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.264181][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.266573][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.268855][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.271309][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.273586][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.275761][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.277946][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.280130][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.282519][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.284805][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.286997][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.289272][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.291632][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.293997][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.296322][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.298609][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.301362][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.303594][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.305901][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.308082][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.310447][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.312772][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.315429][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.317809][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.320088][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.322719][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.325735][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.328238][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.330508][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.332872][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.335180][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.337378][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.339557][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.341825][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.344062][T10929] Failed to get privilege flags for destination (handle=0x2:0x81) [ 130.400825][ T1455] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 130.438485][ T39] audit: type=1400 audit(1741010619.601:1041): avc: denied { getopt } for pid=10932 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.441057][T10936] syz.5.1467: attempt to access beyond end of device [ 130.441057][T10936] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 130.443983][ T39] audit: type=1400 audit(1741010619.601:1042): avc: denied { setattr } for pid=10932 comm="syz.3.1466" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 130.447475][T10936] syz.5.1467: attempt to access beyond end of device [ 130.447475][T10936] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 130.490454][ T39] audit: type=1400 audit(1741010619.651:1043): avc: denied { map } for pid=10940 comm="syz.5.1468" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 130.497689][ T39] audit: type=1400 audit(1741010619.651:1044): avc: denied { execute } for pid=10940 comm="syz.5.1468" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 130.570898][ T1455] usb 9-1: Using ep0 maxpacket: 8 [ 130.573687][ T1455] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.579589][ T1455] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.582400][ T1455] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.585060][ T1455] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.588136][ T1455] usb 9-1: config 0 descriptor?? [ 130.627165][T10948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.752740][T10952] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.105446][ T39] audit: type=1400 audit(1741010620.271:1045): avc: denied { read } for pid=10963 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.144792][T10965] __nla_validate_parse: 141 callbacks suppressed [ 131.144808][T10965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'. [ 131.451227][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.460699][T10981] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1482'. [ 131.498600][ T5946] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 131.505414][T10983] program syz.5.1483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.508065][T10983] ata1.00: invalid transfer count 0 [ 131.545180][T10985] misc userio: Can't change port type on an already running userio instance [ 131.547878][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 131.552369][T10985] ip6tnl1: entered promiscuous mode [ 131.553901][T10985] ip6tnl1: entered allmulticast mode [ 131.641186][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 131.792659][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 131.795328][ T25] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 131.798302][ T25] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 131.801314][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 131.803945][ T25] usb 8-1: config 1 has no interface number 0 [ 131.805684][ T25] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 131.809265][ T25] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 131.813017][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.818017][ T25] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 131.845597][T10990] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 131.857199][ T39] audit: type=1400 audit(1741010621.021:1046): avc: denied { sqpoll } for pid=10989 comm="syz.5.