last executing test programs: 3m32.182850111s ago: executing program 0 (id=521): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0006}, {0x1a, 0x6, 0x9, 0x8}, {0xcd9f, 0x2, 0x2, 0xfffffffa}]}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000480)="580000001500bfd427323b472547a45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffff1900e7ee000000deff0000000200000000", 0x58}], 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r4, 0xfffffffffffffffe, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRESDEC=r0, @ANYBLOB="8d0a8c2be9ecd90011000007000000006500"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r6}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m32.112481612s ago: executing program 0 (id=523): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000001580)=""/4098, 0x1002}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f00000013c0)=""/89, 0x59}, {&(0x7f00000000c0)=""/78, 0x4e}], 0x6}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 3m32.040764904s ago: executing program 0 (id=525): sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x3a5, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x3, [0x2], [0x800, 0x9], [0x0, 0x0, 0x4]}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="632a1eb3f0c0d7e1f3e8d83e8279b7e98f2a563510c1fcfd07c0d1e58d723f809bb0322337f15e8d329d0926517a3148030a1d29dd671ac729d9cef6e520827a2201ccd77c7dc703e9116d512859f12dceb0dad478a2369aba7403b262e45c11c1290b59d473d3beb8d3a31bc7f5dcd1a708ed0be6f4770112b98b16c93db109594b2a4b04efb89f5ef215ff6d9d93fb8edbcf8d1c62b39759c68e1a184914791d5462c363b80e38ea6cd8556c46c6252445e967b63edceb1040badab4eef2ef162c734cb8052dabd2bfedbdfd0b22bdc6b9dc0fca9b566b32c4dc85d26161877f60652000000031ae091ccaa53c0faf409dee0d109e684a93bc32e715052d24d7349df7bdaa7aea658d7b0a53376ca1c71ad1a878ceacf5ce8a8c64ace50f4d18f1027b9efc61a4b4a61e4b323fad5c47e4341c1292d0d1c1e15582399572a3f2983e1a15eb78767b87da6d3da400d215326419919de0df00007736000000000000000000edd0c789d37a7dcf3f5b8c9aa5329c38e2ed4c0fe3a0eae2a169c0322b4e5b96dd251a4477da4961b81a965463617e444bfac080d03ac4fbf2d0c40e22aed01bea5ce1b4ca5e0b249366f1b777a13fcfad3d0a047371d2169230d0d0597e10f58c8e2b20cf205740044c15fab6d52121b0a6b2c122096848d4e29e968e20c1615b1e11c61d8e0c58fe667224e89b83ef29e04c0c6fdf73c50bf051d8651613e5bf65f9e91a91f5ce1080bcbad3aa36f82e9d367cb537444e25cdc8c21b60216d540ac605f39e02950b5af27d81a80cddc1a96754465fe43887165f7dc70939eefaf15dce85857c9329b2bbdcf10f5c85f110a42bcc3489b45f3ffd8a8fadf90cf9", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2d, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x1, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$alg(r3, &(0x7f0000003780)=""/4096, 0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 3m31.953869085s ago: executing program 0 (id=526): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x400, r1}, 0x38) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x100) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x840, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x5fffffffe}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x2, 0x0, 0x7d889395ab3b5234, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x9}, {0x0, 0x4, 0x40000000, 0xfffffffffffffffc}, {0x40}, 0x0, 0x0, 0xa, 0x2, 0x1, 0xe0}}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x4810) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r4, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./file0\x00') setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 3m31.862063411s ago: executing program 0 (id=527): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75c73a02d0cf76f049a9e91a3630c9e6cf515b03bf70d20134d1f5bfbaa339b9b931033431", 0x26}], 0x1, &(0x7f0000002780)=[{0x10, 0x113, 0x8}], 0x10}}], 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.numa_stat\x00', 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x11, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000300)=@ax25={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)}, {&(0x7f0000000280)="880d781b4ef21d607d5e7c919c103bb3aab432f68f9ca6fbc372b91ef2fe4156112a72219595394a9a988e43754539e331829de8d66d4b4d25aa29f4d25192e7d55b5540699a91d7ee7ed600d07d979eb6cb56fb9f30f245d759a0ce92acdeaf37d3b97ac4080a6edbdfdd2cffbfb08af6ed45af400f", 0x76}, {&(0x7f0000000380)="031fa92e9bf3e7398fedc35fe57ba2862175ce7703c256ab6ff2b518301bfe4a486b5199b4be7aa1b488ab363fab3da094495b17a7cd7289e47d8f1b049a4d6b2850372747fc6946cf70f42059870d3d08", 0x51}, {&(0x7f0000000540)="37c63fca81342b77a6205e23c2f71f8820a6c844e5061bfb656d00d19ca91a7d4e4db2fca0197b4114faea614b5eb3300cca7f6a0cb433834955570f495a7d9bc50a8e4c687d8875f2156de4afae415c66efdb70058adf6b9bf61891c694d799d81cd3b9a406c2494dfd6183bc7ac9fa93869d1a5aa8958b7d2dd77f34710f631b413275c1d94331a14cbdf234a542b8e546a9b81309089d86e988261a418d1c2fb2ddd88107985743b2caf57bbe2b981a9fbae8fa867092b0af4d66eb381bb7ba99e88cf48266f8b54903214fa60f8beeb926e9d1082290e78216141fc79388c01430ed58e3a8ae807d", 0xea}, {&(0x7f0000000640)="24d9b2f70855ac303d5c113a594103d1f9c6ee0fe707b0be3f9fe298ba049b4e733435b14b53b7d6e4a2433e2f12cb3b71090d95419fbc4690b285bf98d1ee6f7f6d3b794d7600169e9163985fefadc4d66152ac23aef503c304eea9185f06f6bce6d7d64ecf", 0x66}, {&(0x7f00000006c0)="8c71e54ba3885c9f37fd91d4e88b4b646d4450c2fba965033384d6a8290e0c7ce8c1e8dcdbf058fcc1a40b04db3e25ad6cf295ee9ce4f4b8ea9870935c8167df3ac08f1ede59036f58ec6d173d3855b904cb0f3f077a245c979f47a1d4736ebb5233f0d2f63f3ab4a25d1bb787915646d4963cdaa41fb87e1ff11210da5227865955768c49d49fe645c55745b5c619c44dfae98851a9c0fd77ca5c798ef4f56252848d5daa6e9817afcfa03db795bb89f981", 0xb2}, {0x0}], 0x7}, 0x4040) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500"], 0x398}}, 0x4) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee8", 0xc3}], 0x1}}], 0x1, 0x40000d0) 3m31.596880763s ago: executing program 0 (id=532): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001500), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xe) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) write$UHID_CREATE(r0, &(0x7f0000001540)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/10, 0xa, 0x8001, 0x6, 0x9, 0x800, 0x80000001}}, 0x120) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x100031, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000001400000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) 3m31.568473508s ago: executing program 32 (id=532): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001500), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"8e0cd428f5e48c6445e3451f78a31d9e4ea215cb8d2dd2633827b08ec468c83212d53c92c1ce30b18672d69664c0d4aa1cd68e6445df3fe7c03e393165f8e81baa2cfd223176c451735660c96e723c3086bb5d29f1ed49fd7e008ddb5d1af184ec59871702c35fc6e2885e65819e1ed674ce9442e02ce7ada105fb56dae4ece2762c681d90d0d5773cbe634d78f1ad2f17def57c6817ffe38431dc27b498a8f6aee6f9a9a297e3bd13009b4d4020ba388fd12af5942d937406ada2ff4d903dd3418327caf41ce79beaace2078974b77e7841543573bea4c4edfc6687f030486bc2e5789b16a5d0f10187afbcc49e4427b5d0db80d5b360416c673a6d6dabcd4a9dfdffee0e93d76b6bd204b42c12cd321d2962ac3dd0f2d84ebb9c124ba5bad292ca822a40dacde3ae919ce6998183b492ff325fbe7a3d93dbc3a398dca7dae460ac1a92371aabeebd54c555ac7d618872b7f2f063762bf5e46382f12eba118c80f20c0db7e2de4809689656349980cbc70ad3386a88f3b4938aa3b9477174ce054d4864226db6fde47bea7dec65467d42af99f7d525d6b56224c611228a0b58feadccd2e72c202cf172746758d0131f585a9e5a5a3db9287b3af5ea0ea218946599f597e068495c3e9e742f29d28d490613b5772cf070929b2657e643ebf82b0a4d902265eb9a3d6a4128ceda4bd567c4178ef7e2185b57ed118a59313e31970dbf47d6344a0d982e388879538e679f42f648914109143c3b1fa3eaaeb601f1cef15e837953b8c02d439d8c638bc3de3ea30339564ca91e9392eec7d7d670f5f3cc94845b108eda89aca31cda9a7853ac53679c70ef323c968876de4e5233ef9547e0e8d5f0da71d92983fb954c585f2e95be9a3b8946176fbaf75bbefdcc92a0039c95069b3a7927692108791b1b91a494b28d446255763c1eac5075d481f1a93fd2ca6e9a764a0cc3ed35835fbb91135bd7bebf30299f2c7e4dd2824955ff79e071a01dba039cb0d99f77892c788c62f9dbd5c3c715ea6239f54f1415b403756f3046470267ac51ff73d0d8f01a0f0a00caf93a65cf1f6e4668dc668341844dbec1318ec6d56f57895fca79eb76c06838b5db04c7bf1446d038d5099061a8226ac03cae28a5fee91d272c5f663579322327d1411e17a5bd93cb8ebcabf785c3b63f1ade263eaba6434fb2661bfd26c5ce4d6937bc51fb42c41a10c8a8e51551ac417630485b9e0e9b3ca3f11b855019f7f41eb8c8c8292c753ccea04f1fea2ab0bffe74096df4a80ca190dc42b25e91d3625a10442e153ccb01feb054007c3dbe27eaa7f05013ca027459cdd65df4a89b3036409a905bae8fb41cef95eb3b8320698ea09e793308c3d4826b02141c094c19dc29106e97275393e6e9fefa7edaab5efe4379c5fa654cb7e1b55b93f7b30e66066b1eb7cad11811955ae34919bdd7d2b1255b91c091e3aec1ad7aa29adfeb181b6f48ee51a94d746d6d927fdb595ecf95444d23fdb2bb0061a897d967bbd8e2ec2d1ebb412541036a17579240c7c2468cbcdc5b82e7e561a6d99213bc9c52ad21323a7e2cbc309c80f098b30be60da581b344547f33cb3d6d9e2f48280b993e837f448496beb185eb5af20c5342777a6d717088f56dca02a05a632e5d8e2de9164b1e28018797d379664d37a52b2557be6a9e1fb8c2dfe8dc9928a8adcfa55b98dada2ce79b41e1c2ac00c6f33c898305261b0b6a85318a496848f519d041bba418e7b5e9edff1e93803795b51fa6e22077638a9600485c0c02058f9f138d38a26099f00119129c2db6364c3c3685d9d5a1e269c48dbe4d95f515755d74949592e24ffabe3edfb5300a02791b7b508b36d572e59e2a49c5fd9ae51fe2d53534935c59388536a70a14775c9b4fd7ec1e29ee95cb0c409811db5b32679c4091bc80f18bfbc9c84fc2c8291b17607a5d843ce708a9d6b51cfa166b67581b449be8a94972599b506ca047feffd86b92ccd6ecac25436eb3e6dee451906c3e766948bc8c891645883858be4b51e9f114cd47c83d89c9ce45d7493a946474fd74798f8e7abc99627cddefb0857f3ef95a111b8be035783a82d7e5d2de3151dfea30a73cceef4438e0c2ff2b9987331fca904030ae86db5ef58f90fad5329626898200f264a678c66102460c610381cc5e3b77e093b1acbb048d6c6903142bf5d867bb1a6f323e175342db3d2ae050f97ede2336315b820381126120331f1f8368942db447440a0cf2bd30aefb9564f98d3434770c21549ed2ed89bf6f0a534e5e3df38a48a65f9c25522e6bbfa44b25731343e1dc834b8cad77107042cbb6f64b9379f385d6595223298a68a9eb43b27a14302cf76c6f0b5650cd48ded767944474b9030a676668afb750f63be3d03401bcf60498e70bfd2beade32515e0d8544c2ef7a02bbb586fee2573ad248705a0a19fb42d3cf3ccd2db94a8edfcea74a9398949bd065cc37ec07c240c5eb859356659e19ac57e4b202e262598fc7e5c14db4a78c4ed68863f5c908f6480cd7c24ce0406b91845e3ba649dfe03509b05071b9d351babf9847fce550196aca07677e5c6ce2357b9cc348de8b43851ff9213b39833c1de64470039fa5e158c8d53f294bb4a417d1db0b544fca32b48a357886c6d79411fc236db16e1a40f6bc478ad33713956db16bec5b72e723803502c0b908a62531d7418a6b62a71b73bce73147d7c94f666a74849be927244dc8ce18e8aea78d8630f2a6b2616444a579263e80629ea898d674a701c093ab28a38011c6bd3de89093b1d34deeb2084d68bf87e3c9ffd782ab926ba3f9f8c3a12b63b4f5f3c344b52c6a8c39ce00488db83a3a17698440c013d3801dcbec14d0322afcfd9f212aa2c29c6dea5aa1aeab78b9f98f947ce41518a4cd3a3f039d5bbc0a4b3cdb6fbb282ae6db1896f9655f74020b628d44b48733fa1b1ee2b82e4abca9f29826983bd17ab37c85480925cbb93fc4b27b6931c2f94439ff93997b14efef5ec12a3d194b90983c0e9b5b2b36355793b3fea66a45bdb827fa1ed71e5422b11ff18f5282c7abc9be2e36b01104d12e809edd3fd781b4dac29dcd83da3b923f50c6748c109470776741cc9823bab2c25b4c1c26b4afdacec4943c20d44ff9c8857c74ede74ef87399f9302c535074c8f324099f196bdc205e4a5e5ef5d4045f0a1a5cbc84addcfeb6952d61a2afe4dedec82620bab02538c1dc0717df20f54c7eafd06d8fa8277c83376ec127f7a0662bb9f3a4ba12adc0c858c98df20db8fefdbb7f0f7ea0cb9ea3af9279d6e5cb161464371e438a64f814946324d93406be96a3f7291419536ae723e1227d19d04f0058373f4492b62cb65ee7a298ecb07b8c785908b8074b5c3a02078ae288ebb23b3f0296cf9daacc3f86ee7b9134e686c94c87506029de04b40d4b3742e85c892f7b5e7188fd636f119cba7a3531fef369ba21195cbdc525dd6142afdca310d1699b7a19a4e26f7ccbb60cff4caeef2a492124b137b1d3487f32ae7c179096849bbc8f0a5b99bae4cf0ce054ad88523482fcca2fd1f0ad668cc1f27ad1b1bb36a7e2e4ab23ef22609a9fbc52af6b7dfdc78d70b4a6eaa3cbeb22404cbd594733cde14d7806661cce7d43cb19eacb77b12ce9f6db344dc3810eb60bd2da5bcc40e1c7ba56912a3236429ca8551