last executing test programs: 1.557121902s ago: executing program 2 (id=578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0xfff5) 1.553855117s ago: executing program 2 (id=580): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000140)={0x7, "a164c2ff3a839d6225acc1c548a86660e2ce7077eb680232d934b62f7a7d1646bce0f7715f7ca40e6db4e75a8303b37f29e3cf2b510b5929147ab672a7a91837", {0x2}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pI4 \x00'}, 0x20) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x800, 0x101) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x10}}, 0x40044) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2000000}, {0x7, 0x0, 0x4, 0xfffffffffffffffe}, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xa, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.479534311s ago: executing program 0 (id=584): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) accept4$x25(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0501030000000a0000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202ed01000004004c00"], 0x2c}}, 0x4004050) 729.74197ms ago: executing program 3 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4023}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601801e"], 0x26c0}}, 0x4010) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r5 = socket$inet6(0xa, 0x805, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00000000000800120000000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ffffffff00030000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000040004002f00"/183], 0xc0}}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x9, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0xc0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076"], 0xfc}}, 0x0) lseek(r5, 0xd2bc, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x48, 0x32, 0x2, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x105, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x48}}, 0x0) 685.255821ms ago: executing program 3 (id=586): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x16, 0x4}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a00110001", 0x13) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x20, 0x1}, {0x47, 0x2}, @const={0x4, {0xff80, 0x61, 0x2, 0x7}}}) r2 = socket$caif_stream(0x25, 0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c400) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xf474e34c21460124, 0x11a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000500), 0x468000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0600000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="020000000100000000a90000000000000000cb"], 0x50) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000010000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a01010000000000000000010000000900030073797a310000000008000a40000000040900010073797a30000000004c000000060a01040000000000000000010000002400048020000180070001cd727400001400028008000240007cc903080001400000000308000b40000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x2404c811}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002008000b7880000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500007b0000000085000000180000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x4, 0x7, 0xd, 0x3, 0x44, @empty, @loopback, 0x1, 0x20, 0x4, 0x800}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000009400000094000000040000000a0000000000000a010000000e00000000000001000000005a001801100000000000000a000000000700000003000006040000000c000000050000000b000000fdffffff0e00000008aff1a79a9c7e08c68caf6d6f6739ee1c030000009e00000300000d000000000d0000000500000004000000040000000d00002f2400000000000000000000030000000002000000050000000d000000"], &(0x7f0000000500), 0xb0, 0x0, 0x0, 0x1, 0x10000, @value=r4}, 0x28) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff3000/0xc000)=nil) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="3a5d0000070000a8b1fdff5633f9c5e937000000"], &(0x7f0000000300)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x10, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x40000008, 0xfffffff9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r4, r11, r4, r4, r11], &(0x7f0000000600)=[{0x3, 0xf3e, 0x6, 0x3}, {0x0, 0x3, 0x10, 0x2}], 0x10, 0x2, @void, @value}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 684.997443ms ago: executing program 2 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x5}, 0x9}}}, 0x7) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f00000001c0)=ANY=[@ANYBLOB="7569643dd3256c9dd07127d9a8daf8977175b046eeb0506ffc0c972b423cf16a9f7080f02f6c7bc57f462a53ec2a66beee91e9c0d4873c10249be07a39931eb4bba86c426a3d3cee35badccd3e310c36053f175214279f1641d61b9903a946f4220c72150461533874106ef813d757eaeb446298e8a2b40bd22307be600c36bcbd6dcdc582386f36f411dc71e25b7d608b61bb00ed", @ANYRESHEX=0xee00]) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) 599.583362ms ago: executing program 2 (id=589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)={0x1}) (async) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000200)={0x1}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) ioctl$HIDIOCGRDESC(r5, 0x90044802, 0x0) read$FUSE(r5, 0x0, 0x4e) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xffffffe7, &(0x7f0000000400)={&(0x7f0000000900)={0xc4, 0x2, 0x2, 0x300, 0x0, 0x0, {}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0xbd35}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0x58, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @private=0xa010101}, {0x0, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x0, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x55}, 0x48000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r10}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYBLOB='L'], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008064) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYBLOB='L'], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008064) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) 529.831556ms ago: executing program 0 (id=591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1}, 0x20) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 529.253737ms ago: executing program 0 (id=593): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}], 0x50, 0x0, &(0x7f0000000780)="797bd5fce90c526ba52b7472755c4a03605ab2fb409d9cdfe3425e6310ded14fb7fe0af5216125b3bdae4b89d2110eb96292be3114c05ba03d734a0683316c8657a7ae3f065be6101072e0c52295eeb8"}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x8, 0xffffff6f, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, @remote, 0x10, 0x80, 0x200, 0x400}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200649b5bb6000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x9ce5, 0x81, 0x6, 0x584ac, r1, 0x4, '\x00', r6, r8, 0x4, 0x5, 0x1, 0x0, @value=r1, @void, @value=r1}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x48}]}, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x39, &(0x7f00000003c0)=""/57, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x42, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x3, 0x3, 0x1}, {0x3, 0x5, 0x9, 0x3}, {0x0, 0x3, 0xc, 0xc}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x5, 0xc1, &(0x7f0000000140)=""/193, 0x40f00, 0x20, '\x00', r6, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x2, 0x2b, 0x7}, 0x10, r9, r10, 0x2, &(0x7f00000005c0)=[0x1], &(0x7f0000000600)=[{0x5, 0x2, 0xb, 0x2}, {0x5, 0x2, 0x5, 0xc}], 0x10, 0x1a2, @void, @value}, 0x94) 459.884065ms ago: executing program 3 (id=594): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfe31) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000080)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10, 0x0}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="f1e600000000000000f01200000008000300", @ANYRES32=r6, @ANYBLOB="040013000500190002000000060012000400000006001000fa0000000a000600"], 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 459.657488ms ago: executing program 0 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000006207000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='bcache_journal_write\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000340)=""/191, 0xbf}], 0x4) 459.403ms ago: executing program 2 (id=596): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000200000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000dc461f000100160c000000000000008300a60011000000000306000000080000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f0000000180)}, 0x24004800) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0x7, {0x5, 0x8, 0x5, 0x6}}) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000002c0)={0x9, @win={{0x8, 0x6, 0xfffffffd, 0xe2}, 0x2, 0x7, 0x0, 0x6, 0x0, 0x3}}) 406.210838ms ago: executing program 0 (id=598): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="70fa", 0x2}], 0x1}}], 0x1, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0xc008ae09, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4]) r5 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001b6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) read(r5, &(0x7f0000000280)=""/96, 0x60) 406.114967ms ago: executing program 2 (id=599): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) accept4$x25(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 337.333473ms ago: executing program 3 (id=601): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080), 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600060000000800090001000000050002"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x6d, 0xff, 0xffff, 0x31, @loopback, @mcast2, 0x7, 0x10, 0x1, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2d, 0x3, 0x6, 0x8001, 0x23, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40, 0x0, 0x4, 0x8}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x15c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xfc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf6, 0x4, "d8d89b9a75143edf18f2955787cd3f7e6fb015c650d876679af8346b5053fc7a51b9d6776152cb6f25dc083f172532fc12df17c44b98945b7ad63c28c9285aa269271a74f95ad38a8fb9dacb76fdb29e5d216d07493e95b21963e898e092d30cd7949741e456b5dfe26ea43e9a9eb3b3089c803b7bf3d9897b16ab88fa5e202b3e310599090a6931b5793bdcaae07cecbc6366e22764af067cb1a566e8d19b7ddbdc8e19c0838e372575a33cfccbfeb9a0875e90dcfce284dba6d62fdde5e69fbbd131b3fd2c62b9805b3c5607edd86047bf88389ec283b2d1e44d6a255cd3a4bcb24991d0b0a9d699b2d721aa04c32ab814"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x50, r0, 0x9c30e000) close(r0) 260.178812ms ago: executing program 0 (id=604): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x46) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x2, 0xd, 0x5}}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f32646467660f01000000000000007124c4a179d64a0067362e0f"], 0x56}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0xa, 0x0, 0xf1, 0x80000000000, 0x8000000000000, 0x200000000000005, 0x0, 0x9, 0x1, 0x0, 0xc5dc, 0x4000000000000007], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 259.668261ms ago: executing program 1 (id=605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f0000000140)=r0}, 0x20) 192.18707ms ago: executing program 1 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0xfff5}, 0x0) 191.745462ms ago: executing program 1 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340), 0x100000, &(0x7f00000004c0)={[{@uuid_on}, {@metacopy_off}, {@verity_require}, {@verity_off}, {@nfs_export_off}, {@nfs_export_off}, {@uuid_null}, {@verity_off}], [{@dont_measure}]}) chdir(&(0x7f0000000140)='./bus\x00') stat(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() r2 = socket(0x22, 0x2, 0x2) accept(r2, 0x0, 0x0) mount$9p_xen(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1202400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=xen,ignoreqv,uname=lowerdir,uname=,,{)/$,dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',noxattr,access=', @ANYRESDEC, @ANYBLOB="97a499beac86780b8e", @ANYRESDEC=0xee00, @ANYBLOB="2c6d61736b3d4d41595f455845432c646f6e745f6d6561737572652c6f626a5f757365723d283a2c282c66736e616d653d6f7665726c6179002c6f626a5f757365723d009992d88ed821e216af66de08060045fc688c5eb2619f487cccbb104c8063d74fd3881fcca52c6673757569643d37346634626534542d616664342d373000362d619c34332d32633862623164342c00"]) keyctl$join(0x1, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x2c41, 0x0) getdents64(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x1a9}}}}]}]}, 0x68}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002000010324bd7002fddbdf2501"], 0x14}}, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8947, &(0x7f0000000000)) r7 = landlock_create_ruleset(&(0x7f0000000040)={0xa020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x3) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) 191.547976ms ago: executing program 3 (id=608): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000e09000000e9ffffffff1711000000b255d418b181be8126600004000064f7e104ad4f4b31d5f1c8f5dac3945bd5f326d7c4879d266f0d4502b1be97c2161903b7d32c220700000093f318d45e8c000000000000003369cd89f74853a32a297d98e8475fbc34aaa1feff262117507bdf0aedba832f7e26b8bacd637285e357cf286a0c5e5af043add55686cb0d911ade2b3315aa9498ff5dc29fb49eff58850a6b430dcaf91c70f81b9b98b8f93bda5a2a132f908ea48eacda3e2371562d283a9db7feab05e11a3639f1ab31c8e4acfd776341c3312316cc950100000080690f925342bd6922243097", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0xfdef) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x5, 0x0, 0x3017, 0x1ff, 0x7, 0x8, 0x6, 0x1}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r7) (async) tkill(r7, 0x12) (async) ptrace(0x4208, r7) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x27, 0x3}}) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc90a0a2f0d31030000007e84a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4170400000000000000b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be5397b1e3e98684ee059853", 0xa1, 0x84, 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff4d}, &(0x7f00000000c0)=0x40) bind$nfc_llcp(r4, &(0x7f00000002c0)={0x27, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x800000000000003c}, 0x60) 89.174573ms ago: executing program 3 (id=609): clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$phonet(0x23, 0x2, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f00000000c0)) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff4, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) socket$phonet(0x23, 0x2, 0x1) (async) getpid() (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f00000000c0)) (async) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 88.940151ms ago: executing program 1 (id=610): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x4e20, @loopback}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000100)="520003000100b8", 0x7) 86.540904ms ago: executing program 1 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0xfffffff5) 0s ago: executing program 1 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1000, 0x6, 0x2, 0x11, r1, 0x40, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xf, @void, @value, @void, @value}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAME(r4, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x80010, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10030, 0xffffffffffffffff, 0x10000000) r7 = socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x30, 0x2, r7, &(0x7f0000000100)=0x80, &(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, 0x800, 0x1}) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r9, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): [ 38.121773][ T40] audit: type=1400 audit(1748909327.310:59): avc: denied { write } for pid=5839 comm="sh" path="pipe:[4093]" dev="pipefs" ino=4093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 38.131784][ T40] audit: type=1400 audit(1748909327.310:60): avc: denied { rlimitinh } for pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.139817][ T40] audit: type=1400 audit(1748909327.310:61): avc: denied { siginh } for pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:62994' (ED25519) to the list of known hosts. [ 39.051290][ T40] audit: type=1400 audit(1748909328.250:62): avc: denied { name_bind } for pid=5848 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.071051][ T40] audit: type=1400 audit(1748909328.270:63): avc: denied { write } for pid=5849 comm="sh" path="pipe:[7184]" dev="pipefs" ino=7184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 39.084137][ T40] audit: type=1400 audit(1748909328.290:64): avc: denied { execute } for pid=5849 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.090822][ T40] audit: type=1400 audit(1748909328.290:65): avc: denied { execute_no_trans } for pid=5849 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.059561][ T5849] cgroup: Unknown subsys name 'net' [ 41.062958][ T40] audit: type=1400 audit(1748909330.260:66): avc: denied { mounton } for pid=5849 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.185417][ T5849] cgroup: Unknown subsys name 'cpuset' [ 41.190118][ T5849] cgroup: Unknown subsys name 'rlimit' [ 41.419455][ T5854] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.164973][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.285942][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 45.285956][ T40] audit: type=1400 audit(1748909334.490:80): avc: denied { execmem } for pid=5926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.497943][ T40] audit: type=1400 audit(1748909334.700:81): avc: denied { create } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.532796][ T40] audit: type=1400 audit(1748909334.700:82): avc: denied { read write } for pid=5932 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.538143][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.542027][ T40] audit: type=1400 audit(1748909334.700:83): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.545636][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.556032][ T40] audit: type=1400 audit(1748909334.720:84): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="socket:[7214]" dev="sockfs" ino=7214 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.557795][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.561509][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.563078][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.563744][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.563980][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.564533][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.564891][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.565305][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.567876][ T5934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.569977][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.570474][ T5942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.571372][ T5942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.571514][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.572051][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.572742][ T5934] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.575038][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.581535][ T40] audit: type=1400 audit(1748909334.780:85): avc: denied { read } for pid=5936 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.586397][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.587213][ T40] audit: type=1400 audit(1748909334.780:86): avc: denied { open } for pid=5936 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.590049][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.591347][ T40] audit: type=1400 audit(1748909334.780:87): avc: denied { mounton } for pid=5936 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.786040][ T40] audit: type=1400 audit(1748909334.990:88): avc: denied { module_request } for pid=5945 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.845445][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.875045][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 46.006120][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 46.015474][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 46.025107][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.027922][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.030455][ T5945] bridge_slave_0: entered allmulticast mode [ 46.033506][ T5945] bridge_slave_0: entered promiscuous mode [ 46.077151][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.079416][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.081688][ T5936] bridge_slave_0: entered allmulticast mode [ 46.084435][ T5936] bridge_slave_0: entered promiscuous mode [ 46.087864][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.090100][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.092336][ T5936] bridge_slave_1: entered allmulticast mode [ 46.094992][ T5936] bridge_slave_1: entered promiscuous mode [ 46.116287][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.119872][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.123105][ T5945] bridge_slave_1: entered allmulticast mode [ 46.126216][ T5945] bridge_slave_1: entered promiscuous mode [ 46.209004][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.227358][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.243598][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.248109][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.389117][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.391520][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.394023][ T5941] bridge_slave_0: entered allmulticast mode [ 46.396703][ T5941] bridge_slave_0: entered promiscuous mode [ 46.399436][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.402433][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.406864][ T5932] bridge_slave_0: entered allmulticast mode [ 46.410769][ T5932] bridge_slave_0: entered promiscuous mode [ 46.418705][ T5936] team0: Port device team_slave_0 added [ 46.435064][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.437813][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.440091][ T5941] bridge_slave_1: entered allmulticast mode [ 46.443438][ T5941] bridge_slave_1: entered promiscuous mode [ 46.445874][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.448906][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.451878][ T5932] bridge_slave_1: entered allmulticast mode [ 46.456947][ T5932] bridge_slave_1: entered promiscuous mode [ 46.462503][ T5936] team0: Port device team_slave_1 added [ 46.467349][ T5945] team0: Port device team_slave_0 added [ 46.538456][ T5945] team0: Port device team_slave_1 added [ 46.568631][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.570849][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.579005][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.597723][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.603217][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.606471][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.608677][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.616515][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.634624][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.639444][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.659830][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.661971][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.670559][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.704508][ T5941] team0: Port device team_slave_0 added [ 46.709366][ T5941] team0: Port device team_slave_1 added [ 46.727677][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.729813][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.737840][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.757577][ T5932] team0: Port device team_slave_0 added [ 46.764387][ T5932] team0: Port device team_slave_1 added [ 46.793841][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.796571][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.804719][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.849114][ T5936] hsr_slave_0: entered promiscuous mode [ 46.851396][ T5936] hsr_slave_1: entered promiscuous mode [ 46.854818][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.857028][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.866375][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.913433][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.915946][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.924052][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.928881][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.931045][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.940258][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.947688][ T5945] hsr_slave_0: entered promiscuous mode [ 46.950349][ T5945] hsr_slave_1: entered promiscuous mode [ 46.952901][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.955952][ T5945] Cannot create hsr debugfs directory [ 47.080496][ T5932] hsr_slave_0: entered promiscuous mode [ 47.082792][ T5932] hsr_slave_1: entered promiscuous mode [ 47.084868][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.087248][ T5932] Cannot create hsr debugfs directory [ 47.098129][ T5941] hsr_slave_0: entered promiscuous mode [ 47.100332][ T5941] hsr_slave_1: entered promiscuous mode [ 47.102371][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.104778][ T5941] Cannot create hsr debugfs directory [ 