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.861508][T10990] Option 'n4:v®êšmäÛÌð¨áçžRÝfÍêËR­Oq±rúsJ)º¿rq' to dns_resolver key: bad/missing value [ 132.010046][T10996] bridge_slave_0: left allmulticast mode [ 132.011929][T10996] bridge_slave_0: left promiscuous mode [ 132.013574][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.017336][T10996] bridge_slave_1: left allmulticast mode [ 132.018903][T10996] bridge_slave_1: left promiscuous mode [ 132.020593][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.026657][T10996] bond0: (slave bond_slave_1): Releasing backup interface [ 132.050489][T10996] team0: Port device team_slave_0 removed [ 132.058339][T10996] team0: Port device team_slave_1 removed [ 132.060523][T10996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.063529][T10996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.066676][T10996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.068796][T10996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.086374][T10997] team0: Mode changed to "broadcast" [ 132.089770][T10996] vlan0: entered promiscuous mode [ 132.094336][T10996] tipc: Started in network mode [ 132.095732][T10996] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 132.097814][T10996] tipc: Enabled bearer , priority 0 [ 132.171134][ T5946] Bluetooth: hci5: command 0x0c1a tx timeout [ 132.171173][ T5294] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.175610][ T5950] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.375174][ T25] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 132.385339][T11010] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1492'. [ 132.463842][T11014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11014 comm=syz.5.1494 [ 132.572872][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.589571][ T5981] usb 8-1: USB disconnect, device number 13 [ 132.593165][ T5981] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 132.635836][T11027] Invalid logical block size (585) [ 132.643629][T11028] 9pnet_virtio: no channels available for device syz [ 132.729815][T11041] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1501'. [ 132.811696][T11049] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 132.960686][T11063] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1507'. [ 133.068907][T11074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1510'. [ 133.123286][ T30] usb 9-1: USB disconnect, device number 9 [ 133.207273][T11090] syz.3.1515: attempt to access beyond end of device [ 133.207273][T11090] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 133.213672][ T25] tipc: Node number set to 11578026 [ 133.217369][T11090] syz.3.1515: attempt to access beyond end of device [ 133.217369][T11090] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 133.221242][T11090] syz.3.1515: attempt to access beyond end of device [ 133.221242][T11090] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 133.226113][T11090] syz.3.1515: attempt to access beyond end of device [ 133.226113][T11090] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 133.229750][T11090] syz.3.1515: attempt to access beyond end of device [ 133.229750][T11090] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 133.234085][T11090] syz.3.1515: attempt to access beyond end of device [ 133.234085][T11090] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 133.282174][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 133.289220][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 133.292597][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 133.377603][T11107] netlink: 'syz.4.1522': attribute type 21 has an invalid length. [ 133.521632][ T5950] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 133.911974][T11124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.933794][T11077] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 134.103392][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 134.103402][ T39] audit: type=1400 audit(1741010623.271:1057): avc: denied { setopt } for pid=11140 comm="syz.2.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.254288][ T5950] Bluetooth: hci5: command 0x0c1a tx timeout [ 134.327796][ T5950] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 134.426812][T11173] 9pnet_fd: Insufficient options for proto=fd [ 134.428762][T11174] nbd: must specify a device to reconfigure [ 134.443322][ T39] audit: type=1400 audit(1741010623.601:1058): avc: denied { validate_trans } for pid=11172 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 134.473757][ T39] audit: type=1400 audit(1741010623.641:1059): avc: denied { listen } for pid=11177 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.478956][ T39] audit: type=1400 audit(1741010623.641:1060): avc: denied { setopt } for pid=11177 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 134.618613][ T39] audit: type=1400 audit(1741010623.781:1061): avc: denied { write } for pid=11186 comm="syz.5.1546" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 134.740225][ T39] audit: type=1400 audit(1741010623.901:1062): avc: denied { attach_queue } for pid=11233 comm="syz.3.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.763848][T11236] 9pnet_virtio: no channels available for device ./file0 [ 134.857070][ T39] audit: type=1400 audit(1741010624.021:1063): avc: denied { map } for pid=11245 comm="syz.4.1561" path="/247/file0/blkio.bfq.io_wait_time_recursive" dev="9p" ino=36050232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.863218][T11246] netfs: Couldn't get user pages (rc=-14) [ 134.921704][T11252] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 135.083370][ T39] audit: type=1400 audit(1741010624.251:1064): avc: denied { getopt } for pid=11257 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 135.145198][T11263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.315510][T11279] netlink: 'syz.4.1573': attribute type 2 has an invalid length. [ 135.318137][ T5950] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 135.378652][T11284] kvm: user requested TSC rate below hardware speed [ 135.390098][ T39] audit: type=1400 audit(1741010624.551:1065): avc: denied { ioctl } for pid=11282 comm="syz.5.1574" path="socket:[39754]" dev="sockfs" ino=39754 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.732503][T11321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11321 comm=syz.3.1583 [ 135.738633][T11321] openvswitch: netlink: IP tunnel TTL not specified. [ 135.744585][ T39] audit: type=1400 audit(1741010624.911:1066): avc: denied { listen } for pid=11323 comm="syz.5.