b0249800c08287bd470f5f032e295acb2916e41d5002738e928edd488b20ff5f2b043cd4ca07962e1072f241711ff954d11a5a90b21f43e1dd0ac18977906a5e59e9237ee17afbdbff98485e4d58053da0537f1e857903cd79324f92397c57982fe924e225513994202b1dff45aa6df45ef71c2a5e52453dc5502ff2471fbbec3cc926f9394d99365347aac8a66123735810582de48c88ef6f569fa439e0acdd03a41b5752b0e12d10662781305bcf2587fb6d3d25f3ba2b085cb70035a44cdb564f10cfc1b6ef440936689a26638e00c612dd94ae3b3246481b968602743149bb621ccb042ce35c7fed9b6c8ae701e6a5e936bd636891047116e22cb6c1400a6dfbad75a3d833f046e29e8cb6ffd4b0400e027483328e22cf9a8b6cc39fa75cca7deecf0a66db7e011a4700cf67437ed93176f86404433748ec8f77ce19ef2a2050fa3658a3073dfe96f4fc829f3dd8ab1b5a79c2536f24823f2991947fa5988e1c4ce95df80a5552bfe0b1c05b94393534e93a65994582bf92f683edcfc3fccf66afe3affeddc5a27b23c022cfbdd46af7ecdae952ba8310f01b93378e2a36c1c08cfce659828b8d4fa1e078ed54db62cc37031d49c971034757415ce80f2245672208ef479986076aaa8d146092170c6355aa7773512d6af103240ae65848efb8c77fb6e94ebd537c9389b0ea35aa5323bbd893f4c29ce81e3a8c2a9031ea6bd921667a1665a01f477fbe3bee6e6b1621561b93fe9a62e26cec38888c1acb682fea7b4b9e7cfcdcfc593d80d86b7ce14dbabcd3d1e741dfddf22b4d70f5e02654544587d1b7981380fd6ad88b3794d6f45f06a1fe1c29d111fb1eb717f0fdfd331c2afc4a00a633d14247caff4acebf6229acebd176acd43ff86bd2bfaacf3d6209b3320bc75605b1d46793e724950729f751f2e3d0bad07404ab609d1e17cd8e66ce55d53eaa1b694e58fb3ccbca9a40ef0265fa170bcdcce1eb5cd07574c497be6c6456edf99c1146acebbaec5e196181705b24756ed6276cf19cd04cced0235c9ef800b9a47515c9a9952e69a06947e6abfc3fc8be13e320dd7a6dc7494e6e8b0e898521d3030faf6ae7e9b5b9d5d906576a34316e0cc647b55288c9c4aa26e127d2833293a94b0712ac068ce0ee45b488b68dd4b51863825bb1b22216ef0e08bee9c72e672f6b3a7d024f579bd96d01b7ae28d628af05adb42c28859580846a02eee5ee531c6faeb21e9bc8410c0fa7af5d8a6cd040cf3e05e7624c054cae312403c74f87b71b30c7c3262e83f0b46a6db7854300428529a271730154e5f1604ff50a11cf41d570873a9e65c92318082911c509c0e944fae2d890c549e6e72a3d0a604f79cbae7ea236f109baa9adc21405b9d9ad8c9295246cafa7abb4b945316f38fa27da09f78fc15ab4b7b6bd0e35f1b283ca9480b8f127bf653b60e634cd057ebb460db5c3a9bacf392a058571985852f6252a6a40fc52e70c0b20f7d1f59ef3ba48d8b7536c25e49fc6280fd158ab23a0ad94bc6f01f9044f7c99a5b56b72054b3831bbfd3345e76c754a9ae69cb3ac64167569f7550d3439c3750ac38bce03c8f5702eb3e9a29a93abc6e6a00df17958d0cff8a8274e29572060e68af33dda7749dcaa0cceee42df3d42f76b1505fb091f65a9367e38b91654d844f9f23f6f1d66913fe0022da917e8494508124e1133f2e14ce427af2b8c62fc4f32f473227b3da22b9cb5d2136f84bc0094160e810d13a9b40a5161d1b0472cb351042fcd0fef5f610a390b9144bed5bc1b38154ff3daabeea5581cef6272462d8b641b306caf23e2e9a42df38a0f8c5fe89ab71c8a8912ef91207a3043fdc1b3f1d5ef364c823661073cb73f45156cb2783d2a1452906035b8f04c72b37ff9749ed96954d825c36e55f43062a4b8b47041a1ab4ab35f1b528967911d20aad3c5a96021d57f771614d4df4ec2fe0f9c8b522db00f71d5bbb7e406626c6f4dc2a81e8281341d022bd70b443ddb0a4566257f4181129f8fad5ef5be710069ce4b5ba644dc2452388a902648cd9054efb1e9fca81b1597cc6c4ef41c3ab34e987ca357e7083c644062800f02c3677c8872a3fe807", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0xe) syz_init_net_socket$ax25(0x3, 0x5, 0xce) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) write$UHID_CREATE(r0, &(0x7f0000001540)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/10, 0xa, 0x8001, 0x6, 0x9, 0x800, 0x80000001}}, 0x120) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x100031, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000001400000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) 3m13.750675548s ago: executing program 3 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x24, 0x1, 0xa, 0x3, 0xffffffff, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) 3m13.750169119s ago: executing program 3 (id=766): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x10000, 0x20000000, 0x7, 0x80}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = getpid() (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="300050801100010056bee339084eeef16f162471f4000000080007000000000005000200000000000800030005ac0f11"], 0x58}, 0x1, 0x0, 0x0, 0x44151}, 0x0) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) (async) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 3m13.701772459s ago: executing program 3 (id=768): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 3m13.582102293s ago: executing program 3 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0f2100850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0x4, @local, 0x24000000}}}, 0x3a) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002c72466f1a0000050000000600010005000000000000f1220c002674c5fc42"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaabb97bb08004500002c00000000002f9078ac1e0001e00000010000655800180000000086ddffff00000000"], 0x3e) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 3m13.502163005s ago: executing program 3 (id=771): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 3m13.362192236s ago: executing program 3 (id=775): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$VT_ACTIVATE(r0, 0x4b44, 0x10000000000004) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x1}) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x1}) fchdir(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000005cc0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000cd7a7235fa2d98578e489d346ffcea5aefc64eb77ee53a941db97181e06618ca15c27ce5a5067e9a82553bb4b264a798e68f7504aaea9665d420162c27a05d01995c48acaa8d1c3bc97576f2dc47442511e31bcc1e019cb858f6e17d3961bc6b2235d67a3a737b2d436ce982", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf25010000000000000007410000004c00180000020065746800"/98], 0x68}}, 0x4c080) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setresuid(r1, r1, r1) (async) setresuid(r1, r1, r1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rxrpc_rtt_rx\x00', r2, 0x0, 0x200}, 0x18) utimensat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r9, r10/1000+60000}}, 0x0) (async) utimensat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r9, r10/1000+60000}}, 0x0) 3m13.277009003s ago: executing program 33 (id=775): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) ioctl$VT_ACTIVATE(r0, 0x4b44, 0x10000000000004) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x1}) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000002c0)={0x1}) fchdir(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000005cc0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000cd7a7235fa2d98578e489d346ffcea5aefc64eb77ee53a941db97181e06618ca15c27ce5a5067e9a82553bb4b264a798e68f7504aaea9665d420162c27a05d01995c48acaa8d1c3bc97576f2dc47442511e31bcc1e019cb858f6e17d3961bc6b2235d67a3a737b2d436ce982", @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf25010000000000000007410000004c00180000020065746800"/98], 0x68}}, 0x4c080) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setresuid(r1, r1, r1) (async) setresuid(r1, r1, r1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rxrpc_rtt_rx\x00', r2, 0x0, 0x200}, 0x18) utimensat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r9, r10/1000+60000}}, 0x0) (async) utimensat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r9, r10/1000+60000}}, 0x0) 24.937698664s ago: executing program 1 (id=2980): r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r1, 0x8000001000000001, 0x3) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, 0x0, 0x191002) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="a1f872478e76a81b13ce", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000018fcffffffffffff4d02000000000000faffffff000038000100fdff7f000808030000000400000007000000000000000a000000000000000101000000000000060000000000000007000000000000007fffffffffffffffdb55a3354ca6d746db00abec7dc7bab5a718ac6f8460e9822dd4805bb853e28de04049bfa713bf4cef51bb53d0ad"], 0x9a) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) lseek(r7, 0x3, 0x0) close(r6) pselect6(0x40, &(0x7f0000000080)={0xfffffffffffffffd, 0x6, 0xfffffffffffffff9, 0x40, 0x7, 0x3ff, 0x6, 0x98}, &(0x7f0000000680)={0xc, 0x3, 0xa, 0x5, 0xfa, 0x7fff, 0xffffffffffffffff, 0x3}, &(0x7f0000000240)={0xf3e5, 0x83f, 0x400, 0x7, 0x400, 0x1ff, 0x2, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000340)={&(0x7f00000002c0)={[0xffffffff]}, 0x8}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket(0xb, 0xc00, 0x7) sendto(r11, &(0x7f00000005c0)="5882dcce6afc272893ae0ffedc395e62941741fe190051d4836d897c9ec5178b0abfb981c018d2d59703005c41bbf44da9a742f5c4edd3f98acfbeca2c514396f98961713dfaeaf60b84073ae1f3e7deed55557d5ffcc66d1badfaf57a1c4dbe56f133a304b6a0e8dd685f5c4ec597e548ad0ebc59fae35d504b3783809f68bde37c1beff585905c27e4a960985586", 0x8f, 0x840, &(0x7f00000001c0)=@in={0x2, 0x4e21, @multicast2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r9, 0x2f, 0x0, 0x0, @void, @value=r10}, 0x20) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @val=@perf_event={0x8}}, 0x18) close(r0) r12 = socket$netlink(0x10, 0x3, 0x13) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a8c201009078000001fe06e2d4c3d9080a0000000900000007000000"], 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0x7, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x400}]}}]}, 0x98}}, 0x0) 24.770595824s ago: executing program 1 (id=2982): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x3, 0x3, 0x5, 0xfffffffffffffc00, r1}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x4, 0x36, &(0x7f0000000000)="3d7d12af", &(0x7f0000000040)=""/54, 0x1, 0x0, 0x4f, 0xad, &(0x7f0000000080)="0d0c83507141010b3b63cb38825295ef7cdeba183c3b825c0c8c7c6caec6090a8dfb789817dab2d83196165111cf93862b91e38b5207bcdb1c836dcccd94edabc705a01538dfb454f0606449b6ad41", &(0x7f0000000180)="0c071f00fff3290500b891b82316aeffbe121e7063b27944be61f3c6808c7712861efe6f263a83e46b2aeec2ce10feb96553adae7956233bf4eceb6186775e411b6330f2fe8d92ca590f36ef4b2c3f401dd111d35fe0a7d08f88536a3f88c1c11b15cab644c78325928f64715a8f49330c5d6693580a0549db3b11db06bf2e7c7220237b75c5500dc3cf5f6cdff22c9c2259d6b391b3a04cb26dbaabb9c2df52a7a60bc060ac8e329ae49c226a", 0x0, 0x0, 0x3}, 0x50) 24.770426018s ago: executing program 1 (id=2983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000fdeed5020000e60800010073797a6e0000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073787a320000000014000040110001ed19454d284658bd702724d8e9405f5391e78729110a69679af7a4bce2382934e8cd1993ae946c3bbba3c5a3699289c98137cdf979f179b63788"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000001200004801c000180090001006d617371000000000c00028008000140000000480900010073797a3000000000090002"], 0x74}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000fdeed5020000e60800010073797a6e0000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073787a320000000014000040110001ed19454d284658bd702724d8e9405f5391e78729110a69679af7a4bce2382934e8cd1993ae946c3bbba3c5a3699289c98137cdf979f179b63788"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000001200004801c000180090001006d617371000000000c00028008000140000000480900010073797a3000000000090002"], 0x74}}, 0x0) (async) 24.681026314s ago: executing program 1 (id=2984): mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) socket(0x1c, 0x80000, 0x80) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0xffffffffffffffff, r1, 0x0, 0x2, 0xfddf}}, 0x20) 24.600786408s ago: executing program 1 (id=2985): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7fff, 0x9, 0x0, 0x7fffffff, 0x7, "afc53c85e0946db06c125108647a5a2672cb51"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) r4 = openat(r3, &(0x7f00000000c0)='./file0\x00', 0x204100, 0x80) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0xb3, &(0x7f0000000500)={@multicast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "7f1c13", 0x7d, 0x2f, 0xff, @local, @mcast2, {[@routing={0x3c, 0x0, 0x0, 