47.404461][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.409884][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.414624][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.424058][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.456623][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.461991][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.467742][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.480149][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.517171][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.521365][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.526632][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.535114][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.579427][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.595791][ T5932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.607092][ T5932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.611373][ T5932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.616220][ T5932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.630012][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.643188][ T63] Bluetooth: hci2: command tx timeout [ 47.643496][ T5297] Bluetooth: hci3: command tx timeout [ 47.643768][ T5939] Bluetooth: hci0: command tx timeout [ 47.653018][ T5297] Bluetooth: hci1: command tx timeout [ 47.657910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.661029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.679120][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.682111][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.729829][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.738082][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.761587][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.774950][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.779418][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.781777][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.788761][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.789001][ T40] audit: type=1400 audit(1748909336.990:89): avc: denied { sys_module } for pid=5936 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.791666][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.808520][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.810731][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.821855][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.824664][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.833138][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.877550][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.885026][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.887329][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.899061][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.902016][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.930749][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.985115][ T5936] veth0_vlan: entered promiscuous mode [ 47.989969][ T5936] veth1_vlan: entered promiscuous mode [ 47.996187][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.022096][ T5936] veth0_macvtap: entered promiscuous mode [ 48.029757][ T5941] veth0_vlan: entered promiscuous mode [ 48.032362][ T5936] veth1_macvtap: entered promiscuous mode [ 48.045262][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.056760][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.060224][ T5941] veth1_vlan: entered promiscuous mode [ 48.069409][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.074198][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.080187][ T5936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.083435][ T5936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.086130][ T5936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.088831][ T5936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.131411][ T5941] veth0_macvtap: entered promiscuous mode [ 48.134124][ T5945] veth0_vlan: entered promiscuous mode [ 48.150632][ T5945] veth1_vlan: entered promiscuous mode [ 48.154411][ T5941] veth1_macvtap: entered promiscuous mode [ 48.157393][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.161717][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.171375][ T5932] veth0_vlan: entered promiscuous mode [ 48.187479][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.188696][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.189992][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.198745][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.201899][ T5932] veth1_vlan: entered promiscuous mode [ 48.207212][ T5945] veth0_macvtap: entered promiscuous mode [ 48.210745][ T5945] veth1_macvtap: entered promiscuous mode [ 48.218290][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.221024][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.224035][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.226773][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.235807][ T5936] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.241504][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.251523][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.259288][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.262983][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.266372][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.269713][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.311724][ T5932] veth0_macvtap: entered promiscuous mode [ 48.316276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.318752][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.344505][ T5932] veth1_macvtap: entered promiscuous mode [ 48.355081][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.357655][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.391306][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.396727][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.398315][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.399212][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.410356][ T5932] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.413406][ T5932] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.416120][ T5932] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.418975][ T5932] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.435320][ T6002] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 48.436016][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.440781][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.496468][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.498901][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.518289][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.520769][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.550913][ T6010] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.7'. [ 48.586206][ T6005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 48.590307][ T6005] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 48.674830][ T6021] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.10'. [ 48.750458][ T6033] netlink: 'syz.0.14': attribute type 2 has an invalid length. [ 48.839050][ T6040] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.17'. [ 48.856107][ T6044] ======================================================= [ 48.856107][ T6044] WARNING: The mand mount option has been deprecated and [ 48.856107][ T6044] and is ignored by this kernel. Remove the mand [ 48.856107][ T6044] option from the mount to silence this warning. [ 48.856107][ T6044] ======================================================= [ 48.868561][ T6044] 9pnet_virtio: no channels available for device syz [ 48.950376][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 48.955266][ T6053] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.21'. [ 49.031567][ T6068] tmpfs: Unknown parameter 'usrqulimit' [ 49.053263][ T6072] dns_resolver: Unsupported content type (234) [ 49.068516][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 49.136073][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 49.194177][ T6088] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.29'. [ 49.246072][ T6094] unknown channel width for channel at 909000KHz? [ 49.248308][ T6094] unknown channel width for channel at 909000KHz? [ 49.250772][ T6094] unknown channel width for channel at 909000KHz? [ 49.338349][ T6099] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.32'. [ 49.453710][ T6114] program syz.3.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.456707][ T6114] ata1.00: non-matching transfer count (0/23) [ 49.597958][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 49.600912][ T6125] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 49.620483][ T6125] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 49.692621][ T5297] Bluetooth: unknown link type 225 [ 49.694415][ T5297] Bluetooth: hci1: connection err: -111 [ 49.722969][ T5297] Bluetooth: hci1: command tx timeout [ 49.724021][ T5939] Bluetooth: hci2: command tx timeout [ 49.724889][ T5938] Bluetooth: hci0: command tx timeout [ 49.726710][ T63] Bluetooth: hci3: command tx timeout [ 49.841215][ T6149] tipc: Enabling of bearer rejected, failed to enable media [ 49.878560][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.929423][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.984286][ T6152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 50.518915][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 50.518925][ T40] audit: type=1400 audit(1748909339.720:219): avc: denied { bind } for pid=6176 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.527050][ T40] audit: type=1400 audit(1748909339.720:220): avc: denied { write } for pid=6176 comm="syz.2.55" path="socket:[9464]" dev="sockfs" ino=9464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.534674][ T40] audit: type=1400 audit(1748909339.720:221): avc: denied { name_bind } for pid=6176 comm="syz.2.55" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.604007][ T40] audit: type=1400 audit(1748909339.810:222): avc: denied { name_connect } for pid=6182 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 50.719728][ T40] audit: type=1400 audit(1748909339.920:223): avc: denied { mounton } for pid=6182 comm="syz.2.58" path="/10/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.719710][ T6186] cifs: Bad value for 'port' [ 50.783160][ T40] audit: type=1400 audit(1748909339.990:224): avc: denied { create } for pid=6187 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.789034][ T40] audit: type=1400 audit(1748909339.990:225): avc: denied { setopt } for pid=6187 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.821249][ T6190] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 50.825299][ T6190] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 50.917720][ T6197] xt_CONNSECMARK: invalid mode: 0 [ 50.924273][ T40] audit: type=1400 audit(1748909340.130:226): avc: denied { create } for pid=6196 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.930257][ T40] audit: type=1400 audit(1748909340.130:227): avc: denied { write } for pid=6196 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.936422][ T40] audit: type=1400 audit(1748909340.130:228): avc: denied { create } for pid=6196 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.964884][ T6200] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 51.016553][ T6208] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.168186][ T6220] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 51.171301][ T6220] SELinux: failed to load policy [ 51.326862][ T6233] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.330325][ T6233] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 51.337438][ T6233] evm: overlay not supported [ 51.425576][ T6243] sch_fq: defrate 0 ignored. [ 51.713715][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.802653][ T5297] Bluetooth: hci3: command tx timeout [ 51.802789][ T5938] Bluetooth: hci2: command tx timeout [ 51.803312][ T5948] Bluetooth: hci0: command tx timeout [ 51.803920][ T5939] Bluetooth: hci1: command tx timeout [ 51.863645][ T9] usb 5-1: device descriptor read/64, error -71 [ 51.904428][ T6251] QAT: failed to copy from user cfg_data. [ 51.907088][ T6251] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.936356][ T6256] netlink: 'syz.1.79': attribute type 9 has an invalid length. [ 52.132604][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.179325][ T6264] netlink: zone id is out of range [ 52.181345][ T6264] netlink: zone id is out of range [ 52.183483][ T6264] netlink: zone id is out of range [ 52.185214][ T6264] netlink: zone id is out of range [ 52.186801][ T6264] netlink: zone id is out of range [ 52.188426][ T6264] netlink: zone id is out of range [ 52.190095][ T6264] netlink: zone id is out of range [ 52.191779][ T6264] netlink: zone id is out of range [ 52.193563][ T6264] netlink: zone id is out of range [ 52.195170][ T6264] netlink: zone id is out of range [ 52.272624][ T9] usb 5-1: device descriptor read/64, error -71 [ 52.314113][ T6275] qrtr: Invalid version 0 [ 52.382896][ T9] usb usb5-port1: attempt power cycle [ 52.417824][ T5938] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 52.420097][ T6287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.423033][ T6287] IPv6: NLM_F_CREATE should be set when creating new route [ 52.427021][ T6287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6287 comm=syz.2.90 [ 52.500361][ T6293] input: syz1 as /devices/virtual/input/input5 [ 52.502641][ T6296] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.505748][ T6296] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.508506][ T6296] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.511745][ T6296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.645521][ T6306] process 'syz.1.99' launched './file1' with NULL argv: empty string added [ 52.732648][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.754497][ T9] usb 5-1: device descriptor read/8, error -71 [ 52.944110][ T6342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6342 comm=syz.1.111 [ 52.973489][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.009129][ T6346] ptrace attach of "/syz-executor exec"[5941] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 53.014505][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.047086][ C0] vkms_vblank_simulate: vblank timer overrun [ 53.063674][ T9] usb 5-1: device descriptor read/8, error -71 [ 53.135548][ T60] usb 8-1: config 0 has an invalid interface number: 148 but max is 0 [ 53.138118][ T60] usb 8-1: config 0 has no interface number 0 [ 53.140038][ T60] usb 8-1: config 0 interface 148 has no altsetting 0 [ 53.145187][ T60] usb 8-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=12.d9 [ 53.147990][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.150444][ T60] usb 8-1: Product: syz [ 53.151736][ T60] usb 8-1: Manufacturer: syz [ 53.153246][ T60] usb 8-1: SerialNumber: syz [ 53.156772][ T60] usb 8-1: config 0 descriptor?? [ 53.182902][ T9] usb usb5-port1: unable to enumerate USB device [ 53.245261][ T6350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12612 sclass=netlink_route_socket pid=6350 comm=syz.1.115 [ 53.387619][ T60] ftdi_sio 8-1:0.148: FTDI USB Serial Device converter detected [ 53.391081][ T60] ftdi_sio ttyUSB0: unknown device type: 0x12d9 [ 53.395450][ T60] usb 8-1: USB disconnect, device number 2 [ 53.398767][ T60] ftdi_sio 8-1:0.148: device disconnected [ 53.882651][ T5938] Bluetooth: hci2: command tx timeout [ 53.882794][ T5297] Bluetooth: hci3: command 0x0419 tx timeout [ 53.893033][ T63] Bluetooth: hci1: command tx timeout [ 53.893055][ T5297] Bluetooth: hci0: command tx timeout [ 54.369740][ T6392] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 54.373418][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.376420][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.385081][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.388009][ T6392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.390779][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.393236][ T6392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.398126][ T6392] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.403102][ T6392] bridge_slave_1: left allmulticast mode [ 54.405311][ T6392] bridge_slave_1: left promiscuous mode [ 54.407251][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.411770][ T6392] bridge_slave_0: left allmulticast mode [ 54.414406][ T6392] bridge_slave_0: left promiscuous mode [ 54.416394][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.434375][ T6392] bond0: (slave bridge0): Releasing backup interface [ 54.536268][ T6394] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 54.554638][ T1335] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.688042][ T6399] __nla_validate_parse: 17 callbacks suppressed [ 54.688053][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 54.705370][ T1335] usb 7-1: config 0 has no interfaces? [ 54.707655][ T1335] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.710526][ T1335] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.715502][ T1335] usb 7-1: config 0 descriptor?? [ 54.739337][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 54.933801][ T29] usb 7-1: USB disconnect, device number 2 [ 55.224386][ T6405] bridge1: entered promiscuous mode [ 55.237004][ T6409] bridge2: entered promiscuous mode [ 55.336691][ T6425] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.343095][ T6426] capability: warning: `syz.3.137' uses 32-bit capabilities (legacy support in use) [ 55.364319][ T6430] input: syz1 as /devices/virtual/input/input6 [ 55.374395][ T6430] overlayfs: conflicting options: metacopy=off,verity=on [ 55.416528][ T6434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=6434 comm=syz.3.139 [ 55.441726][ T6438] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 55.837925][ T6444] netlink: 'syz.3.143': attribute type 21 has an invalid length. [ 55.840480][ T6444] netlink: 'syz.3.143': attribute type 6 has an invalid length. [ 55.843090][ T6444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.143'. [ 55.962683][ T5297] Bluetooth: hci3: command 0x0419 tx timeout [ 55.976205][ T40] kauditd_printk_skb: 75 callbacks suppressed [ 55.976216][ T40] audit: type=1400 audit(1748909345.180:304): avc: denied { create } for pid=6447 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.992624][ T40] audit: type=1400 audit(1748909345.180:305): avc: denied { bind } for pid=6447 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.998705][ T40] audit: type=1400 audit(1748909345.180:306): avc: denied { listen } for pid=6447 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.005305][ T40] audit: type=1400 audit(1748909345.180:307): avc: denied { write } for pid=6447 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.007373][ T6438] syz.0.141 (6438): drop_caches: 2 [ 56.090764][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 56.360158][ T40] audit: type=1400 audit(1748909345.560:308): avc: denied { ioctl } for pid=6464 comm="syz.1.151" path="socket:[12801]" dev="sockfs" ino=12801 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 56.411629][ T6466] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 56.514178][ T6466] /dev/sr0: Can't open blockdev [ 57.052069][ T40] audit: type=1400 audit(1748909346.250:309): avc: denied { ioctl } for pid=6470 comm="syz.0.152" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.282340][ T40] audit: type=1400 audit(1748909346.480:310): avc: denied { ioctl } for pid=6476 comm="syz.1.155" path="socket:[12869]" dev="sockfs" ino=12869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.292927][ T52] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.333658][ T6478] Zero length message leads to an empty skb [ 57.342328][ T40] audit: type=1400 audit(1748909346.540:311): avc: denied { connect } for pid=6476 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.352072][ T40] audit: type=1400 audit(1748909346.550:312): avc: denied { execute } for pid=6480 comm="syz.2.156" path="/dev/audio1" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 57.446196][ T52] usb 5-1: config 0 has no interfaces? [ 57.449577][ T52] usb 5-1: config 0 has no interfaces? [ 57.453047][ T52] usb 5-1: config 0 has no interfaces? [ 57.457895][ T52] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 57.461831][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 57.466485][ T52] usb 5-1: Product: syz [ 57.468306][ T52] usb 5-1: Manufacturer: syz [ 57.470268][ T52] usb 5-1: SerialNumber: syz [ 57.475960][ T52] usb 5-1: config 0 descriptor?? [ 57.483799][ T29] net_ratelimit: 68 callbacks suppressed [ 57.483808][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.532785][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.591142][ T6501] Cannot find add_set index 0 as target [ 57.694749][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.699435][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.702769][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.703528][ T5995] usb 5-1: USB disconnect, device number 6 [ 57.707281][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.712268][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.720072][ T9] usb 8-1: config 0 descriptor?? [ 57.808110][ T40] audit: type=1400 audit(1748909347.010:313): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.132243][ T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 58.136879][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 58.146414][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 58.285890][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.305460][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 58.326496][ T9] usb 8-1: USB disconnect, device number 3 [ 58.338554][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 58.365882][ T6511] netlink: 'syz.0.165': attribute type 13 has an invalid length. [ 58.369510][ T6511] macvtap0: entered promiscuous mode [ 58.377822][ T6511] macvtap0: refused to change device tx_queue_len [ 58.459841][ T6526] netlink: 72 bytes leftover after parsing attributes in process `syz.2.169'. [ 58.522849][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.682701][ T5995] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.834275][ T5995] usb 5-1: config index 0 descriptor too short (expected 25439, got 36) [ 58.837891][ T5995] usb 5-1: config 0 has too many interfaces: 109, using maximum allowed: 32 [ 58.841512][ T5995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.846070][ T5995] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 109 [ 58.849756][ T5995] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.853748][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.858842][ T6536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.860551][ T5995] usb 5-1: config 0 descriptor?? [ 59.002696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.563530][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.623299][ T6541] netlink: 'syz.2.175': attribute type 14 has an invalid length. [ 59.722144][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 59.727453][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'. [ 59.746138][ T6543] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 59.838460][ T6564] hfsplus: unable to find HFS+ superblock [ 59.844096][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 59.894429][ T6568] capability: warning: `syz.2.183' uses deprecated v2 capabilities in a way that may be insecure [ 60.452768][ T6579] rdma_op ffff8880578f59f0 conn xmit_rdma 0000000000000000 [ 60.472035][ T6579] No source specified [ 60.510586][ T6586] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 60.672860][ T6599] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.824236][ T6619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 60.846774][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 60.850009][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.201'. [ 60.984233][ T6642] afs: Unknown parameter 'dyile0' [ 60.995130][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 60.995143][ T40] audit: type=1400 audit(1748909350.200:341): avc: denied { connect } for pid=6641 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.002359][ T6639] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.205'. [ 61.012694][ T40] audit: type=1400 audit(1748909350.220:342): avc: denied { read } for pid=6641 comm="syz.1.