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 136.202076][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.205274][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.208258][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.211969][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.216466][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.219548][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.222627][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.225862][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.228781][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.232659][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.235707][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.238918][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.243192][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.246823][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.251844][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.256278][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.260392][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.264880][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.269465][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.273770][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.276962][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.280090][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.283665][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.286768][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.289843][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.292905][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.295902][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.299039][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.302384][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.305423][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.308566][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.311641][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.314645][T11352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.392851][T11368] __nla_validate_parse: 12 callbacks suppressed [ 136.392862][T11368] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1596'. [ 136.895577][T11381] tls_set_device_offload: netdev not found [ 136.928858][ T7858] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 136.981298][T11392] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1605'. [ 137.025655][T11395] virtio-fs: tag <(null)> not found [ 137.080206][T11400] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 137.090890][ T7858] usb 10-1: Using ep0 maxpacket: 16 [ 137.091054][T11400] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 137.093978][ T7858] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 137.096007][T11400] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 137.098657][T11400] bond3: (slave vcan1): making interface the new active one [ 137.099669][ T7858] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 137.105764][T11400] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 137.107961][ T7858] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.116003][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 137.116947][ T7858] usb 10-1: config 0 descriptor?? [ 137.121615][ T25] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 137.124123][ T7858] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input26 [ 137.174938][T11404] random: crng reseeded on system resumption [ 137.412419][ T5340] bcm5974 10-1:0.0: could not read from device [ 137.418467][ T7858] bcm5974 10-1:0.0: could not read from device [ 137.425692][ T5340] bcm5974 10-1:0.0: could not read from device [ 137.437206][ T7858] input: failed to attach handler mousedev to device input26, error: -5 [ 137.444541][ T5340] bcm5974 10-1:0.0: could not read from device [ 137.445097][ T7858] usb 10-1: USB disconnect, device number 3 [ 137.449527][T11415] overlayfs: missing 'workdir' [ 137.760826][ T30] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 137.911943][ T30] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.914215][ T30] usb 9-1: config 0 has no interface number 0 [ 137.915905][ T30] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.918742][ T30] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 137.921644][ T30] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 137.924747][ T30] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 137.927622][ T30] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 137.930313][ T30] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.934002][ T30] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.936444][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.940065][ T30] usb 9-1: config 0 descriptor?? [ 137.943143][T11419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.947214][ T30] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.148106][T11419] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -90 [ 138.152092][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.154440][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.157657][ T1455] usb 9-1: USB disconnect, device number 10 [ 138.161647][ T1455] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 138.728806][T11428] XFS (nullb0): Invalid superblock magic number [ 138.897816][T11448] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 138.906619][T11448] exFAT-fs (nullb0): invalid boot record signature [ 138.909259][T11448] exFAT-fs (nullb0): failed to read boot sector [ 138.912397][T11448] exFAT-fs (nullb0): failed to recognize exfat type [ 139.430831][ T6000] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 139.580824][ T6000] usb 10-1: Using ep0 maxpacket: 8 [ 139.583673][ T6000] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 139.585974][ T6000] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.588786][ T6000] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.591763][ T6000] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.594441][ T6000] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.598096][ T6000] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.600669][ T6000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.806176][ T6000] usb 10-1: usb_control_msg returned -32 [ 139.807817][ T6000] usbtmc 10-1:16.0: can't read capabilities [ 140.007537][T11474] lo speed is unknown, defaulting to 1000 [ 140.222469][T11492] lo speed is unknown, defaulting to 1000 [ 140.285709][ T5950] Bluetooth: hci0: unexpected event 0x23 length: 7 < 13 [ 140.317320][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1634'. [ 140.331070][T11500] sctp: [Deprecated]: syz.4.1635 (pid 11500) Use of int in max_burst socket option. [ 140.331070][T11500] Use struct sctp_assoc_value instead [ 140.390998][ T5950] Bluetooth: hci1: unexpected cc 0x0c2d length: 5 > 4 [ 140.392966][ T5950] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 140.472293][T11523] netlink: 'syz.4.1640': attribute type 10 has an invalid length. [ 140.494851][T11523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.530078][T11533] bridge_slave_1: entered allmulticast mode [ 140.567083][T11538] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1646'. [ 140.569485][T11539] vlan2: entered allmulticast mode [ 140.571828][T11539] batadv0: entered allmulticast mode [ 140.580516][T11539] batadv0: left allmulticast mode [ 140.611448][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 140.614361][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1647'. [ 140.639320][T11548] netlink: 'syz.3.1648': attribute type 7 has an invalid length. [ 140.641629][T11548] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1648'. [ 140.654836][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 140.654846][ T39] audit: type=1400 audit(1741010629.821:1073): avc: denied { write } for pid=11547 comm="syz.3.1648" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.664292][T11549] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 140.669369][ T39] audit: type=1400 audit(1741010629.841:1074): avc: denied { ioctl } for pid=11547 comm="syz.3.1648" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 140.671494][T11551] SELinux: syz.4.1649 (11551) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 140.706108][T11555] syz.4.1650: attempt to access beyond end of device [ 140.706108][T11555] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 140.709962][T11555] syz.4.1650: attempt to access beyond end of device [ 140.709962][T11555] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 140.713533][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 140.716731][T11555] syz.4.1650: attempt to access beyond end of device [ 140.716731][T11555] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 140.720137][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 140.724101][T11555] syz.4.1650: attempt to access beyond end of device [ 140.724101][T11555] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 140.727508][T11555] syz.4.1650: attempt to access beyond end of device [ 140.727508][T11555] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 140.730925][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 140.733487][T11555] syz.4.1650: attempt to access beyond end of device [ 140.733487][T11555] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 140.736900][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 140.739574][T11555] syz.4.1650: attempt to access beyond end of device [ 140.739574][T11555] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 140.743327][T11555] syz.4.1650: attempt to access beyond end of device [ 140.743327][T11555] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 140.746702][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 140.749231][T11555] syz.4.1650: attempt to access beyond end of device [ 140.749231][T11555] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 140.752710][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 140.755490][T11555] syz.4.1650: attempt to access beyond end of device [ 140.755490][T11555] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 140.760031][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 140.762801][T11555] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 140.765320][T11555] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 140.900249][T11566] sctp: [Deprecated]: syz.3.1653 (pid 11566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.900249][T11566] Use struct sctp_sack_info instead [ 140.975033][T11571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1655'. [ 141.043163][T11573] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.061757][T11573] kvm: pic: level sensitive irq not supported [ 141.062745][T11573] kvm: pic: non byte read [ 141.066618][T11573] kvm: pic: level sensitive irq not supported [ 141.067151][T11573] kvm: pic: non byte read [ 141.071538][T11573] kvm: pic: level sensitive irq not supported [ 141.071945][T11573] kvm: pic: non byte read [ 141.155099][T11577] 9pnet_virtio: no channels available for device syz [ 141.199540][ T39] audit: type=1400 audit(1741010630.361:1075): avc: denied { shutdown } for pid=11578 comm="syz.3.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.380179][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 141.382770][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 141.421315][ T5940] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 141.426760][ T5940] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz0 [ 141.508748][T11591] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 141.520227][T11591] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.698736][T11598] ufs: Invalid option: "grpquota" or missing value [ 141.700602][T11598] ufs: wrong mount options [ 141.784398][T11605] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1665'. [ 141.912136][T11613] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 142.012026][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1670'. [ 142.221924][ T39] audit: type=1326 audit(1741010631.391:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11627 comm="syz.3.1674" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ee1b8d169 code=0x0 [ 142.285652][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1676'. [ 142.885471][ T39] audit: type=1400 audit(1741010632.051:1077): avc: denied { remove_name } for pid=11576 