0x6}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x4, 0x3, [], "a5e30d85"}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "1d3512b5c03bd9952348e352b27c9c24f4ea4f0f93a5bb795ce259215a70c62487f7ca2baaf2baaad810632957"}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x9, 0x2, 0x0, 0x1, 0x7, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0xd5, 0x1, 0x0, 0x2, 0x7, 0x9}, 0x2, {0x7, 0x3, 0x1, 0x19, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) splice(r7, 0x0, r9, 0x0, 0x400000, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') write$eventfd(r10, 0x0, 0x1f) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x2}, @var={0xe, 0x0, 0x0, 0xe, 0x4}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x30, 0x0]}}, &(0x7f0000000380)=""/141, 0x5f, 0x8d, 0x0, 0x4, 0x10000, @value=r4}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0xb2, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x1f, &(0x7f0000000580)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @ldst={0x0, 0x3, 0x7, 0x1, 0x4, 0x4, 0xfffffffffffffff0}, @alu={0x4, 0x0, 0x1, 0x2, 0x5, 0x140, 0x8}, @map_fd={0x18, 0xe, 0x1, 0x0, r10}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2f, r11, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x4, 0x6, 0xbb9}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r3], &(0x7f0000000a00)=[{0x3, 0x4, 0xe, 0x7}], 0x10, 0x47250cb3, @void, @value}, 0x94) 23.73940527s ago: executing program 1 (id=2992): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x100) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r0, @ANYRES64=r0], 0x44}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) r2 = socket(0x10, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.964947525s ago: executing program 34 (id=2992): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) (async) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x100) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32=r0, @ANYRES64=r0], 0x44}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) r2 = socket(0x10, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.280616638s ago: executing program 5 (id=3162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={0x24, 0xd, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x24}}, 0x2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@gettfilter={0x13, 0x2e, 0x201, 0x0, 0x0, {}, [{0x8, 0xf}]}, 0x2c}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0xc0049364, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x41) r8 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000109000000000000000002180000fe0000080000000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000100)) 3.967129547s ago: executing program 5 (id=3165): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x72bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000002f00), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000080027000000000008"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf250600000008000e00a000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030ac8000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a20000008500000006000000850000008e000000759b040008000000069800040600000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850003000c0000eeb6000800000003008bcb0000030000000000000001000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x35, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="7ceaf3916612514faf769256ca415900"/31, @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf250800000020000180140002006970766c616e310000000000000000000800030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) 3.757005063s ago: executing program 5 (id=3167): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x6c, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 3.756726047s ago: executing program 5 (id=3168): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r6, 0x0, 0x80, 0x4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0xd9a927c8b8d0e5a3, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYRESHEX=r3, @ANYRESDEC=r4, @ANYRES64=r6], 0x3aa0}}, 0x6400c051) 1.010808743s ago: executing program 6 (id=3201): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0xfffffffffffffffc) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x5f501}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 1.010466844s ago: executing program 6 (id=3202): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfb}, 0x14}, 0x4, 0x700000000000000}, 0x8850) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) 930.289987ms ago: executing program 6 (id=3203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564bf02f13acaf"]) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) (async, rerun: 64) mkdir(&(0x7f0000000180)='./file0\x00', 0x5c) (rerun: 64) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="be39", 0x2}, {&(0x7f00000001c0)="51bcb8e64b8cc46e343ec7f4bc7a157ae728023c649c5c2b736f860d042523cf9a920a823539d90722d7b1a20c5977662afae1093d2f6e4aebe38e1df60b0f11705487e437432b5898c3eee4418923cae574b536a22188a7ac01a119473e42790a1fc886b71f750f003a46f2d4908bb2fc67219e24b7684d417f9bbebd36cbb6292f0a08dee511f93ea0168bc203557642b49fe146e9954d2dc544e844c3d56ac668b37e40151d63e6494784a4fac7d7f300e8aea57c2f3f409bcf7dd8b31d7d2a4b03d541e80b5e9b230c", 0xcb}], 0x2, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}, 0x820) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000040)="40e4", 0x2, 0x0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='neigh_update\x00', r4, 0x0, 0x7}, 0x18) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async, rerun: 64) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @local}, &(0x7f00000000c0)=0xc) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private2, 0xf, r7}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x3, 0x300) (async) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xd4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4efdcae7956cbe01}, 0x4040) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000300)='jfs\x00', 0x1008, &(0x7f0000000000)='grpquota') 810.47204ms ago: executing program 6 (id=3204): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000400)={0x8}) r1 = socket$packet(0x11, 0x1, 0x300) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000062c0), 0xa201, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc4c03d12, &(0x7f0000000380)={0x7}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x9, 0x0, 0x0, 0x7}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000180)=0x8, 0x4) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x240080, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000080)) memfd_secret(0x80000) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x0) 669.840969ms ago: executing program 5 (id=3207): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000031001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffffe0, 0x0) 310.351948ms ago: executing program 4 (id=3217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5fc0}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000803}, 0x40000) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='io.latency\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xd82c, 0xee6b, 0xa, 0x14114, r4, 0x0, '\x00', r5, r6, 0x3, 0x3, 0x1, 0xb, @void, @value, @value=r7}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x0, 0x6, 0x4e40, 0x8010, r8, 0x0, '\x00', 0x0, r6, 0x5, 0x5, 0x3, 0x0, @value=r6, @void, @void, @value}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r11 = gettid() syz_clone3(&(0x7f0000002680)={0x20080000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {0xe}, &(0x7f00000004c0)=""/228, 0xe4, &(0x7f00000005c0)=""/23, &(0x7f0000002640)=[r10, r11, 0x0], 0x3, {r2}}, 0x58) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0xfffffff7, 0x1, 0x8, 0x420, r9, 0x1, '\x00', r5, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0xc, @void, @value, @void, @value}, 0x50) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000002780)) pread64(r8, &(0x7f00000027c0)=""/68, 0x44, 0xffffffffffff3c36) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002840)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b80)=@bpf_lsm={0x1d, 0x11, &(0x7f0000002880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x83}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002940)='GPL\x00', 0xf0f, 0xd5, &(0x7f0000002980)=""/213, 0x40f00, 0x9, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002ac0)={0x4, 0xa, 0x10, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002b00)=[r4, r9, r9, r4, r12, r9, r8, r9, r4], &(0x7f0000002b40)=[{0x1, 0x1, 0xd, 0xb}, {0x5, 0x2, 0x6, 0x4}, {0x5, 0x4, 0x9, 0x6}, {0x0, 0x3, 0xc, 0x7}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002d40)={@fallback=0xffffffffffffffff, 0x12, 0x1, 0x7, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000002c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r17 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002dc0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d80)={@fallback=r0, r13, 0x0, 0x2001, r14, @value=r17, @void, @void, @void, r16}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000002e00)={0x6, 0x6, 0x7, 0x8, 0x1, 0xffff}) bind$rxrpc(r13, &(0x7f0000002e40)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) ioctl$BLKIOMIN(r15, 0x1278, &(0x7f0000002e80)) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=@bloom_filter={0x1e, 0x1ff, 0xc1d0, 0x2000400, 0x238c0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r6, 0x5, 0x1, 0x3, 0x3, @void, @value, @void, @value}, 0x50) socket$netlink(0x10, 0x3, 0xfa36ef8c7a4d516f) ioctl$IOC_PR_PREEMPT_ABORT(r13, 0x401870cc, &(0x7f0000002f40)={0xf601, 0x8001, 0x9, 0x7}) getsockopt$inet_tcp_int(r13, 0x6, 0x12, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) 309.956173ms ago: executing program 2 (id=3218): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r1, 0x100}}, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0), 0x210040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x800, 0x4, &(0x7f00000007c0)) socket$tipc(0x1e, 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000008c0), 0x200, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000cc0)={0x2020}, 0x2020) r3 = dup(r0) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000004880)=[{&(0x7f0000000140)="be38", 0x2}, {&(0x7f00000030c0)="932945a138abe9d4baec241018bec46b117b2bca6044d67d4be6183f9ea8f9b4e3daa0d4b90531e2b44c39431e2a1b793156439cec984068a523dbcca25ea864461e271cda7a4301d09eb581a1c38a913083d0e15f5f8fd7bff10ed4068023cf4982b7c486da3f5150cb534498a0c426e663bfae8c5b87ea9e6b0fc0730700c3d63a3ece56c0e81639689201905ad3eec0d423c04ae85eebf813b7d98963", 0x9e}, {&(0x7f0000004900)="ebfbeab1191b45f7ea893e334fca8a00ba9c388d57c87c62951e1301de572fefa717bdaf0f8a239f322117a707a57420b9dc3aa93300076958b773944e591061704680176777c41affb3a4182511fdcd46d3a0d30433a08257bc2ca2f80b652f3f7e3b1308befb3e201d99d9ef4dca300ad0b413bfec912004b3f853df596e91f3eba6e9484acf1b31f11f05efc60c2cca05be1689a310609e1152502f7b096deee28855629e921e2d357324372ed981b96763ef8c8275ff99e39121dd174eaffe29", 0xc2}, {&(0x7f00000047c0)="305078dfa56d5ee016bf5c63781902bbf34434288d085f421abc508500136d2531983d9fe1602ebfeb2202a12fdf9291da4e941d39a473b9fa70c82ece25ae1c44c89c77d9b672800e11650ae12ff86ee4cc6d95d9c4e3fa6e71cbd595432324ddeb32ac6e72285653370c998aa10a2e018d205442d4cc2ee39b0a8fbee8b9fa858a4fe68db98a646a80ff28b2b24025758c8f4153fb2f8c27fbec0f3ac707e8bee6f4573b70834d82351ab9123620fd8e462870193309", 0xb7}, {&(0x7f0000003180)="be3aadb9a3f12b6e044a3c6dbb0159d70559cab9b326a9fa60656507f641c17292f30cd46dddb4f05a171268c0092bae10649c236f29", 0x36}, {&(0x7f00000031c0)="b86a7951a8d5c202c75a9f0ed9603d6224aafc4fe64929cadac889a849357c36901e43165894f999fd37321f349da7916e6bab327abc4c1393", 