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.028867][ T6639] netlink: zone id is out of range [ 61.031152][ T6639] netlink: zone id is out of range [ 61.033962][ T6639] netlink: get zone limit has 8 unknown bytes [ 61.097237][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.099771][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.237141][ T6627] syz.3.201 (6627): drop_caches: 1 [ 61.237419][ T6635] syz.3.201 (6635): drop_caches: 1 [ 61.275521][ T6627] syz.3.201 (6627): drop_caches: 1 [ 61.314822][ T40] audit: type=1400 audit(1748909350.520:343): avc: denied { create } for pid=6648 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.321082][ T40] audit: type=1400 audit(1748909350.520:344): avc: denied { write } for pid=6648 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.440034][ T5937] usb 5-1: USB disconnect, device number 7 [ 61.913748][ T40] audit: type=1400 audit(1748909351.120:345): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.929248][ T6659] trusted_key: encrypted_key: insufficient parameters specified [ 61.933379][ T6659] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 61.943163][ T40] audit: type=1400 audit(1748909351.150:346): avc: denied { read } for pid=6660 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.953410][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.959366][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.010507][ T6640] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.013866][ T6640] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.016694][ T6640] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.019583][ T6640] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.050838][ T6640] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.052193][ T6669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'. [ 62.054950][ T6640] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.061679][ T6640] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.065519][ T6640] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.078859][ T6671] Unknown options in mask 5 [ 62.177289][ T40] audit: type=1400 audit(1748909351.380:347): avc: denied { read } for pid=6676 comm="syz.1.219" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.186730][ T40] audit: type=1400 audit(1748909351.380:348): avc: denied { open } for pid=6676 comm="syz.1.219" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.198986][ T40] audit: type=1400 audit(1748909351.380:349): avc: denied { ioctl } for pid=6676 comm="syz.1.219" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.208627][ T40] audit: type=1400 audit(1748909351.380:350): avc: denied { ioctl } for pid=6676 comm="syz.1.219" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.210182][ T6680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6680 comm=syz.3.220 [ 62.214848][ T6681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6681 comm=syz.3.220 [ 62.704058][ T6701] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 62.750373][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'. [ 62.793008][ T6711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6711 comm=syz.1.229 [ 62.793030][ T6712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6712 comm=syz.1.229 [ 62.810433][ T6711] trusted_key: syz.1.229 sent an empty control message without MSG_MORE. [ 62.833953][ T6714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.836139][ T6714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.840632][ T6714] vhci_hcd vhci_hcd.0: Device attached [ 62.845782][ T6714] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 62.847929][ T6714] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.850272][ T6714] vhci_hcd vhci_hcd.0: Device attached [ 62.934288][ T6720] vhci_hcd: connection closed [ 62.935656][ T6715] vhci_hcd: connection closed [ 62.936281][ T46] vhci_hcd: stop threads [ 62.943074][ T46] vhci_hcd: release socket [ 62.945015][ T46] vhci_hcd: disconnect device [ 62.947054][ T46] vhci_hcd: stop threads [ 62.948425][ T46] vhci_hcd: release socket [ 62.949961][ T46] vhci_hcd: disconnect device [ 63.012745][ T1335] vhci_hcd: vhci_device speed not set [ 63.053595][ T6731] fuse: Unknown parameter 'groupƒæïÆ' [ 63.076113][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 63.081594][ T6736] loop6: detected capacity change from 0 to 524287999 [ 63.084615][ T6738] Bluetooth: MGMT ver 1.23 [ 63.166643][ T6748] loop2: detected capacity change from 0 to 7 [ 63.177016][ T5949] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 63.178783][ T5949] loop2: partition table partially beyond EOD, truncated [ 63.181332][ T5949] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 63.195993][ T6748] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 63.197772][ T6748] loop2: partition table partially beyond EOD, truncated [ 63.200327][ T6748] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 63.471795][ T6777] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 63.488915][ T6777] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.496054][ T6769] syz.1.246 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.508009][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.510459][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.579296][ T6775] veth1_macvtap: left promiscuous mode [ 63.581107][ T6775] macsec0: entered promiscuous mode [ 63.586403][ T6775] macsec0: entered allmulticast mode [ 63.590643][ T6775] veth1_macvtap: entered promiscuous mode [ 63.592748][ T6775] veth1_macvtap: entered allmulticast mode [ 63.592898][ T6775] macsec0: left promiscuous mode [ 63.593015][ T6775] macsec0: left allmulticast mode [ 63.593024][ T6775] veth1_macvtap: left allmulticast mode [ 63.892650][ T5995] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.922653][ T5998] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 64.042640][ T5995] usb 8-1: Using ep0 maxpacket: 8 [ 64.046174][ T5995] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.049067][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.053741][ T5995] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.058168][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.062492][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.068104][ T5995] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.071073][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.075621][ T5995] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.080216][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.084657][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.089929][ T5995] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.092612][ T5998] usb 7-1: Using ep0 maxpacket: 8 [ 64.092971][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 64.095882][ T5998] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 64.098834][ T5995] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.101323][ T5998] usb 7-1: config 0 has no interface number 0 [ 64.105840][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 64.107793][ T5998] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 64.112063][ T5995] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 64.114081][ T5995] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.115510][ T5998] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 64.119797][ T5995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.122639][ T5998] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.122655][ T5998] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.122679][ T5998] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 64.127107][ T5995] usb 8-1: Product: syz [ 64.129625][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.133047][ T5995] usb 8-1: Manufacturer: syz [ 64.133059][ T5995] usb 8-1: SerialNumber: syz [ 64.138400][ T5998] usb 7-1: config 0 descriptor?? [ 64.154600][ T5998] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 64.354972][ T6807] syz.2.259 uses obsolete (PF_INET,SOCK_PACKET) [ 64.433192][ T29] usb 7-1: USB disconnect, device number 3 [ 64.437663][ T29] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 64.510932][ T5995] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.520543][ T5995] usb 8-1: USB disconnect, device number 4 [ 64.791909][ T6835] xt_hashlimit: overflow, rate too high: 0 [ 64.795645][ T6835] __nla_validate_parse: 4 callbacks suppressed [ 64.795653][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 64.969525][ T6839] fuse: root generation should be zero [ 65.196502][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 65.215956][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 65.232708][ T6870] binder: BC_ACQUIRE_RESULT not supported [ 65.234579][ T6870] binder: 6869:6870 ioctl c0306201 200000000100 returned -22 [ 65.289161][ T6872] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.291768][ T6872] overlayfs: failed to set xattr on upper [ 65.293747][ T6872] overlayfs: ...falling back to redirect_dir=nofollow. [ 65.295913][ T6872] overlayfs: ...falling back to index=off. [ 65.297868][ T6872] overlayfs: ...falling back to uuid=null. [ 65.299952][ T6872] overlayfs: ...falling back to xino=off. [ 65.300089][ T6875] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 65.301788][ T6872] overlayfs: conflicting lowerdir path [ 65.309994][ T6875] SELinux: failed to load policy [ 65.469639][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 65.742598][ T1335] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 65.892650][ T1335] usb 8-1: Using ep0 maxpacket: 16 [ 65.895829][ T1335] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 65.898297][ T1335] usb 8-1: config 0 has no interface number 0 [ 65.900513][ T1335] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.904246][ T1335] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.908474][ T1335] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 65.911284][ T1335] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 65.914082][ T1335] usb 8-1: Product: syz [ 65.915400][ T1335] usb 8-1: SerialNumber: syz [ 65.918140][ T1335] usb 8-1: config 0 descriptor?? [ 65.921779][ T1335] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 65.925283][ T1335] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input9 [ 66.055419][ T6904] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.288'. [ 66.093248][ T6906] xt_hashlimit: size too large, truncated to 1048576 [ 66.121722][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 66.126721][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 66.145955][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 66.145964][ T40] audit: type=1400 audit(1748909355.350:391): avc: denied { view } for pid=6905 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.153969][ T40] audit: type=1400 audit(1748909355.350:392): avc: denied { read } for pid=6905 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.154504][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.155312][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 66.166220][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.178458][ T29] usb 8-1: USB disconnect, device number 5 [ 66.178469][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 66.182502][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 66.188061][ T29] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 66.201713][ T6913] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 66.205850][ T6913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.211801][ T40] audit: type=1400 audit(1748909355.410:393): avc: denied { bind } for pid=6905 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.219056][ T40] audit: type=1400 audit(1748909355.410:394): avc: denied { name_bind } for pid=6905 comm="syz.2.289" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 66.219900][ T6906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6906 comm=syz.2.289 [ 66.225896][ T40] audit: type=1400 audit(1748909355.410:395): avc: denied { node_bind } for pid=6905 comm="syz.2.289" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 66.412965][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 66.448575][ T40] audit: type=1400 audit(1748909355.650:396): avc: denied { mount } for pid=6928 comm="syz.1.295" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.479612][ T40] audit: type=1400 audit(1748909355.680:397): avc: denied { ioctl } for pid=6930 comm="syz.1.296" path="socket:[14813]" dev="sockfs" ino=14813 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.536274][ T6937] netlink: 'syz.1.296': attribute type 10 has an invalid length. [ 66.540448][ T6937] hsr_slave_0: left promiscuous mode [ 66.543466][ T6937] hsr_slave_1: left promiscuous mode [ 66.652813][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 66.701593][ T6948] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 66.734712][ T6952] /dev/sg0: Can't lookup blockdev [ 66.736628][ T6952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.299'. [ 66.805273][ T29] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 66.808104][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.810672][ T29] usb 8-1: Product: syz [ 66.812002][ T29] usb 8-1: Manufacturer: syz [ 66.813619][ T29] usb 8-1: SerialNumber: syz [ 66.818870][ T29] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 66.840917][ T40] audit: type=1400 audit(1748909356.040:398): avc: denied { firmware_load } for pid=5937 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 66.854622][ T5937] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 66.859082][ T40] audit: type=1400 audit(1748909356.060:399): avc: denied { set_context_mgr } for pid=6954 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 66.864199][ T6956] binder: BINDER_SET_CONTEXT_MGR already set [ 66.867041][ T6956] binder: 6954:6956 ioctl 4018620d 2000000000c0 returned -16 [ 66.870432][ T40] audit: type=1400 audit(1748909356.080:400): avc: denied { map } for pid=6954 comm="syz.1.300" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.872186][ T6955] binder_alloc: 6954: pid 6954 spamming oneway? 