comm="syz.2.1657" name="file0" dev="9p" ino=36050032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.891892][ T39] audit: type=1400 audit(1741010632.061:1078): avc: denied { unlink } for pid=11576 comm="syz.2.1657" name="file0" dev="9p" ino=36050032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.064496][ T39] audit: type=1400 audit(1741010632.231:1079): avc: denied { mount } for pid=11650 comm="syz.3.1681" name="/" dev="autofs" ino=44153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 143.222782][T11657] wireguard0: entered promiscuous mode [ 143.224405][T11657] wireguard0: entered allmulticast mode [ 143.229355][ T39] audit: type=1400 audit(1741010632.391:1080): avc: denied { ioctl } for pid=11656 comm="syz.2.1683" path="socket:[42299]" dev="sockfs" ino=42299 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.310823][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 143.317444][T11666] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1685'. [ 143.460803][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 143.464663][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.467524][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.470046][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 143.473179][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 143.476180][ T9] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.478783][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.483036][ T9] hub 8-1:1.0: bad descriptor, ignoring hub [ 143.483515][T11677] efs: cannot read volume header [ 143.484693][ T9] hub 8-1:1.0: probe with driver hub failed with error -5 [ 143.488441][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 143.489978][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 143.499616][ T9] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 143.500858][ T39] audit: type=1400 audit(1741010632.661:1081): avc: denied { bind } for pid=11675 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 143.503126][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 143.646048][T11689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1692'. [ 143.652249][T11692] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 143.655563][T11689] IPVS: stopping master sync thread 11692 ... [ 143.841868][ T6000] usb 8-1: USB disconnect, device number 14 [ 143.872738][ T39] audit: type=1400 audit(1741010633.041:1082): avc: denied { setopt } for pid=11704 comm="syz.2.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.914888][T11697] delete_channel: no stack [ 144.200815][ T7858] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 144.361990][ T7858] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.364249][ T7858] usb 7-1: config 0 has no interface number 0 [ 144.365933][ T7858] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.368852][ T7858] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.375466][ T7858] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 144.378504][ T7858] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 144.381625][ T7858] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.385176][ T7858] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.387671][ T7858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.391067][ T7858] usb 7-1: config 0 descriptor?? [ 144.393045][T11710] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 144.525639][T11715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1699'. [ 144.603773][T11717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.651576][T11720] tmpfs: Unknown parameter 'ƒpol' [ 144.821901][T11725] sch_fq: defrate 5 ignored. [ 144.825074][T11726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1702'. [ 144.935421][T11730] netlink: 'syz.4.1703': attribute type 3 has an invalid length. [ 144.937623][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 144.942638][T11732] netlink: 'syz.4.1703': attribute type 3 has an invalid length. [ 144.944865][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 145.934105][T11564] usbtmc 10-1:16.0: usb_control_msg returned -110 [ 145.948635][ T7858] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 145.959560][ T1325] usb 10-1: USB disconnect, device number 4 [ 146.057674][T11756] kvm: pic: non byte write [ 146.076113][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 146.076125][ T39] audit: type=1400 audit(1741010635.241:1087): avc: denied { unmount } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 146.124573][T11763] Bluetooth: hci3: Frame reassembly failed (-84) [ 146.127344][ T1226] Bluetooth: hci3: Frame reassembly failed (-84) [ 146.131728][T11763] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 146.216826][T11773] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 146.225585][T11773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.240184][T11775] bond2: (slave ip6erspan0): making interface the new active one [ 146.245407][T11775] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 146.271765][T11788] xt_hashlimit: size too large, truncated to 1048576 [ 146.311131][T11790] netlink: set zone limit has 8 unknown bytes [ 146.333342][T11790] kvm: Disabled LAPIC found during irq injection [ 146.352186][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'. [ 146.354779][T11794] netlink: 'syz.4.1716': attribute type 7 has an invalid length. [ 146.410639][T11799] Bluetooth: Invalid esc byte 0x03 [ 146.430661][T11799] netfs: Couldn't get user pages (rc=-14) [ 146.443642][ T39] audit: type=1400 audit(1741010635.611:1088): avc: denied { create } for pid=11798 comm="syz.4.1717" name=8CFF7CF908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 146.464543][ T6000] usb 7-1: USB disconnect, device number 15 [ 146.481065][ T6000] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 146.606295][T11810] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.867198][ T5946] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 146.870235][T11827] netlink: 'syz.3.1726': attribute type 4 has an invalid length. [ 147.175065][T11839] Cannot find del_set index 4 as target [ 147.212326][T11843] __nla_validate_parse: 4 callbacks suppressed [ 147.212343][T11843] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1732'. [ 147.254003][T11847] vlan2: entered promiscuous mode [ 147.256080][T11847] vlan2: entered allmulticast mode [ 147.257589][T11847] hsr_slave_1: entered allmulticast mode [ 147.262461][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 147.367598][T11847] hsr_slave_1 (unregistering): left allmulticast mode [ 147.376476][T11847] hsr_slave_1 (unregistering): left promiscuous mode [ 147.527978][ T39] audit: type=1400 audit(1741010636.691:1089): avc: denied { connect } for pid=11862 comm="syz.4.