0x39}], 0x6, &(0x7f00000046c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x86, 0x12, "324029bd0a5ad593abed4a9fdb67fe4a"}, @noop]}}}], 0x48}, 0x0) 282.024203ms ago: executing program 2 (id=3219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="e2b09c7e6781a4f97dc47b25229279d5883fdc329f7f7c4a8c23a58656f1c150e10186bd54c104b924041f5db18505dda5786b0b3de7339284605abd443cda6b174e4ed7d51071632b2b8105226d6ae697dd32ae5c6e718c5d5dfe1e5e0c7a5d59c7e759a8fd81af2d8e8056f2fc2847b0e340afcd11caf5629243ea8070758359855ce341c6f7fe2f9f", 0x8a, 0x4000000, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r3, 0x796c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}}, 0x7, 0x21}, 0x90) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 274.01682ms ago: executing program 6 (id=3220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x2) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004805}, 0x20000000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x101600) (async, rerun: 32) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000000c0)={0x5, 0xffffffff, 0x7, 0x3, 0x8801be, 0x0}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b56b6e00010000000a0010006a"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 272.716051ms ago: executing program 4 (id=3221): r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)) 189.688103ms ago: executing program 4 (id=3222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 189.542601ms ago: executing program 2 (id=3223): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xf00, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 139.616404ms ago: executing program 2 (id=3224): timer_create(0x9, 0x0, &(0x7f0000000500)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x1000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400"], 0x48}}, 0x0) 139.242414ms ago: executing program 5 (id=3225): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000191407"], 0x10}}, 0x0) r1 = syz_io_uring_setup(0x3ffe, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x1, 0xffffffffffffffff, 0x10001, 0x7, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000780)=[{&(0x7f0000003340)=""/4096, 0x1000}], 0x1) io_uring_enter(r1, 0x54, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0c000d0020880200140003006d6163766c616e31"], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182", 0x6, 0xfffffffffffffffe) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 138.894044ms ago: executing program 2 (id=3226): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r3, 0x8, 0x10}, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000240)) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x1000000, 0x6031, 0xffffffffffffffff, 0xe38a5000) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x1) (async) munlockall() socket$netlink(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2e, 0x0, 0x0, @void, @value}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 75.841244ms ago: executing program 4 (id=3227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="24000000040803000000000000000000050000060500030009000000060002403ff90000af2142ed952bf52d70e59a659fc405a701d93d1520e3f725f91a12eef97d834191144686cc33fdc46afc98b3b4eb418c89a7ebad5ddafaf4ebd74b988c03601002f6f158fdb9a0d1a4a18f55fdef1ab762e532f4f24e6c0d4784eb5c260b89f6db7aac29e6d92be887b0f0df8a679adcae6bd570ede7a221d30ce3378ccc940aa91ab0994ae75c9dc439aab41b87c3913265a024782b7ee26022707839f8a9ab65c5d0868bb77c3e7044a6fc7306499873e5c20f07abaa1827395cd77b557c7a5232cc121ed946"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000006300)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/704], 0x2c0}, 0x1, 0x0, 0x0, 0x4095}, 0x800) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r6, 0x4000, r3}, 0x18) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) 75.651451ms ago: executing program 2 (id=3228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x10}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x104000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="24559c00", @ANYRES16=r1, @ANYBLOB="100026bd7000ffdbdf25570000000600950002000000060095000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008011) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = eventfd(0x3) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f00000002c0)="0ec6da9b68052f02515318123fcbb120d4174c7800a9a535b4b960d203c941fb20070e6446550a943e4cd90b011b7277a65c86cf15a510cd16ab289824313ed0685374607675457a6785663192f68198f3bf6abbf51d098732e63e31a1a122b53d535ddf60e59a9c59355578fe663574c05fd5428063de81f2b811", 0x7b, 0x5, 0x0, 0x3, r5}, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGETD(r8, 0x5424, &(0x7f0000000400)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}}, 0x0) 688.276µs ago: executing program 4 (id=3229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r1], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020019000000000000020000000900020073797a310000000005000100070006000000000001000180140000bb060004404e1f0000050007008800000000000000e2ffffff0000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 508.939µs ago: executing program 6 (id=3230): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 4 (id=3231): r0 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)) kernel console output (not intermixed with test programs): 2/0x640 [ 229.405044][T13824] ? fs_reclaim_acquire+0xae/0x150 [ 229.405063][T13824] ? tomoyo_encode2+0x100/0x3e0 [ 229.405087][T13824] should_failslab+0xc2/0x120 [ 229.405113][T13824] __kmalloc_noprof+0xd2/0x510 [ 229.405142][T13824] tomoyo_encode2+0x100/0x3e0 [ 229.405171][T13824] tomoyo_encode+0x29/0x50 [ 229.405193][T13824] tomoyo_realpath_from_path+0x18f/0x6e0 [ 229.405220][T13824] ? tomoyo_profile+0x47/0x60 [ 229.405264][T13824] tomoyo_path_number_perm+0x245/0x580 [ 229.405287][T13824] ? tomoyo_path_number_perm+0x237/0x580 [ 229.405312][T13824] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.405333][T13824] ? find_held_lock+0x2b/0x80 [ 229.405379][T13824] ? find_held_lock+0x2b/0x80 [ 229.405398][T13824] ? hook_file_ioctl_common+0x145/0x410 [ 229.405421][T13824] ? __fget_files+0x20e/0x3c0 [ 229.405450][T13824] security_file_ioctl+0x9b/0x240 [ 229.405475][T13824] __x64_sys_ioctl+0xb7/0x210 [ 229.405497][T13824] do_syscall_64+0xcd/0x4c0 [ 229.405527][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.405544][T13824] RIP: 0033:0x7f34f1b8e929 [ 229.405558][T13824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.405575][T13824] RSP: 002b:00007f34f2a99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.405593][T13824] RAX: ffffffffffffffda RBX: 00007f34f1db5fa0 RCX: 00007f34f1b8e929 [ 229.405606][T13824] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 229.405617][T13824] RBP: 00007f34f2a99090 R08: 0000000000000000 R09: 0000000000000000 [ 229.405627][T13824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.405637][T13824] R13: 0000000000000000 R14: 00007f34f1db5fa0 R15: 00007fff1c8fe208 [ 229.405662][T13824] [ 229.484687][ T1962] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 229.487220][T13824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.507888][ T1962] usb 7-1: device descriptor read/8, error -71 [ 229.755599][ T1962] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 229.777904][ T1962] usb 7-1: device descriptor read/8, error -71 [ 229.792007][ T40] audit: type=1400 audit(1750426234.178:661): avc: denied { ioctl } for pid=13836 comm="syz.4.2411" path="socket:[68530]" dev="sockfs" ino=68530 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 229.887101][ T1962] usb usb7-port1: unable to enumerate USB device [ 230.277894][T13858] xt_hashlimit: size too large, truncated to 1048576 [ 230.328988][T13860] : renamed from bridge_slave_0 [ 230.530668][T13863] __nla_validate_parse: 1 callbacks suppressed [ 230.530680][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2420'. [ 230.959561][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 230.963353][ T40] audit: type=1400 audit(1750426235.348:662): avc: denied { ioctl } for pid=13872 comm="syz.1.2424" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 230.963660][T13873] /dev/sg0: Can't lookup blockdev [ 231.020136][T13879] FAULT_INJECTION: forcing a failure. [ 231.020136][T13879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.024392][T13879] CPU: 0 UID: 0 PID: 13879 Comm: syz.1.2426 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 231.024415][T13879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.024427][T13879] Call Trace: [ 231.024434][T13879] [ 231.024442][T13879] dump_stack_lvl+0x16c/0x1f0 [ 231.024480][T13879] should_fail_ex+0x512/0x640 [ 231.024512][T13879] _copy_to_user+0x32/0xd0 [ 231.024537][T13879] simple_read_from_buffer+0xcb/0x170 [ 231.024562][T13879] proc_fail_nth_read+0x197/0x270 [ 231.024584][T13879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.024605][T13879] ? rw_verify_area+0xcf/0x680 [ 231.024621][T13879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.024642][T13879] vfs_read+0x1e1/0xc60 [ 231.024667][T13879] ? __pfx___mutex_lock+0x10/0x10 [ 231.024694][T13879] ? __pfx_vfs_read+0x10/0x10 [ 231.024719][T13879] ? __fget_files+0x20e/0x3c0 [ 231.024769][T13879] ksys_read+0x12a/0x250 [ 231.024790][T13879] ? __pfx_ksys_read+0x10/0x10 [ 231.024812][T13879] ? fput+0x70/0xf0 [ 231.024841][T13879] do_syscall_64+0xcd/0x4c0 [ 231.024868][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.024885][T13879] RIP: 0033:0x7f5d6518d33c [ 231.024899][T13879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.024917][T13879] RSP: 002b:00007f5d66027030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.024934][T13879] RAX: ffffffffffffffda RBX: 00007f5d653b5fa0 RCX: 00007f5d6518d33c [ 231.024946][T13879] RDX: 000000000000000f RSI: 00007f5d660270a0 RDI: 0000000000000004 [ 231.024957][T13879] RBP: 00007f5d66027090 R08: 0000000000000000 R09: 0000000000000000 [ 231.024968][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.024979][T13879] R13: 0000000000000000 R14: 00007f5d653b5fa0 R15: 00007ffd939e3108 [ 231.025004][T13879] [ 231.582399][T13914] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2439'. [ 231.586546][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2439'. [ 232.026744][T13923] Invalid logical block size (3) [ 232.257149][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 232.261492][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 232.396217][T13940] cgroup: Invalid name [ 232.399141][T13940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2446'. [ 232.402190][T13940] unsupported nlmsg_type 40 [ 232.967352][ T40] audit: type=1400 audit(1750426237.358:663): avc: denied { accept } for pid=13966 comm="syz.1.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.025578][ T1962] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 233.137333][T13971] kvm_pr_unimpl_wrmsr: 10 callbacks suppressed [ 233.137355][T13971] kvm: kvm [13970]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 233.154149][T13971] kvm: kvm [13970]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 233.186750][ T1962] usb 9-1: not running at top speed; connect to a high speed hub [ 233.193084][ T1962] usb 9-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.202738][ T1962] usb 9-1: config 1 interface 0 altsetting 207 endpoint 0x2 has invalid maxpacket 1015, setting to 64 [ 233.207732][ T1962] usb 9-1: config 1 interface 0 has no altsetting 0 [ 233.212996][ T1962] usb 9-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.40 [ 233.217154][ T1962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.225666][ T1962] usb 9-1: Product: ᰃ [ 233.227507][ T1962] usb 9-1: Manufacturer: ≻ݴ闧擖蛋삢Ữ崠ᡱ늨剐㽹ⷋ˱椘핞煯筘齗냑鎗髹羠䝎ᶫ᥊舙뉉귙떯ẖႢ뉝憐楯눡ぱ梇䤋恕눫티紻䪨࢛塣걇싮햙篘矜럋䌙㷧ၑ뺊꿴榀癈㝀瓆钱Ẅ࡯⤷흈 [ 233.247656][ T1962] usb 9-1: SerialNumber: 邇ቜ氢趍ꑁ㝿撎击嚍䷍㢅꜄琈辌៧빵缳᤾出쯺ﾢ솈ċ個뫦㸏馃ꂅ酫秅饌ᇠ퍹㊐▢꼌뒻㫟嗄ᔅ漣궚뛼搴䱞욾橰頌±乭钓ന隫ᬺ뜖Ȃﾪ渾ᇡ俜鉌숕팢ꥄ헢뮅௄쿾㇗쫝ὕ㪟펶沄⥔粻ሳچ䷨