1 buffers allocated for a total size of 6144 [ 66.882298][ T6955] netlink: 'syz.1.300': attribute type 13 has an invalid length. [ 66.965587][ T6968] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 66.967924][ T6968] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.971245][ T6968] vhci_hcd vhci_hcd.0: Device attached [ 66.978216][ T6969] vhci_hcd: connection closed [ 66.978465][ T1147] vhci_hcd: stop threads [ 66.981388][ T1147] vhci_hcd: release socket [ 66.984294][ T1147] vhci_hcd: disconnect device [ 67.024761][ T6974] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 67.059093][ T9] usb 8-1: USB disconnect, device number 6 [ 67.243633][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.243924][ T5297] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.334800][ T5998] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 67.886026][ T5937] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 67.888531][ T5937] ath9k_htc: Failed to initialize the device [ 67.892561][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 68.279984][ T7041] syzkaller1: entered promiscuous mode [ 68.281782][ T7041] syzkaller1: entered allmulticast mode [ 68.283211][ T52] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.286115][ T7041] No such timeout policy "syz1" [ 68.424948][ T12] bond0: (slave bond_slave_0): interface is now down [ 68.425876][ T7048] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 68.427211][ T12] bond0: (slave bond_slave_1): interface is now down [ 68.433511][ T7048] syz_tun: entered promiscuous mode [ 68.438899][ T7048] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.457308][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 68.460148][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.463917][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.467348][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 68.471510][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 68.476013][ T52] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 68.479045][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.484819][ T52] hub 5-1:1.0: bad descriptor, ignoring hub [ 68.486697][ T52] hub 5-1:1.0: probe with driver hub failed with error -5 [ 68.489153][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 68.490791][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 68.495107][ T52] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 68.497062][ T52] cdc_wdm 5-1:1.0: Unknown control protocol [ 68.603339][ T9] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 69.233491][ T7070] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.241871][ T6915] ceph: No mds server is up or the cluster is laggy [ 69.341211][ T7079] netlink: 'syz.2.335': attribute type 11 has an invalid length. [ 69.380354][ T7082] SELinux: failed to load policy [ 69.386359][ T7013] cdc_wdm 5-1:1.0: Error autopm - -16 [ 69.386453][ T52] usb 5-1: USB disconnect, device number 8 [ 69.537408][ T52] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 69.686527][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.690390][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 69.703113][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 69.706526][ T52] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 69.709362][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.726199][ T7058] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.732438][ T52] hub 5-1:1.0: bad descriptor, ignoring hub [ 69.735761][ T52] hub 5-1:1.0: probe with driver hub failed with error -5 [ 69.742901][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 69.744697][ T52] cdc_wdm 5-1:1.0: skipping garbage [ 69.748686][ T52] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 69.750895][ T52] cdc_wdm 5-1:1.0: Unknown control protocol [ 69.934317][ T7013] __nla_validate_parse: 12 callbacks suppressed [ 69.934331][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 69.942678][ T7013] netlink: 64 bytes leftover after parsing attributes in process `syz.0.315'. [ 70.052893][ T29] usb 5-1: USB disconnect, device number 9 [ 70.374270][ T13] bond0: (slave bond_slave_0): interface is now down [ 70.376457][ T13] bond0: (slave bond_slave_1): interface is now down [ 70.477095][ T7109] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.347'. [ 70.506965][ T7111] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.348'. [ 71.040218][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.355'. [ 71.086827][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089038][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.199385][ T7137] usb usb8: usbfs: process 7137 (syz.0.356) did not claim interface 0 before use [ 71.225656][ T7139] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.357'. [ 71.284256][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 71.284287][ T40] audit: type=1400 audit(1748909360.490:426): avc: denied { name_bind } for pid=7140 comm="syz.0.358" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 71.290167][ T7145] ip6gretap1: entered promiscuous mode [ 71.302759][ T7145] ip6gretap1: entered allmulticast mode [ 71.420574][ T40] audit: type=1400 audit(1748909360.620:427): avc: denied { associate } for pid=7157 comm="syz.0.364" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.499392][ T7166] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.367'. [ 71.581206][ T7164] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 71.644368][ T7174] fuse: Unknown parameter 'œþ¸¶rÖeÙ6?¼KIâB­·ƒÎ®Ÿº~t²Ê ;èV3榸 •YXçC^úº.' [ 71.644531][ T7175] fuse: Unknown parameter 'œþ¸¶rÖeÙ6?¼KIâB­·ƒÎ®Ÿº~t²Ê ;èV3榸 •YXçC^úº.' [ 71.681896][ T7178] netlink: 64 bytes leftover after parsing attributes in process `syz.0.370'. [ 71.748571][ T40] audit: type=1400 audit(1748909360.950:428): avc: denied { create } for pid=7181 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 71.901931][ T7194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.375'. [ 71.910026][ T7198] input: syz1 as /devices/virtual/input/input10 [ 71.929650][ T40] audit: type=1400 audit(1748909361.130:429): avc: denied { getopt } for pid=7195 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.934786][ T7198] netlink: 277 bytes leftover after parsing attributes in process `syz.2.376'. [ 71.936121][ T40] audit: type=1400 audit(1748909361.140:430): avc: denied { getopt } for pid=7203 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.978477][ T40] audit: type=1400 audit(1748909361.180:431): avc: denied { append } for pid=7209 comm="syz.0.380" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.979505][ T7210] netlink: 'syz.0.380': attribute type 30 has an invalid length. [ 71.991701][ T7210] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.994756][ T7210] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.997942][ T7210] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.000834][ T7210] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.292643][ T13] bond0: (slave syz_tun): interface is now down [ 72.296071][ T13] bond0: now running without any active interface! [ 72.709838][ T40] audit: type=1400 audit(1748909361.910:432): avc: denied { accept } for pid=7215 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.823307][ T40] audit: type=1400 audit(1748909362.020:433): avc: denied { connect } for pid=7228 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.893681][ T40] audit: type=1400 audit(1748909362.100:434): avc: denied { module_request } for pid=7235 comm="syz.2.387" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 73.010744][ T7257] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 73.045115][ T7263] batadv_slave_1: entered promiscuous mode [ 73.047230][ T7263] batadv_slave_1: left promiscuous mode [ 73.066724][ T7263] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 73.155923][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.159128][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.210063][ T40] audit: type=1400 audit(1748909362.410:435): avc: denied { ioctl } for pid=7265 comm="syz.1.394" path="socket:[16317]" dev="sockfs" ino=16317 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.392588][ T60] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.522339][ T7277] kernel profiling enabled (shift: 7) [ 73.552632][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 73.555929][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.559687][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.563602][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.566652][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.570626][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.573592][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.592856][ T7278] xt_hashlimit: size too large, truncated to 1048576 [ 73.780657][ T60] usb 5-1: GET_CAPABILITIES returned 0 [ 73.782398][ T60] usbtmc 5-1:16.0: can't read capabilities [ 73.981693][ T7292] geneve2: entered promiscuous mode [ 73.983351][ T7270] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 73.984186][ T7292] geneve2: entered allmulticast mode [ 74.030379][ T7294] netlink: 'syz.2.402': attribute type 6 has an invalid length. [ 74.030386][ T7296] netlink: 'syz.2.402': attribute type 6 has an invalid length. [ 74.055954][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.058716][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.099473][ T7306] team0: Device gtp0 is of different type [ 74.274699][ T5937] usb 5-1: USB disconnect, device number 10 [ 75.087874][ T7395] netlink: 'syz.0.432': attribute type 12 has an invalid length. [ 75.113331][ T7395] SELinux: Context system_u:object_r:apm_bios_t:s0 is not valid (left unmapped). [ 75.125662][ T7401] __nla_validate_parse: 10 callbacks suppressed [ 75.125676][ T7401] netlink: 376 bytes leftover after parsing attributes in process `syz.2.434'. [ 75.131858][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 75.137578][ T7401] netlink: 376 bytes leftover after parsing attributes in process `syz.2.434'. [ 75.233192][ T7407] program syz.2.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.407326][ T7421] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 75.411377][ T7421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.417909][ T7421] netlink: 96 bytes leftover after parsing attributes in process `syz.2.442'. [ 75.458821][ T7432] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.445'. [ 75.493863][ T7434] FAULT_INJECTION: forcing a failure. [ 75.493863][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.497942][ T7434] CPU: 2 UID: 0 PID: 7434 Comm: syz.1.446 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 75.497957][ T7434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.497963][ T7434] Call Trace: [ 75.497967][ T7434] [ 75.497971][ T7434] dump_stack_lvl+0x16c/0x1f0 [ 75.498006][ T7434] should_fail_ex+0x512/0x640 [ 75.498030][ T7434] _copy_from_user+0x2e/0xd0 [ 75.498048][ T7434] copy_msghdr_from_user+0x98/0x160 [ 75.498064][ T7434] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 75.498084][ T7434] ___sys_sendmsg+0xfe/0x1d0 [ 75.498099][ T7434] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.498111][ T7434] ? __lock_acquire+0x622/0x1c90 [ 75.498144][ T7434] __sys_sendmsg+0x16d/0x220 [ 75.498157][ T7434] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.498180][ T7434] do_syscall_64+0xcd/0x4c0 [ 75.498196][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.498208][ T7434] RIP: 0033:0x7fba4358e969 [ 75.498216][ T7434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.498227][ T7434] RSP: 002b:00007fba44401038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.498237][ T7434] RAX: ffffffffffffffda RBX: 00007fba437b5fa0 RCX: 00007fba4358e969 [ 75.498243][ T7434] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 75.498249][ T7434] RBP: 00007fba44401090 R08: 0000000000000000 R09: 0000000000000000 [ 75.498255][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.498261][ T7434] R13: 0000000000000000 R14: 00007fba437b5fa0 R15: 00007ffdac4f80b8 [ 75.498275][ T7434] [ 75.611420][ T7441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=7441 comm=syz.1.449 [ 75.613693][ T7439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.620304][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.448'. [ 75.624546][ T7439] xt_hashlimit: size too large, truncated to 1048576 [ 75.675804][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 76.018904][ T7405] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 76.334406][ T7461] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.454'. [ 76.359811][ T7463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19375 sclass=netlink_route_socket pid=7463 comm=syz.2.455 [ 76.387306][ T7465] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.456'. [ 76.418033][ T7467] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.457'. [ 76.546973][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 76.546983][ T40] audit: type=1400 audit(1748909365.750:456): avc: denied { ioctl } for pid=7471 comm="syz.1.459" path="socket:[20556]" dev="sockfs" ino=20556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.596175][ T40] audit: type=1400 audit(1748909365.800:457): avc: denied { getopt } for pid=7476 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.693417][ T40] audit: type=1400 audit(1748909365.900:458): avc: denied { create } for pid=7485 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.699710][ T40] audit: type=1400 audit(1748909365.900:459): avc: denied { connect } for pid=7485 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.706661][ T40] audit: type=1400 audit(1748909365.910:460): avc: denied { read } for pid=7485 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.795600][ T7491] netem: invalid attributes len -11 [ 76.797803][ T7491] netem: change failed [ 76.805371][ T40] audit: type=1400 audit(1748909366.010:461): avc: denied { write } for pid=7485 comm="syz.2.463" path="socket:[20585]" dev="sockfs" ino=20585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.814166][ T40] audit: type=1400 audit(1748909366.010:462): avc: denied { getopt } for pid=7485 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.850565][ T7494] autofs: Bad value for 'fd' [ 76.880516][ T40] audit: type=1400 audit(1748909366.080:463): avc: denied { listen } for pid=7499 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 76.966698][ T7506] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 77.100182][ T40] audit: type=1400 audit(1748909366.300:464): avc: denied { ioctl } for pid=7514 comm="syz.0.473" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x4b70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 77.212616][ T40] audit: type=1400 audit(1748909366.410:465): avc: denied { connect } for pid=7525 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 77.231591][ T7531] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 77.582626][ T60] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 77.743993][ T60] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 77.746610][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.751420][ T60] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 77.754443][ T60] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 77.756949][ T60] usb 5-1: Manufacturer: syz [ 77.759659][ T60] usb 5-1: config 0 descriptor?? [ 77.814742][ T60] rc_core: IR keymap rc-hauppauge not found [ 77.816663][ T60] Registered IR keymap rc-empty [ 77.818872][ T7574] syz_tun: entered allmulticast mode [ 77.819059][ T60] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 77.824821][ T60] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 77.827529][ T7573] syz_tun: left allmulticast mode [ 77.850265][ T5995] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 77.987795][ T7542] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 77.995285][ T5995] usb 6-1: device descriptor read/64, error -71 [ 78.042120][ T7542] bond0: (slave bond_slave_0): Releasing backup interface [ 78.045899][ T7605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.051816][ T7542] bond1: (slave bond_slave_0): Enslaving as a backup interface with an up link [ 78.252665][ T5995] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 78.351359][ T7610] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.394631][ T5995] usb 6-1: device descriptor read/64, error -71 [ 78.513725][ T5995] usb usb6-port1: attempt power cycle [ 78.580970][ T7626] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 78.612452][ T7632] FAULT_INJECTION: forcing a failure. [ 78.612452][ T7632] name failslab, interval 1, probability 0, space 0, times 0 [ 78.618151][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.2.511 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 78.618178][ T7632] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.618185][ T7632] Call Trace: [ 78.618198][ T7632] [ 78.618202][ T7632] dump_stack_lvl+0x16c/0x1f0 [ 78.618232][ T7632] should_fail_ex+0x512/0x640 [ 78.618254][ T7632] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 78.618266][ T7632] should_failslab+0xc2/0x120 [ 78.618281][ T7632] __kmalloc_cache_noprof+0x6a/0x3e0 [ 78.618291][ T7632] ? nfnl_osf_add_callback+0x1c8/0x5f0 [ 78.618310][ T7632] nfnl_osf_add_callback+0x1c8/0x5f0 [ 78.618328][ T7632] nfnetlink_rcv_msg+0x9f9/0x1200 [ 78.618345][ T7632] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.618359][ T7632] ? __lock_acquire+0x622/0x1c90 [ 78.618386][ T7632] ? avc_has_perm_noaudit+0x149/0x3b0 [ 78.618402][ T7632] netlink_rcv_skb+0x155/0x420 [ 78.618420][ T7632] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.618433][ T7632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.618456][ T7632] ? ns_capable+0xd7/0x110 [ 78.618475][ T7632] nfnetlink_rcv+0x1b3/0x430 [ 78.618487][ T7632] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 78.618498][ T7632] ? netlink_deliver_tap+0x1ae/0xd30 [ 78.618513][ T7632] ? is_vmalloc_addr+0x86/0xa0 [ 78.618527][ T7632] netlink_unicast+0x53a/0x7f0 [ 78.618545][ T7632] ? __pfx_netlink_unicast+0x10/0x10 [ 78.618561][ T7632] ? __build_skb_around+0x278/0x3b0 [ 78.618576][ T7632] netlink_sendmsg+0x8d1/0xdd0 [ 78.618595][ T7632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.618618][ T7632] ____sys_sendmsg+0xa98/0xc70 [ 78.618635][ T7632] ? copy_msghdr_from_user+0x10a/0x160 [ 78.618649][ T7632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.618673][ T7632] ___sys_sendmsg+0x134/0x1d0 [ 78.618688][ T7632] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.618700][ T7632] ? __lock_acquire+0x622/0x1c90 [ 78.618732][ T7632] __sys_sendmsg+0x16d/0x220 [ 78.618746][ T7632] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.618769][ T7632] do_syscall_64+0xcd/0x4c0 [ 78.618785][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.618796][ T7632] RIP: 0033:0x7fb77ff8e969 [ 78.618805][ T7632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.618816][ T7632] RSP: 002b:00007fb780db2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.618826][ T7632] RAX: ffffffffffffffda RBX: 00007fb7801b5fa0 RCX: 00007fb77ff8e969 [ 78.618833][ T7632] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 78.618839][ T7632] RBP: 00007fb780db2090 R08: 0000000000000000 R09: 0000000000000000 [ 78.618845][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.618851][ T7632] R13: 0000000000000000 R14: 00007fb7801b5fa0 R15: 00007ffcaf7cda88 [ 78.618864][ T7632] [ 78.683236][ T5297] Bluetooth: hci1: command 0x0406 tx timeout [ 78.872831][ T5995] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 78.893606][ T5995] usb 6-1: device descriptor read/8, error -71 [ 79.142602][ T5995] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 79.163929][ T5995] usb 6-1: device descriptor read/8, error -71 [ 79.282854][ T5995] usb usb6-port1: unable to enumerate USB device [ 79.674566][ T7655] FAULT_INJECTION: forcing a failure. [ 79.674566][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 79.678440][ T7655] CPU: 0 UID: 0 PID: 7655 Comm: syz.0.520 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 79.678455][ T7655] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.678461][ T7655] Call Trace: [ 79.678465][ T7655] [ 79.678469][ T7655] dump_stack_lvl+0x16c/0x1f0 [ 79.678487][ T7655] should_fail_ex+0x512/0x640 [ 79.678504][ T7655] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 79.678516][ T7655] should_failslab+0xc2/0x120 [ 79.678531][ T7655] __kmalloc_cache_noprof+0x6a/0x3e0 [ 79.678541][ T7655] ? nfnl_osf_add_callback+0x1c8/0x5f0 [ 79.678560][ T7655] nfnl_osf_add_callback+0x1c8/0x5f0 [ 79.678578][ T7655] nfnetlink_rcv_msg+0x9f9/0x1200 [ 79.678595][ T7655] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 79.678609][ T7655] ? __lock_acquire+0x622/0x1c90 [ 79.678636][ T7655] ? avc_has_perm_noaudit+0x149/0x3b0 [ 79.678652][ T7655] netlink_rcv_skb+0x155/0x420 [ 79.678675][ T7655] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 79.678688][ T7655] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.678712][ T7655] ? ns_capable+0xd7/0x110 [ 79.678730][ T7655] nfnetlink_rcv+0x1b3/0x430 [ 79.678742][ T7655] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 79.678753][ T7655] ? netlink_deliver_tap+0x1ae/0xd30 [ 79.678772][ T7655] netlink_unicast+0x53a/0x7f0 [ 79.678790][ T7655] ? __pfx_netlink_unicast+0x10/0x10 [ 79.678806][ T7655] ? __build_skb_around+0x278/0x3b0 [ 79.678821][ T7655] netlink_sendmsg+0x8d1/0xdd0 [ 79.678840][ T7655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.678862][ T7655] ____sys_sendmsg+0xa98/0xc70 [ 79.678880][ T7655] ? copy_msghdr_from_user+0x10a/0x160 [ 79.678894][ T7655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.678920][ T7655] ___sys_sendmsg+0x134/0x1d0 [ 79.678935][ T7655] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.678947][ T7655] ? __lock_acquire+0x622/0x1c90 [ 79.678979][ T7655] __sys_sendmsg+0x16d/0x220 [ 79.678992][ T7655] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.679016][ T7655] do_syscall_64+0xcd/0x4c0 [ 79.679031][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.679042][ T7655] RIP: 0033:0x7f0054d8e969 [ 79.679051][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.679061][ T7655] RSP: 002b:00007f0055c19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.679072][ T7655] RAX: ffffffffffffffda RBX: 00007f0054fb5fa0 RCX: 00007f0054d8e969 [ 79.679078][ T7655] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 79.679084][ T7655] RBP: 00007f0055c19090 R08: 0000000000000000 R09: 0000000000000000 [ 79.679090][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.679096][ T7655] R13: 0000000000000000 R14: 00007f0054fb5fa0 R15: 00007fffc57e78b8 [ 79.679110][ T7655] [ 79.911356][ T7668] input: syz0 as /devices/virtual/input/input14 [ 80.044199][ T7699] overlayfs: failed to resolve './file0': -2 [ 80.051983][ T7665] cgroup: fork rejected by pids controller in /syz2 [ 80.152993][ T7707] block nbd0: shutting down sockets [ 80.176645][ T7714] qnx6: unable to set blocksize [ 80.209920][ T7716] __nla_validate_parse: 13 callbacks suppressed [ 80.209931][ T7716] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.530'. [ 80.215855][ T7716] FAULT_INJECTION: forcing a failure. [ 80.215855][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.220075][ T7716] CPU: 3 UID: 0 PID: 7716 Comm: syz.0.530 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 80.220091][ T7716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.220098][ T7716] Call Trace: [ 80.220102][ T7716] [ 80.220106][ T7716] dump_stack_lvl+0x16c/0x1f0 [ 80.220124][ T7716] should_fail_ex+0x512/0x640 [ 80.220142][ T7716] _copy_to_user+0x32/0xd0 [ 80.220161][ T7716] simple_read_from_buffer+0xcb/0x170 [ 80.220175][ T7716] proc_fail_nth_read+0x197/0x270 [ 80.220188][ T7716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.220201][ T7716] ? rw_verify_area+0xcf/0x680 [ 80.220218][ T7716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.220230][ T7716] vfs_read+0x1e4/0xc60 [ 80.220243][ T7716] ? __pfx___mutex_lock+0x10/0x10 [ 80.220258][ T7716] ? __pfx_vfs_read+0x10/0x10 [ 80.220274][ T7716] ? __fget_files+0x20e/0x3c0 [ 80.220291][ T7716] ksys_read+0x12a/0x250 [ 80.220302][ T7716] ? __pfx_ksys_read+0x10/0x10 [ 80.220318][ T7716] do_syscall_64+0xcd/0x4c0 [ 80.220333][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.220344][ T7716] RIP: 0033:0x7f0054d8d37c [ 80.220353][ T7716] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.220363][ T7716] RSP: 002b:00007f0055c19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.220373][ T7716] RAX: ffffffffffffffda RBX: 00007f0054fb5fa0 RCX: 00007f0054d8d37c [ 80.220380][ T7716] RDX: 000000000000000f RSI: 00007f0055c190a0 RDI: 0000000000000004 [ 80.220386][ T7716] RBP: 00007f0055c19090 R08: 0000000000000000 R09: 0000000000000000 [ 80.220392][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.220398][ T7716] R13: 0000000000000000 R14: 00007f0054fb5fa0 R15: 00007fffc57e78b8 [ 80.220412][ T7716] [ 80.312068][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 80.386518][ T7722] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.533'. [ 80.422090][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'. [ 80.521734][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.540'. [ 80.558287][ T7743] netlink: 14220 bytes leftover after parsing attributes in process `syz.2.541'. [ 80.631719][ T7752] Bluetooth: MGMT ver 1.23 [ 80.780754][ T7769] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 80.820210][ T7776] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.553'. [ 81.254001][ T7818] 9pnet_fd: Insufficient options for proto=fd [ 81.325020][ T837] cfg80211: failed to load regulatory.db [ 81.634270][ T7840] @: renamed from vlan0 (while UP) [ 81.645219][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 81.645230][ T40] audit: type=1400 audit(1748909370.850:492): avc: denied { map } for pid=7839 comm="syz.0.571" path="/proc/365/net/vlan/vlan0" dev="proc" ino=4026533683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.656365][ T40] audit: type=1400 audit(1748909370.850:493): avc: denied { execute } for pid=7839 