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.574819][T11866] lo speed is unknown, defaulting to 1000 [ 147.712702][ T39] audit: type=1400 audit(1741010636.881:1090): avc: denied { accept } for pid=11882 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 147.762380][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 147.797687][T11896] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1747'. [ 147.837681][ T39] audit: type=1804 audit(1741010637.001:1091): pid=11900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1748" name="/newroot/217/file0/file0" dev="ramfs" ino=42629 res=1 errno=0 [ 147.896070][T11902] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1750'. [ 148.055399][T11917] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 148.060935][T11917] overlayfs: failed to resolve './file1': -2 [ 148.080857][ T1325] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 148.170833][ T5950] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 148.207386][ T39] audit: type=1400 audit(1741010637.371:1092): avc: denied { remount } for pid=11922 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.217542][ T39] audit: type=1400 audit(1741010637.381:1093): avc: denied { mounton } for pid=11922 comm="syz.2.1757" path="/224/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 148.232042][ T1325] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 148.235083][ T1325] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.237616][ T1325] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.240031][ T1325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.244551][T11894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.248018][ T1325] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.352847][T11928] hid-generic 0003:0627:0001.0001: pid 11928 passed too short report [ 148.353714][T11931] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.359745][ T5950] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 148.388072][T11933] netlink: 'syz.5.1760': attribute type 20 has an invalid length. [ 148.448170][ T1325] usb 9-1: USB disconnect, device number 11 [ 148.783818][T11962] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 148.815445][T11964] lo speed is unknown, defaulting to 1000 [ 148.898691][T11967] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1771'. [ 149.125528][ T39] audit: type=1400 audit(1741010638.291:1094): avc: denied { listen } for pid=11968 comm="syz.3.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.132188][ T5950] ================================================================== [ 149.134435][ T5950] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0x16a/0x170 [ 149.136643][ T5950] Read of size 8 at addr ffff88804e022188 by task kworker/u33:4/5950 [ 149.139671][ T5950] [ 149.140874][ T5950] CPU: 3 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted 6.14.0-rc5-syzkaller #0 [ 149.140888][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.140908][ T5950] Workqueue: hci1 hci_rx_work [ 149.140927][ T5950] Call Trace: [ 149.140931][ T5950] [ 149.140936][ T5950] dump_stack_lvl+0x116/0x1f0 [ 149.140951][ T5950] print_report+0xc3/0x670 [ 149.140964][ T5950] ? __virt_addr_valid+0x5e/0x590 [ 149.140976][ T5950] ? __phys_addr+0xc6/0x150 [ 149.140988][ T5950] kasan_report+0xd9/0x110 [ 149.140998][ T5950] ? l2cap_sock_ready_cb+0x16a/0x170 [ 149.141015][ T5950] ? l2cap_sock_ready_cb+0x16a/0x170 [ 149.141032][ T5950] l2cap_sock_ready_cb+0x16a/0x170 [ 149.141049][ T5950] l2cap_le_start+0x1ec/0xe40 [ 149.141062][ T5950] ? __pfx___mutex_lock+0x10/0x10 [ 149.141075][ T5950] ? __pfx_l2cap_le_start+0x10/0x10 [ 149.141087][ T5950] ? do_raw_read_unlock+0x44/0xe0 [ 149.141098][ T5950] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 149.141112][ T5950] ? __l2cap_chan_add+0x3ed/0xa30 [ 149.141127][ T5950] l2cap_connect_cfm+0x99f/0xf10 [ 149.141142][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 149.141157][ T5950] ? hci_cb_lookup+0x319/0x4e0 [ 149.141173][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 149.141187][ T5950] le_conn_complete_evt+0x168d/0x1da0 [ 149.141202][ T5950] ? __pfx_lock_release+0x10/0x10 [ 149.141216][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 149.141233][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 149.141249][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 149.141264][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 149.141279][ T5950] hci_event_packet+0x666/0x1180 [ 149.141293][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 149.141309][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 149.141323][ T5950] ? mark_held_locks+0x9f/0xe0 [ 149.141336][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 149.141352][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.141365][ T5950] hci_rx_work+0x2c5/0x16b0 [ 149.141380][ T5950] ? process_one_work+0x921/0x1ba0 [ 149.141395][ T5950] process_one_work+0x9c5/0x1ba0 [ 149.141410][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 149.141425][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 149.141440][ T5950] ? assign_work+0x1a0/0x250 [ 149.141461][ T5950] worker_thread+0x6c8/0xf00 [ 149.141477][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 149.141492][ T5950] kthread+0x3af/0x750 [ 149.141504][ T5950] ? __pfx_kthread+0x10/0x10 [ 149.141528][ T5950] ? lock_acquire+0x2f/0xb0 [ 149.141543][ T5950] ? __pfx_kthread+0x10/0x10 [ 149.141556][ T5950] ret_from_fork+0x45/0x80 [ 149.141572][ T5950] ? __pfx_kthread+0x10/0x10 [ 149.141585][ T5950] ret_from_fork_asm+0x1a/0x30 [ 149.141601][ T5950] [ 149.141605][ T5950] [ 149.180807][ T1325] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 149.181560][ T5950] Allocated by task 11974: [ 149.216453][ T5950] kasan_save_stack+0x33/0x60 [ 149.217783][ T5950] kasan_save_track+0x14/0x30 [ 149.219099][ T5950] __kasan_kmalloc+0xaa/0xb0 [ 149.220387][ T5950] __kmalloc_noprof+0x21c/0x510 [ 149.221764][ T5950] sk_prot_alloc+0x1a8/0x2a0 [ 149.223053][ T5950] sk_alloc+0x36/0xc20 [ 149.224195][ T5950] bt_sock_alloc+0x3b/0x3a0 [ 149.225481][ T5950] l2cap_sock_alloc.constprop.0+0x33/0x1d0 [ 149.227104][ T5950] l2cap_sock_create+0x123/0x1f0 [ 149.228498][ T5950] bt_sock_create+0x182/0x350 [ 149.229820][ T5950] __sock_create+0x335/0x8d0 [ 149.231115][ T5950] __sys_socket+0x14f/0x260 [ 149.232389][ T5950] __x64_sys_socket+0x72/0xb0 [ 149.233722][ T5950] do_syscall_64+0xcd/0x250 [ 149.234996][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.236636][ T5950] [ 149.237333][ T5950] Freed by task 11974: [ 149.238471][ T5950] kasan_save_stack+0x33/0x60 [ 149.239812][ T5950] kasan_save_track+0x14/0x30 [ 149.241138][ T5950] kasan_save_free_info+0x3b/0x60 [ 149.242556][ T5950] __kasan_slab_free+0x51/0x70 [ 149.243902][ T5950] kfree+0x2c4/0x4d0 [ 149.245019][ T5950] __sk_destruct+0x5ef/0x6f0 [ 149.246314][ T5950] sk_destruct+0xc2/0xf0 [ 149.247498][ T5950] __sk_free+0xf4/0x3e0 [ 149.248666][ T5950] sk_free+0x6a/0x90 [ 149.249780][ T5950] l2cap_sock_kill+0x171/0x2d0 [ 149.251110][ T5950] l2cap_sock_release+0x189/0x210 [ 149.252505][ T5950] __sock_release+0xb0/0x270 [ 149.253806][ T5950] sock_close+0x1c/0x30 [ 149.254975][ T5950] __fput+0x3ff/0xb70 [ 149.256104][ T5950] task_work_run+0x14e/0x250 [ 149.257404][ T5950] syscall_exit_to_user_mode+0x27b/0x2a0 [ 149.259094][ T5950] do_syscall_64+0xda/0x250 [ 149.260385][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.262067][ T5950] [ 149.262749][ T5950] The buggy address belongs to the object at ffff88804e022000 [ 149.262749][ T5950] which belongs to the cache kmalloc-2k of size 2048 [ 149.266498][ T5950] The buggy address is located 392 bytes inside of [ 149.266498][ T5950] freed 2048-byte region [ffff88804e022000, ffff88804e022800) [ 149.270249][ T5950] [ 149.270946][ T5950] The buggy address belongs to the physical page: [ 149.272694][ T5950] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4e020 [ 149.275080][ T5950] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.277381][ T5950] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.279534][ T5950] page_type: f5(slab) [ 149.280661][ T5950] raw: 00fff00000000040 ffff88801b042f00 0000000000000000 dead000000000001 [ 149.283023][ T5950] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 149.285296][ T5950] head: 00fff00000000040 ffff88801b042f00 0000000000000000 dead000000000001 [ 149.287606][ T5950] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 149.289966][ T5950] head: 00fff00000000003 ffffea0001380801 ffffffffffffffff 0000000000000000 [ 149.292314][ T5950] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 149.294630][ T5950] page dumped because: kasan: bad access detected [ 149.296377][ T5950] page_owner tracks the page as allocated [ 149.297928][ T5950] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5939, tgid 5939 (syz-executor), ts 46148143928, free_ts 0 [ 149.303183][ T5950] post_alloc_hook+0x181/0x1b0 [ 149.304552][ T5950] get_page_from_freelist+0xfce/0x2f80 [ 149.306068][ T5950] __alloc_frozen_pages_noprof+0x221/0x2470 [ 149.307698][ T5950] alloc_pages_mpol+0x1fc/0x540 [ 149.309064][ T5950] new_slab+0x23d/0x330 [ 149.310241][ T5950] ___slab_alloc+0xc5d/0x1720 [ 149.311546][ T5950] __slab_alloc.constprop.0+0x56/0xb0 [ 149.313051][ T5950] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 149.314814][ T5950] kmalloc_reserve+0xef/0x2c0 [ 149.316121][ T5950] pskb_expand_head+0x243/0x1240 [ 149.317518][ T5950] netlink_trim+0x22d/0x310 [ 149.318786][ T5950] netlink_broadcast_filtered+0xc7/0xef0 [ 149.320344][ T5950] nlmsg_notify+0x9e/0x220 [ 149.321626][ T5950] rtmsg_ifinfo+0x174/0x1a0 [ 149.322897][ T5950] __dev_notify_flags+0x24e/0x2e0 [ 149.324283][ T5950] rtnl_configure_link+0x1b7/0x260 [ 149.325627][ T5950] page_owner free stack trace missing [ 149.327102][ T5950] [ 149.327787][ T5950] Memory state around the buggy address: [ 149.329336][ T5950] ffff88804e022080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.331519][ T5950] ffff88804e022100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.331987][ T1325] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.333721][ T5950] >ffff88804e022180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.336719][ T1325] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.338916][ T5950] ^ [ 149.342780][ T5950] ffff88804e022200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.344956][ T5950] ffff88804e022280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.347156][ T5950] ================================================================== [ 149.349744][ T5950] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.351707][ T5950] CPU: 3 UID: 0 PID: 5950 Comm: kworker/u33:4 Not tainted 6.14.0-rc5-syzkaller #0 [ 149.354227][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.357164][ T5950] Workqueue: hci1 hci_rx_work [ 149.358495][ T5950] Call Trace: [ 149.359433][ T5950] [ 149.360273][ T5950] dump_stack_lvl+0x3d/0x1f0 [ 149.361594][ T5950] panic+0x71d/0x800 [ 149.362696][ T5950] ? __pfx_panic+0x10/0x10 [ 149.363970][ T5950] ? irqentry_exit+0x3b/0x90 [ 149.365285][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.366725][ T5950] ? preempt_schedule_thunk+0x1a/0x30 [ 149.368214][ T5950] ? preempt_schedule_common+0x44/0xc0 [ 149.369747][ T5950] check_panic_on_warn+0xab/0xb0 [ 149.371223][ T5950] end_report+0x117/0x180 [ 149.372443][ T5950] kasan_report+0xe9/0x110 [ 149.373691][ T5950] ? l2cap_sock_ready_cb+0x16a/0x170 [ 149.375198][ T5950] ? l2cap_sock_ready_cb+0x16a/0x170 [ 149.376651][ T5950] l2cap_sock_ready_cb+0x16a/0x170 [ 149.378096][ T5950] l2cap_le_start+0x1ec/0xe40 [ 149.379448][ T5950] ? __pfx___mutex_lock+0x10/0x10 [ 149.380860][ T5950] ? __pfx_l2cap_le_start+0x10/0x10 [ 149.382343][ T5950] ? do_raw_read_unlock+0x44/0xe0 [ 149.383741][ T5950] ? __pfx_l2cap_global_fixed_chan+0x10/0x10 [ 149.385420][ T5950] ? __l2cap_chan_add+0x3ed/0xa30 [ 149.386826][ T5950] l2cap_connect_cfm+0x99f/0xf10 [ 149.388194][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 149.389740][ T5950] ? hci_cb_lookup+0x319/0x4e0 [ 149.391095][ T5950] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 149.392607][ T5950] le_conn_complete_evt+0x168d/0x1da0 [ 149.394111][ T5950] ? __pfx_lock_release+0x10/0x10 [ 149.395513][ T5950] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 149.397056][ T5950] hci_le_conn_complete_evt+0x23c/0x370 [ 149.398543][ T5950] hci_le_meta_evt+0x2e2/0x5d0 [ 149.399884][ T5950] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 149.401554][ T5950] hci_event_packet+0x666/0x1180 [ 149.402880][ T5950] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 149.404343][ T5950] ? __pfx_hci_event_packet+0x10/0x10 [ 149.405863][ T5950] ? mark_held_locks+0x9f/0xe0 [ 149.407201][ T5950] ? kcov_remote_start+0x3cf/0x6e0 [ 149.408637][ T5950] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.410115][ T5950] hci_rx_work+0x2c5/0x16b0 [ 149.411398][ T5950] ? process_one_work+0x921/0x1ba0 [ 149.412834][ T5950] process_one_work+0x9c5/0x1ba0 [ 149.414230][ T5950] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 149.415787][ T5950] ? __pfx_process_one_work+0x10/0x10 [ 149.417294][ T5950] ? assign_work+0x1a0/0x250 [ 149.418600][ T5950] worker_thread+0x6c8/0xf00 [ 149.419916][ T5950] ? __pfx_worker_thread+0x10/0x10 [ 149.421338][ T5950] kthread+0x3af/0x750 [ 149.422490][ T5950] ? __pfx_kthread+0x10/0x10 [ 149.423780][ T5950] ? lock_acquire+0x2f/0xb0 [ 149.425056][ T5950] ? __pfx_kthread+0x10/0x10 [ 149.426351][ T5950] ret_from_fork+0x45/0x80 [ 149.427599][ T5950] ? __pfx_kthread+0x10/0x10 [ 149.428909][ T5950] ret_from_fork_asm+0x1a/0x30 [ 149.430278][ T5950] [ 149.431688][ T5950] Kernel Offset: disabled [ 149.432888][ T5950] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:59:42 Registers: info registers vcpu 0 CPU#0 RAX=000000000018b437 RBX=0000000000000000 RCX=ffffffff8b574469 RDX=0000000000000000 RSI=ffffffff8b6ced60 RDI=ffffffff8bd359e0 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6f85 R10=ffff88806a637c2b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90625910 R15=0000000000000000 RIP=ffffffff8b57584f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c414c4f CR3=00000000626e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 782af0bbbd891b3d 833f9ed81fecbb67 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba28f19f1c33fb47 f685bae9539cf6c7 a2d651d27275529c 188ca9a5cdd0c6de ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b4cdd100 00007f97b417c440 00007f97b4170004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b417c498 00007f97b417c490 00007f97b417c488 00007f97b417c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff888013784900 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffff88806a73ec18 RBP=ffff88806a73ec00 RSP=ffffc90004bafa48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888013784880 R13=00000000ffffffff R14=ffff888013784900 R15=dffffc0000000000 RIP=ffffffff8b5735e5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555571ec808 CR3=000000002994c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=6059caa96059caa9 6059caa96059caa9 6059caa96059caa9 6059caa96059caa9 6059caa96059caa9 6059caa96059caa9 6059caa96059caa9 6059caa96059caa9 ZMM22=483ac326483ac326 483ac326483ac326 483ac326483ac326 483ac326483ac326 483ac326483ac326 483ac326483ac326 483ac326483ac326 483ac326483ac326 ZMM23=3543c60c3543c60c 3543c60c3543c60c 3543c60c3543c60c 3543c60c3543c60c 3543c60c3543c60c 3543c60c3543c60c 3543c60c3543c60c 3543c60c3543c60c ZMM24=ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ad9c9e81ad9c9e81 ZMM25=f521f555f521f555 f521f555f521f555 f521f555f521f555 f521f555f521f555 f521f555f521f555 f521f555f521f555 f521f555f521f555 f521f555f521f555 ZMM26=bc8dc200bc8dc200 bc8dc200bc8dc200 bc8dc200bc8dc200 bc8dc200bc8dc200 bc8dc200bc8dc200 bc8dc200bc8dc200 bc8dc200bc8dc200 bc8dc200bc8dc200 ZMM27=2f796fd92f796fd9 2f796fd92f796fd9 2f796fd92f796fd9 2f796fd92f796fd9 2f796fd92f796fd9 2f796fd92f796fd9 2f796fd92f796fd9 2f796fd92f796fd9 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4908000049080000 4908000049080000 4908000049080000 4908000049080000 4908000049080000 4908000049080000 4908000049080000 4908000049080000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a83fbc0 RCX=ffffffff81a03ac4 RDX=0000000000000000 RSI=ffffffff8bd35960 RDI=ffffffff8dab2cf0 RBP=0000000000000000 RSP=ffffc90003e4fb10 R8 =0000000000000000 R9 =fffffbfff20c4b22 R10=ffffffff90625917 R11=0000000000000000 R12=0000000000000002 R13=ffff888013782440 R14=ffff888013782440 R15=ffff88806a83ec00 RIP=ffffffff81a10b3b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a4a8f CR3=000000004dd8e000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000008 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004000040 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffefc00c9a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f97b400f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85408875 RDI=ffffffff9ab80780 RBP=ffffffff9ab80740 RSP=ffffc90003d87110 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035393554 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9ab80740 R15=0000000000000000 RIP=ffffffff8540889f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c35f351 CR3=0000000034f50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1c0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1c0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1c0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1c0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1c0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1c0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1d7c488 00007f4ee1d7c480 00007f4ee1d7c478 00007f4ee1d7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee28dd100 00007f4ee1d7c440 00007f4ee1d70004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ee1d7c498 00007f4ee1d7c490 00007f4ee1d7c488 00007f4ee1d7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000