 [ 233.264796][T13962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 233.401908][T13987] netlink: 'syz.5.2461': attribute type 10 has an invalid length. [ 233.481188][ T1962] usbhid 9-1:1.0: can't add hid device: -71 [ 233.483260][ T1962] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 233.488082][ T1962] usb 9-1: USB disconnect, device number 27 [ 233.575738][T13992] bridge1: entered promiscuous mode [ 233.584572][T13989] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2462'. [ 233.619539][T13989] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 234.076462][T14006] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2469'. [ 234.113761][T14010] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 234.165668][ T24] vhci_hcd: vhci_device speed not set [ 234.171924][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.174303][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.181085][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.183989][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.188443][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.190744][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.193582][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.195956][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.198294][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.200577][ T5991] hid-generic 8001:0006:0009.003B: unknown main item tag 0x0 [ 234.205377][ T5991] hid-generic 8001:0006:0009.003B: hidraw1: HID v8.00 Device [syz1] on syz1 [ 234.249939][T14020] fido_id[14020]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.279210][ T40] audit: type=1400 audit(1750426238.668:664): avc: denied { bind } for pid=14024 comm="syz.5.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 234.307496][ T40] audit: type=1400 audit(1750426238.698:665): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 234.910640][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2493'. [ 235.230398][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.232770][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.235206][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.242584][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.246145][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.249321][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.252375][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.265978][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.268454][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.271320][ T5991] hid-generic 8001:0006:0009.003C: unknown main item tag 0x0 [ 235.277518][ T5991] hid-generic 8001:0006:0009.003C: hidraw1: HID v8.00 Device [syz1] on syz1 [ 235.309108][T14108] fido_id[14108]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.442908][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff96 [ 235.446640][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xff96 [ 235.452586][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.465376][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff9a [ 235.468580][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xff9a [ 235.474675][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff82 [ 235.477793][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xff82 [ 235.484274][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.494267][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.518207][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.551001][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.563829][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.614455][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.648457][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xf926 [ 235.652334][T14110] kvm: kvm [14109]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xf926 [ 235.666395][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.689660][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.730832][T14110] kvm_intel: kvm [14109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xffb9 [ 235.864774][T14115] __nla_validate_parse: 2 callbacks suppressed [ 235.864791][T14115] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2507'. [ 235.870917][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2507'. [ 236.650832][ T6005] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 236.797435][ T6005] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 236.806342][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.809087][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.812484][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.815408][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.821190][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.824816][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.828132][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.830968][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.845575][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.848465][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.851253][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.854625][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.857661][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.860435][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.863707][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.867180][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.869978][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.873265][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.876512][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.879274][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.883229][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.886142][ T6005] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 236.888858][ T6005] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 236.891934][ T6005] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.895804][ T6005] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 236.898562][ T6005] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 236.901073][ T6005] usb 7-1: Product: syz [ 236.902384][ T6005] usb 7-1: Manufacturer: syz [ 236.903814][ T6005] usb 7-1: SerialNumber: syz [ 236.906651][ T6005] usb 7-1: config 0 descriptor?? [ 236.911798][ T6005] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 237.203617][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 237.204451][ T5991] usb 7-1: USB disconnect, device number 40 [ 237.215886][ T5991] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 237.631183][ T40] audit: type=1400 audit(1750426242.018:666): avc: denied { write } for pid=24 comm="kworker/2:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72856 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.686790][T14162] kAFS: Can only specify source 'none' with -o dyn [ 237.951440][ T40] audit: type=1400 audit(1750426242.338:667): avc: denied { setopt } for pid=14184 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.186231][T14172] kvm_pr_unimpl_wrmsr: 8 callbacks suppressed [ 238.186252][T14172] kvm: kvm [14171]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 238.192687][T14172] kvm: kvm [14171]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 238.197780][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 238.200577][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 238.201951][T14172] kvm: kvm [14171]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 238.204172][T14193] netlink: 'syz.4.2536': attribute type 11 has an invalid length. [ 238.207979][T14172] kvm: kvm [14171]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 238.219538][ T40] audit: type=1400 audit(1750426242.608:668): avc: denied { module_load } for pid=14192 comm="syz.4.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 238.219600][T14193] Invalid ELF header type: 7424 != 1 [ 238.229010][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2536'. [ 238.419540][T14200] /dev/nullb0: Can't open blockdev [ 238.540916][T14212] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.2542'. [ 238.543831][T14212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 238.761119][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2547'. [ 238.833242][ T40] audit: type=1400 audit(1750426243.218:669): avc: denied { ioctl } for pid=14234 comm="syz.1.2550" path="socket:[70428]" dev="sockfs" ino=70428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.844311][T14235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2550'. [ 238.989708][ T40] audit: type=1326 audit(1750426243.378:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14241 comm="syz.5.2552" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f213df8e929 code=0x0 [ 239.357430][T14255] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2556'. [ 239.618707][T14267] kvm: kvm [14266]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6400 [ 239.622563][T14267] kvm: kvm [14266]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x6400 [ 239.639032][T14267] kvm: kvm [14266]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6400 [ 239.643161][T14267] kvm: kvm [14266]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x6400 [ 239.657883][T14267] kvm: kvm [14266]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 239.661578][T14267] kvm: kvm [14266]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 239.941132][T14286] netlink: 'syz.4.2565': attribute type 23 has an invalid length. [ 239.977931][T14289] vivid-000: disconnect [ 239.984680][T14289] vivid-000: reconnect [ 239.990607][ T40] audit: type=1400 audit(1750426244.378:671): avc: denied { checkpoint_restore } for pid=14288 comm="syz.4.2566" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.268053][T14314] overlayfs: failed to clone upperpath [ 240.449725][T14328] ip6t_srh: unknown srh invflags 7D00 [ 240.515933][T14336] fuse: blksize only supported for fuseblk [ 240.754423][T14364] syz.5.2592(14364): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 240.890861][T14378] 9pnet: Could not find request transport: rdma`$W6`П0X [ 240.924191][T14384] __nla_validate_parse: 3 callbacks suppressed [ 240.924204][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2599'. [ 240.930288][T14384] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2599'. [ 240.940068][T14384] geneve4: entered promiscuous mode [ 240.941774][T14384] geneve4: entered allmulticast mode [ 241.142015][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2602'. [ 241.144966][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2602'. [ 241.323403][T14417] netlink: 'syz.2.2608': attribute type 15 has an invalid length. [ 241.326793][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2608'. [ 241.570350][T14430] netlink: 'syz.2.2613': attribute type 30 has an invalid length. [ 241.606319][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 241.718176][T14438] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 241.773307][T14448] trusted_key: encrypted_key: insufficient parameters specified [ 241.831763][T14456] Cannot find del_set index 1 as target [ 241.985552][ T6180] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 242.008630][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2627'. [ 242.021960][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.024403][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.027318][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.029762][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.032117][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.034435][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.036831][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.039543][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.042489][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.044816][ T24] hid-generic 8001:0006:0009.003D: unknown main item tag 0x0 [ 242.055792][ T24] hid-generic 8001:0006:0009.003D: hidraw1: HID v8.00 Device [syz1] on syz1 [ 242.088426][T14471] fido_id[14471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 242.147893][ T6180] usb 7-1: config 0 has no interfaces? [ 242.150122][ T6180] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 242.152982][ T6180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.159452][ T6180] usb 7-1: config 0 descriptor?? [ 242.256397][ T40] audit: type=1400 audit(1750426246.648:672): avc: denied { shutdown } for pid=14489 comm="syz.5.