comm="syz.0.571" path="/proc/365/net/vlan/vlan0" dev="proc" ino=4026533683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.705024][ T7844] sctp: [Deprecated]: syz.0.572 (pid 7844) Use of int in max_burst socket option. [ 81.705024][ T7844] Use struct sctp_assoc_value instead [ 81.742150][ T7844] nvme_fabrics: missing parameter 'transport=%s' [ 81.744408][ T7844] nvme_fabrics: missing parameter 'nqn=%s' [ 81.887731][ T7852] netlink: 'syz.0.575': attribute type 37 has an invalid length. [ 81.942611][ T7855] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.577'. [ 81.949795][ T7859] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.576'. [ 81.957449][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 82.819985][ T7880] netlink: del zone limit has 4 unknown bytes [ 82.917418][ T63] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 82.917778][ T7884] bpf: Bad value for 'uid' [ 82.922576][ T40] audit: type=1400 audit(1748909372.120:494): avc: denied { write } for pid=7881 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 83.060131][ T40] audit: type=1400 audit(1748909372.260:495): avc: denied { read } for pid=7897 comm="syz.0.593" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.071878][ T40] audit: type=1400 audit(1748909372.260:496): avc: denied { open } for pid=7897 comm="syz.0.593" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.079565][ T40] audit: type=1400 audit(1748909372.270:497): avc: denied { ioctl } for pid=7897 comm="syz.0.593" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 83.102728][ T40] audit: type=1400 audit(1748909372.310:498): avc: denied { getopt } for pid=7898 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.198962][ T7910] kvm: emulating exchange as write [ 83.219772][ T40] audit: type=1400 audit(1748909372.420:499): avc: denied { ioctl } for pid=7917 comm="syz.1.602" path="socket:[20396]" dev="sockfs" ino=20396 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.227749][ T40] audit: type=1400 audit(1748909372.420:500): avc: denied { nlmsg_write } for pid=7917 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.280118][ T40] audit: type=1400 audit(1748909372.480:501): avc: denied { append } for pid=7918 comm="syz.3.601" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.397022][ T7931] kvm: pic: level sensitive irq not supported [ 83.397972][ T7931] kvm: pic: non byte read [ 83.402361][ T7931] kvm: pic: non byte read [ 83.405282][ T7931] kvm: pic: non byte read [ 83.407092][ T7931] kvm: pic: non byte read [ 83.408647][ T7931] kvm: pic: non byte read [ 83.410100][ T7931] kvm: pic: non byte read [ 83.411541][ T7931] kvm: pic: non byte read [ 83.413198][ T7931] kvm: pic: non byte read [ 83.414646][ T7931] kvm: pic: non byte read [ 83.416105][ T7931] kvm: pic: non byte read [ 83.604027][ T12] ------------[ cut here ]------------ [ 83.606004][ T12] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 83.608667][ T12] WARNING: CPU: 1 PID: 12 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 83.612017][ T12] Modules linked in: [ 83.613937][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 83.618956][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.622281][ T12] Workqueue: bond0 bond_mii_monitor [ 83.624709][ T12] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 83.626588][ T12] Code: 05 ff ff ff e8 f4 f8 5b f8 c6 05 0e 1b 30 07 01 90 ba 48 00 00 00 48 c7 c6 00 96 e2 8c 48 c7 c7 a0 95 e2 8c e8 64 c9 1a f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 ea a7 90 e8 9e dd c2 f8 e9 [ 83.632504][ T12] RSP: 0018:ffffc900000f79f0 EFLAGS: 00010286 [ 83.634603][ T12] RAX: 0000000000000000 RBX: ffff888033660000 RCX: ffffffff817ad368 [ 83.637081][ T12] RDX: ffff88801daec880 RSI: ffffffff817ad375 RDI: 0000000000000001 [ 83.639538][ T12] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 83.641957][ T12] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200001ef48 [ 83.644692][ T12] R13: ffff888033660cc5 R14: ffffffff8c583040 R15: ffffffff899945e0 [ 83.647117][ T12] FS: 0000000000000000(0000) GS:ffff8880d6865000(0000) knlGS:0000000000000000 [ 83.649858][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.651900][ T12] CR2: 0000200000002280 CR3: 000000004f911000 CR4: 0000000000352ef0 [ 83.654443][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.656946][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.659397][ T12] Call Trace: [ 83.660462][ T12] [ 83.661434][ T12] ethtool_op_get_link+0x1d/0x70 [ 83.663092][ T12] bond_check_dev_link+0x3f9/0x710 [ 83.664747][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 83.666505][ T12] bond_mii_monitor+0x3c0/0x2dc0 [ 83.668089][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 83.669769][ T12] ? rcu_is_watching+0x12/0xc0 [ 83.671270][ T12] process_one_work+0x9cf/0x1b70 [ 83.672914][ T12] ? __pfx_process_one_work+0x10/0x10 [ 83.674616][ T12] ? assign_work+0x1a0/0x250 [ 83.676083][ T12] worker_thread+0x6c8/0xf10 [ 83.677552][ T12] ? __pfx_worker_thread+0x10/0x10 [ 83.679159][ T12] kthread+0x3c5/0x780 [ 83.680455][ T12] ? __pfx_kthread+0x10/0x10 [ 83.681913][ T12] ? rcu_is_watching+0x12/0xc0 [ 83.683499][ T12] ? __pfx_kthread+0x10/0x10 [ 83.684984][ T12] ret_from_fork+0x5d7/0x6f0 [ 83.686439][ T12] ? __pfx_kthread+0x10/0x10 [ 83.687938][ T12] ret_from_fork_asm+0x1a/0x30 [ 83.689448][ T12] [ 83.690438][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.692717][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u32:0 Not tainted 6.15.0-syzkaller-10954-gd00a83477e7a #0 PREEMPT(full) [ 83.696291][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.699600][ T12] Workqueue: bond0 bond_mii_monitor [ 83.701224][ T12] Call Trace: [ 83.702278][ T12] [ 83.703228][ T12] dump_stack_lvl+0x3d/0x1f0 [ 83.704717][ T12] panic+0x71c/0x800 [ 83.705959][ T12] ? __pfx_panic+0x10/0x10 [ 83.707378][ T12] ? show_trace_log_lvl+0x29b/0x3e0 [ 83.709022][ T12] ? check_panic_on_warn+0x1f/0xb0 [ 83.710620][ T12] ? __linkwatch_sync_dev+0x1ed/0x230 [ 83.712297][ T12] check_panic_on_warn+0xab/0xb0 [ 83.713858][ T12] __warn+0xf6/0x3c0 [ 83.715098][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 83.716680][ T12] ? __linkwatch_sync_dev+0x1ed/0x230 [ 83.718349][ T12] report_bug+0x3c3/0x580 [ 83.719718][ T12] ? __linkwatch_sync_dev+0x1ed/0x230 [ 83.721380][ T12] handle_bug+0x184/0x210 [ 83.722707][ T12] exc_invalid_op+0x17/0x50 [ 83.724112][ T12] asm_exc_invalid_op+0x1a/0x20 [ 83.725608][ T12] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 83.727444][ T12] Code: 05 ff ff ff e8 f4 f8 5b f8 c6 05 0e 1b 30 07 01 90 ba 48 00 00 00 48 c7 c6 00 96 e2 8c 48 c7 c7 a0 95 e2 8c e8 64 c9 1a f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 ea a7 90 e8 9e dd c2 f8 e9 [ 83.733265][ T12] RSP: 0018:ffffc900000f79f0 EFLAGS: 00010286 [ 83.735271][ T12] RAX: 0000000000000000 RBX: ffff888033660000 RCX: ffffffff817ad368 [ 83.737764][ T12] RDX: ffff88801daec880 RSI: ffffffff817ad375 RDI: 0000000000000001 [ 83.740225][ T12] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 83.742697][ T12] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200001ef48 [ 83.745195][ T12] R13: ffff888033660cc5 R14: ffffffff8c583040 R15: ffffffff899945e0 [ 83.747672][ T12] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 83.749463][ T12] ? __warn_printk+0x198/0x350 [ 83.750977][ T12] ? __warn_printk+0x1a5/0x350 [ 83.752495][ T12] ethtool_op_get_link+0x1d/0x70 [ 83.754080][ T12] bond_check_dev_link+0x3f9/0x710 [ 83.755722][ T12] ? __pfx_bond_check_dev_link+0x10/0x10 [ 83.757497][ T12] bond_mii_monitor+0x3c0/0x2dc0 [ 83.759071][ T12] ? __pfx_bond_mii_monitor+0x10/0x10 [ 83.760762][ T12] ? rcu_is_watching+0x12/0xc0 [ 83.762270][ T12] process_one_work+0x9cf/0x1b70 [ 83.763862][ T12] ? __pfx_process_one_work+0x10/0x10 [ 83.765568][ T12] ? assign_work+0x1a0/0x250 [ 83.767055][ T12] worker_thread+0x6c8/0xf10 [ 83.768555][ T12] ? __pfx_worker_thread+0x10/0x10 [ 83.770176][ T12] kthread+0x3c5/0x780 [ 83.771511][ T12] ? __pfx_kthread+0x10/0x10 [ 83.773006][ T12] ? rcu_is_watching+0x12/0xc0 [ 83.774520][ T12] ? __pfx_kthread+0x10/0x10 [ 83.776003][ T12] ret_from_fork+0x5d7/0x6f0 [ 83.777478][ T12] ? __pfx_kthread+0x10/0x10 [ 83.778941][ T12] ret_from_fork_asm+0x1a/0x30 [ 83.780459][ T12] [ 83.782084][ T12] Kernel Offset: disabled [ 83.783480][ T12] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:09:32 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff93cce1e8 RCX=00000000ef9d33e4 RDX=1ffffffff1be2bb4 RSI=ffffffff8c154420 RDI=ffffffff8df15da0 RBP=0000000000000000 RSP=ffffc90005bb78f0 R8 =0ac0d5affe09d4ff R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff81a76580 R13=ffffc90005bb7a28 R14=0000000000000000 R15=ffff8880315cc880 RIP=ffffffff81a14a63 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8b5834c880 ffffffff 00c00000 GS =0000 ffff8880d6765000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd101d2a00 CR3=0000000032abf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4000000 Opmask01=0000000000004211 Opmask02=000000000301002f Opmask03=0000000040000000 Opmask04=00000000ffffdfff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 632f617461642f76 6564752f6e75722f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3233323a3031632f 617461642f766564 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffc10039b90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8b57bd17f0 00007f8b57bd17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a00070c3b1d0909 11004b09160b0210 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34a86577e1a698bb 646431c327b4fa58 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a1dd00706d 742e3233323a3031 632f617461642f76 6564752f6e75722f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00184d4554535953 4255530018485441 505645440056001f 56000e004c004b00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffc10039b90 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000a 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a5f39 3030322c39484349 2b3533515f435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70625f322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011319c2a630 0000000543219f4c 00000000000000c0 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011319c2a630 0000000543219f4c 0000000000000060 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8559a465 RDI=ffffffff9b0772e0 RBP=ffffffff9b0772a0 RSP=ffffc900000f7360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b0772a0 R15=ffffffff8559a400 RIP=ffffffff8559a48f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6865000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002280 CR3=000000004f911000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf7cde10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000f775b RBX=0000000000000002 RCX=ffffffff8b7d6ca9 RDX=0000000000000000 RSI=ffffffff8de0926d RDI=ffffffff8c1544a0 RBP=ffffed1003bd1910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c663d R10=ffff88806a6331eb R11=0000000000000001 R12=0000000000000002 R13=ffff88801de8c880 R14=ffffffff90a7b850 R15=0000000000000000 RIP=ffffffff8b7d580f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6965000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f51fd9f5f98 CR3=0000000034d3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbaf898fb 00007ffdbaf898fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbaf89e00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbaf89e00 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3437312874696475 6120303034313d65 707974203a746964 7561205d30345400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3437312274636475 6120303034313765 7073742030746364 7561205730345400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2032373a682e6b63 6f6c5f7665647465 6e2f74656e2f6564 756c636e692f2e20 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74657068223d656d 616e20223130362e 332e7a7973223d6d 6d6f632038313937 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f7268633d7373 616c637420745f65 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697665645f6b63 6f6c633a725f7463 656a626f3a755f6d 65747379733d7478 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63742074 5f6d64617379733a 725f6d6461737973 3a746f6f723d7478 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63732030 33363d6f6e692022 7366706d74766564 223d766564202274 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e5c4d80 RCX=ffffffff8b4aac78 RDX=ffff888029d50000 RSI=ffffffff8b4aa975 RDI=ffffffff8e5c4d80 RBP=0000000000000055 RSP=ffffc90006937ae0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff8b4aa975 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8198628b RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a65000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004f911000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaf7cde10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb780011c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000