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.419173][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2618'. [ 242.427433][T14498] overlay: ./file0 is not a directory [ 242.533091][ T40] audit: type=1400 audit(1750426246.918:673): avc: denied { setopt } for pid=14507 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.592262][T14499] netlink: 880 bytes leftover after parsing attributes in process `syz.2.2618'. [ 242.617138][T14517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2644'. [ 242.621778][T14517] netlink: 'syz.5.2644': attribute type 2 has an invalid length. [ 242.624973][T14517] netlink: 'syz.5.2644': attribute type 1 has an invalid length. [ 242.666795][T14519] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 242.679413][T14519] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 242.682788][T14519] overlayfs: missing 'lowerdir' [ 243.059905][T14540] openvswitch: netlink: IPv4 tunnel dst address is zero [ 243.083721][ T40] audit: type=1400 audit(1750426247.468:674): avc: denied { accept } for pid=14541 comm="syz.4.2653" path="socket:[75905]" dev="sockfs" ino=75905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.091069][ T40] audit: type=1400 audit(1750426247.468:675): avc: denied { ioctl } for pid=14541 comm="syz.4.2653" path="socket:[75905]" dev="sockfs" ino=75905 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.121750][T14547] nftables ruleset with unbound chain [ 243.376788][T14564] overlayfs: failed to clone upperpath [ 243.423154][T14564] overlayfs: failed to clone upperpath [ 243.459848][T14569] No source specified [ 243.562921][T14585] 9pnet_fd: p9_fd_create_tcp (14585): problem connecting socket to 127.0.0.1 [ 243.685574][ T6180] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 243.853571][ T6180] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.857187][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.857564][ T6180] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 243.860053][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.863287][ T6180] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 243.868417][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.869600][ T6180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.873267][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.878977][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.881858][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.884497][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.887642][T14613] netlink: 'syz.5.2675': attribute type 3 has an invalid length. [ 243.889640][ T6180] usb 6-1: config 0 descriptor?? [ 243.890065][T14613] netlink: 'syz.5.2675': attribute type 2 has an invalid length. [ 243.894590][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.897044][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.899460][ T5991] hid-generic 8001:0006:0009.003E: unknown main item tag 0x0 [ 243.903212][ T5991] hid-generic 8001:0006:0009.003E: hidraw1: HID v8.00 Device [syz1] on syz1 [ 243.948153][T14615] fido_id[14615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 243.993009][T14627] netlink: 'syz.5.2678': attribute type 11 has an invalid length. [ 244.114951][ T5991] usb 6-1: USB disconnect, device number 19 [ 244.428961][ T40] audit: type=1400 audit(1750426248.818:676): avc: denied { ioctl } for pid=14640 comm="syz.4.2683" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.438248][ T40] audit: type=1400 audit(1750426248.828:677): avc: denied { map } for pid=14640 comm="syz.4.2683" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.446731][ T40] audit: type=1400 audit(1750426248.828:678): avc: denied { execute } for pid=14640 comm="syz.4.2683" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 244.748998][ T6180] usb 7-1: USB disconnect, device number 41 [ 244.949966][T14660] kvm_pr_unimpl_wrmsr: 26 callbacks suppressed [ 244.949984][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xff00 [ 244.954848][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xff00 [ 244.959184][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff00 [ 244.962348][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xff00 [ 244.989154][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff00 [ 244.992955][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xff00 [ 245.022529][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff00 [ 245.027148][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xff00 [ 245.031539][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc300 [ 245.035383][T14660] kvm: kvm [14659]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0xc300 [ 245.090888][ T40] audit: type=1400 audit(1750426249.478:679): avc: denied { ioctl } for pid=14674 comm="syz.1.2695" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.102926][T14675] block device autoloading is deprecated and will be removed. [ 245.103355][ T40] audit: type=1400 audit(1750426249.488:680): avc: denied { shutdown } for pid=14674 comm="syz.1.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.113487][ T40] audit: type=1400 audit(1750426249.498:681): avc: denied { ioctl } for pid=14669 comm="syz.4.2693" path="/487/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 245.228286][T14682] bridge_slave_1: left allmulticast mode [ 245.230022][T14682] bridge_slave_1: left promiscuous mode [ 245.232038][T14682] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.236746][T14682] bridge_slave_0: left allmulticast mode [ 245.238775][T14682] bridge_slave_0: left promiscuous mode [ 245.240547][T14682] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.283302][T14687] CIFS: Unable to determine destination address [ 245.554186][ T40] audit: type=1400 audit(1750426249.938:682): avc: denied { ioctl } for pid=14691 comm="syz.4.2701" path="socket:[74168]" dev="sockfs" ino=74168 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.697363][T14701] 9pnet_virtio: no channels available for device syz [ 245.723611][ T40] audit: type=1400 audit(1750426250.108:683): avc: denied { ioctl } for pid=14699 comm="syz.5.2705" path="socket:[74179]" dev="sockfs" ino=74179 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 245.745043][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.750729][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.754327][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.757353][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.760188][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.762598][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.764911][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.768014][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.770466][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.772764][ T6005] hid-generic 8001:0006:0009.003F: unknown main item tag 0x0 [ 245.780746][ T6005] hid-generic 8001:0006:0009.003F: hidraw1: HID v8.00 Device [syz1] on syz1 [ 245.819522][T14712] fido_id[14712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.843797][ T40] audit: type=1400 audit(1750426250.228:684): avc: denied { accept } for pid=14714 comm="syz.2.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 245.937034][T14725] /dev/nullb0: Can't open blockdev [ 246.033314][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.038904][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.042479][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.049104][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.052714][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.126986][ T7871] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.130949][ T7871] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 246.218998][T14722] __nla_validate_parse: 13 callbacks suppressed [ 246.219017][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 246.236214][T14722] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 246.243043][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.253185][T14743] netlink: 'syz.4.2717': attribute type 4 has an invalid length. [ 246.258323][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.261451][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.264530][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.264854][T14733] chnl_net:caif_netlink_parms(): no params data found [ 246.275606][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.278750][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.281693][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.284713][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.288396][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.291455][ T6005] hid-generic 8001:0006:0009.0040: unknown main item tag 0x0 [ 246.298906][ T6005] hid-generic 8001:0006:0009.0040: hidraw1: HID v8.00 Device [syz1] on syz1 [ 246.343867][ T7871] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.344115][T14744] fido_id[14744]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.347908][ T7871] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 246.431811][T14733] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.435092][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.438883][T14733] bridge_slave_0: entered allmulticast mode [ 246.442984][T14733] bridge_slave_0: entered promiscuous mode [ 246.454381][ T7871] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.460911][ T7871] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 246.467620][T14733] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.469909][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.472200][T14733] bridge_slave_1: entered allmulticast mode [ 246.474978][T14733] bridge_slave_1: entered promiscuous mode [ 246.509254][T14733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.514787][T14733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.556641][ T7871] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.559865][ T7871] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 246.596595][T14733] team0: Port device team_slave_0 added [ 246.601013][T14733] team0: Port device team_slave_1 added [ 246.642916][T14733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.645127][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.653859][T14733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.662390][T14733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.664562][T14733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.674349][T14733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.741376][T14733] hsr_slave_0: entered promiscuous mode [ 246.743658][T14733] hsr_slave_1: entered promiscuous mode [ 246.746096][T14733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.748535][T14733] Cannot create hsr debugfs directory [ 247.280608][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.285790][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.290086][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.293502][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.296934][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.300334][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.303606][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.307656][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.310887][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.313937][ T6005] hid-generic 8001:0006:0009.0041: unknown main item tag 0x0 [ 247.318291][ T6005] hid-generic 8001:0006:0009.0041: hidraw1: HID v8.00 Device [syz1] on syz1 [ 247.345943][T14778] fido_id[14778]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.466356][T14758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.469035][T14758] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 247.487423][ T7871] bond0 (unregistering): (slave lo): Releasing backup interface [ 247.491896][ T7871] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 247.503498][ T7871] bond0 (unregistering): Released all slaves [ 247.514386][ T7871] bond1 (unregistering): Released all slaves [ 247.525923][ T7871] bond2 (unregistering): Released all slaves [ 247.544030][T14784] rtc_cmos 00:05: Alarms can be up to one day in the future [ 247.650859][ T7871] tipc: Disabling bearer [ 247.653758][ T40] audit: type=1400 audit(1750426252.038:685): avc: denied { setopt } for pid=14791 comm="syz.4.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 247.657343][T14792] erofs (device loop4): cannot find valid erofs superblock [ 247.666674][T14793] erofs (device loop4): cannot find valid erofs superblock [ 247.673929][ T7871] tipc: Left network mode [ 247.852831][ T7871] mac80211_hwsim hwsim12 wlan0 (unregistering): left promiscuous mode [ 247.960365][ T7871] batadv_slave_1: left promiscuous mode [ 247.973691][ T7871] hsr_slave_0: left promiscuous mode [ 247.976695][ T7871] hsr_slave_1: left promiscuous mode [ 248.060078][ T5991] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 248.256752][ T5991] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.259680][ T5991] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.262939][ T5991] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.266182][ T5991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.269611][ T5991] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.274535][ T5991] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.277679][ T5991] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.280335][ T5991] usb 9-1: Product: syz [ 248.281739][ T5991] usb 9-1: Manufacturer: syz [ 248.289164][ T5991] cdc_wdm 9-1:1.0: skipping garbage [ 248.290860][ T5991] cdc_wdm 9-1:1.0: skipping garbage [ 248.295696][ T5991] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 248.297656][ T5991] cdc_wdm 9-1:1.0: Unknown control protocol [ 248.491548][T14803] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 248.501833][T14803] cdc_wdm 9-1:1.0: Error submitting int urb - -90 [ 248.507014][ T5991] usb 9-1: USB disconnect, device number 28 [ 249.335973][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2741'. [ 249.339910][T14831] openvswitch: netlink: Unknown nsh attribute 0 [ 249.341897][T14831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.882490][T14857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.962732][T14733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.968032][T14733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.972639][T14733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.977757][T14733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 250.024914][T14733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.044616][T14733] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.050866][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.053676][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.062541][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.065304][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.218944][T14733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.258736][T14895] kvm_pr_unimpl_wrmsr: 6 callbacks suppressed [ 250.258749][T14895] kvm: kvm [14894]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 250.263439][T14895] kvm: kvm [14894]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 250.326220][T14895] kvm: kvm [14894]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 250.329173][T14895] kvm: kvm [14894]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 250.380612][T14733] veth0_vlan: entered promiscuous mode [ 250.385877][ T60] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 250.387412][T14895] kvm: kvm [14894]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 250.390156][T14733] veth1_vlan: entered promiscuous mode [ 250.391476][T14895] kvm: kvm [14894]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 250.411151][T14733] veth0_macvtap: entered promiscuous mode [ 250.415636][T14733] veth1_macvtap: entered promiscuous mode [ 250.424540][T14733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.431306][T14733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.435804][T14733] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.439356][T14733] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.442026][T14733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.444964][T14733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.501440][ T7855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.504153][ T7855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.532977][ T7871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.535417][ T7871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.540479][ T60] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 250.543922][ T60] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 250.547360][ T60] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 250.550281][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.554497][T14897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.561098][ T60] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.764509][ T6005] usb 7-1: USB disconnect, device number 42 [ 250.845832][ T60] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 250.995699][ T60] usb 10-1: Using ep0 maxpacket: 8 [ 251.000709][ T60] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.004476][ T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.008649][ T60] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.012587][ T60] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.018386][ T60] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.022365][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.234672][ T60] usb 10-1: GET_CAPABILITIES returned 0 [ 251.246781][ T60] usbtmc 10-1:16.0: can't read capabilities [ 251.438395][T14916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.442920][T14916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.456541][ T24] usb 10-1: USB disconnect, device number 18 [ 251.474476][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.480691][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.483641][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.489205][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.491866][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.609731][T14944] chnl_net:caif_netlink_parms(): no params data found [ 251.683746][T14953] netlink: 'syz.5.2766': attribute type 30 has an invalid length. [ 251.686758][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2766'. [ 251.692396][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.767180][T14944] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.769897][T14944] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.772736][T14944] bridge_slave_0: entered allmulticast mode [ 251.776210][T14944] bridge_slave_0: entered promiscuous mode [ 251.786038][T14944] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.788585][T14944] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.791044][T14944] bridge_slave_1: entered allmulticast mode [ 251.793812][T14944] bridge_slave_1: entered promiscuous mode [ 251.843472][T14944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.848656][T14944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.890106][T14944] team0: Port device team_slave_0 added [ 251.894243][T14944] team0: Port device team_slave_1 added [ 251.988747][T14944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.991159][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.999945][T14944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.004178][T14944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.006621][T14944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.014706][T14944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.058052][T14944] hsr_slave_0: entered promiscuous mode [ 252.060463][T14944] hsr_slave_1: entered promiscuous mode [ 252.062670][T14944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.065070][T14944] Cannot create hsr debugfs directory [ 252.432246][T14988] Bluetooth: MGMT ver 1.23 [ 252.466370][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 252.466382][ T40] audit: type=1400 audit(1750426256.858:687): avc: denied { mounton } for pid=14991 comm="syz.4.2778" path="/525/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 252.545594][ T60] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 252.614143][T14944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.624271][T14944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.630951][T14944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.637918][T14944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.654467][T14944] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.657399][T14944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.660391][T14944] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.662633][T14944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.672733][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.677585][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.698879][ T60] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.702172][ T60] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.707618][ T60] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.711200][ T60] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 252.717638][ T60] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.720638][ T60] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.723155][ T60] usb 10-1: Product: syz [ 252.724496][ T60] usb 10-1: Manufacturer: syz [ 252.732404][ T60] cdc_wdm 10-1:1.0: skipping garbage [ 252.734090][ T60] cdc_wdm 10-1:1.0: skipping garbage [ 252.736897][T14944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.737168][ T60] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 252.752186][T14944] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.760990][T14388] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.763285][T14388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.770853][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.773106][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.943813][T14944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.944300][ T60] usb 10-1: USB disconnect, device number 19 [ 252.980336][T14944] veth0_vlan: entered promiscuous mode [ 252.987268][T14944] veth1_vlan: entered promiscuous mode [ 253.007283][T14944] veth0_macvtap: entered promiscuous mode [ 253.012624][T14944] veth1_macvtap: entered promiscuous mode [ 253.023742][T14944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.031979][T14944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.040958][T14944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.043804][T14944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.046974][T14944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.049828][T14944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.100160][ T7855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.103249][ T7855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.122604][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.126023][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.235105][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.238684][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.242199][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.249744][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.253892][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.257403][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.260007][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.262480][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.266913][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.269867][ T60] hid-generic 8001:0006:0009.0042: unknown main item tag 0x0 [ 253.274378][ T60] hid-generic 8001:0006:0009.0042: hidraw1: HID v8.00 Device [syz1] on syz1 [ 253.303888][T15021] fido_id[15021]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.362998][T15025] bridge_slave_0: left allmulticast mode [ 253.364944][T15025] bridge_slave_0: left promiscuous mode [ 253.369235][T15025] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.377671][T15025] bridge_slave_1: left allmulticast mode [ 253.379512][T15025] bridge_slave_1: left promiscuous mode [ 253.381388][T15025] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.391338][T15025] bond0: (slave bond_slave_0): Releasing backup interface [ 253.398826][T15025] bond0: (slave bond_slave_1): Releasing backup interface [ 253.421485][T15025] team0: Port device team_slave_0 removed [ 253.432205][T15025] team0: Port device team_slave_1 removed [ 253.434632][T15025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.438625][T15025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.442484][T15025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.445006][T15025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.546143][ T63] Bluetooth: hci1: command tx timeout [ 253.638559][T15030] kvm: kvm [15029]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2fe00000000 [ 253.641533][T15030] kvm: kvm [15029]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x2fe00000000 [ 253.657101][T15030] kvm: kvm [15029]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x30000000000 [ 253.661160][T15030] kvm: kvm [15029]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x30000000000 [ 253.793756][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2792'. [ 253.796806][T15050] bridge_slave_1: left allmulticast mode [ 253.798729][T15050] bridge_slave_1: left promiscuous mode [ 253.801271][T15050] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.804989][T15050] bridge_slave_0: left allmulticast mode [ 253.807951][T15050] bridge_slave_0: left promiscuous mode [ 253.809821][T15050] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.838831][T15052] qrtr: Invalid version 0 [ 253.840258][T15052] qrtr: Invalid version 0 [ 253.847368][ T40] audit: type=1400 audit(1750426258.238:688): avc: denied { write } for pid=15049 comm="syz.5.2792" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 253.914092][T15060] syzkaller0: entered promiscuous mode [ 253.916038][T15060] syzkaller0: entered allmulticast mode [ 253.941249][T15060] support for the xor transformation has been removed. [ 254.043061][T15061] /dev/nullb0: Can't open blockdev [ 254.864369][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.867509][ T1962] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 254.870647][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.872936][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.875285][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.878170][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.880608][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.882863][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.885202][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.888007][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.890361][ T5991] hid-generic 8001:0006:0009.0043: unknown main item tag 0x0 [ 254.896845][ T5991] hid-generic 8001:0006:0009.0043: hidraw1: HID v8.00 Device [syz1] on syz1 [ 254.945269][T15076] fido_id[15076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.027143][ T1962] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.030156][ T1962] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.033570][ T1962] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.037387][ T1962] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 255.043511][ T1962] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.047730][ T1962] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.050437][ T1962] usb 10-1: Product: syz [ 255.051828][ T1962] usb 10-1: Manufacturer: syz [ 255.056975][ T1962] cdc_wdm 10-1:1.0: skipping garbage [ 255.060984][ T1962] cdc_wdm 10-1:1.0: skipping garbage [ 255.062763][ T1962] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 255.262805][ T7941] usb 10-1: USB disconnect, device number 20 [ 255.458993][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.461829][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.025686][ T63] Bluetooth: hci1: command tx timeout [ 256.287723][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.290095][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.292449][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.295131][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.299975][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.302772][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.307283][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.309720][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.312132][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.314722][ T5991] hid-generic 8001:0006:0009.0044: unknown main item tag 0x0 [ 256.322659][ T5991] hid-generic 8001:0006:0009.0044: hidraw1: HID v8.00 Device [syz1] on syz1 [ 256.366105][T15123] fido_id[15123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.433571][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 256.545838][ T40] audit: type=1400 audit(1750426260.898:689): avc: denied { mount } for pid=15133 comm="syz.2.2821" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 256.555577][ T40] audit: type=1400 audit(1750426260.908:690): avc: denied { search } for pid=15133 comm="syz.2.2821" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 256.576041][ T40] audit: type=1400 audit(1750426260.908:691): avc: denied { search } for pid=15133 comm="syz.2.2821" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 257.306042][T15164] ntfs3(sr0): try to read out of volume at offset 0x0 [ 257.433535][ T40] audit: type=1400 audit(1750426261.818:692): avc: denied { bind } for pid=15174 comm="syz.2.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 257.508285][T15183] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2836'. [ 258.094737][T15200] cgroup: Invalid name [ 258.096689][ T63] Bluetooth: hci1: command tx timeout [ 258.355891][T15212] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 258.360375][ T40] audit: type=1400 audit(1750426262.748:693): avc: denied { relabelto } for pid=15211 comm="syz.5.2845" name="19" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 258.362518][T15212] netlink: 'syz.5.2845': attribute type 2 has an invalid length. [ 258.370740][ T40] audit: type=1400 audit(1750426262.748:694): avc: denied { associate } for pid=15211 comm="syz.5.2845" name="19" dev="tmpfs" ino=111 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 258.405868][ T40] audit: type=1400 audit(1750426262.788:695): avc: denied { remove_name } for pid=14733 comm="syz-executor" name="binderfs" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 258.414394][ T40] audit: type=1400 audit(1750426262.798:696): avc: denied { rmdir } for pid=14733 comm="syz-executor" name="19" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 258.590110][T15225] mac80211_hwsim hwsim19 wlan0: default FDB implementation only supports local addresses [ 258.597489][T15225] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 258.665613][ T1962] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 258.753473][T15234] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 258.795683][ T1962] usb 10-1: device descriptor read/64, error -71 [ 258.825628][T15242] input: syz1 as /devices/virtual/input/input17 [ 258.889228][T15247] geneve2: entered promiscuous mode [ 258.890197][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2859'. [ 258.891249][T15247] geneve2: entered allmulticast mode [ 258.984431][T15255] cgroup: Invalid name [ 259.045835][ T1962] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 259.160577][ T40] audit: type=1804 audit(1750426263.548:697): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2863" name="/newroot/26/file0" dev="tmpfs" ino=153 res=1 errno=0 [ 259.185648][ T1962] usb 10-1: device descriptor read/64, error -71 [ 259.299409][ T1962] usb usb10-port1: attempt power cycle [ 259.563120][ T40] audit: type=1326 audit(1750426263.948:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6518e929 code=0x7fc00000 [ 259.572656][ T40] audit: type=1326 audit(1750426263.948:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d6518e929 code=0x7fc00000 [ 259.572691][ T40] audit: type=1326 audit(1750426263.948:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6518e929 code=0x7fc00000 [ 259.572715][ T40] audit: type=1326 audit(1750426263.948:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6518e929 code=0x7fc00000 [ 259.572737][ T40] audit: type=1326 audit(1750426263.948:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15229 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6518e929 code=0x7fc00000 [ 259.635863][ T1962] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 259.649308][T15280] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2869'. [ 259.656112][ T1962] usb 10-1: device descriptor read/8, error -71 [ 259.669315][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.672759][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.675422][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.680908][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.684123][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.690341][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.693277][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.697565][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.700617][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.703608][ T7941] hid-generic 8001:0006:0009.0045: unknown main item tag 0x0 [ 259.709818][ T7941] hid-generic 8001:0006:0009.0045: hidraw1: HID v8.00 Device [syz1] on syz1 [ 259.742719][T15284] fido_id[15284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.770871][T15287] input: syz0 as /devices/virtual/input/input19 [ 259.776257][T15276] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed [ 259.776270][T15276] kvm: kvm [15275]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe000 [ 259.781277][T15276] kvm: kvm [15275]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe000 [ 259.803192][T15276] kvm: kvm [15275]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 259.807466][T15276] kvm: kvm [15275]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 259.831013][T15276] kvm: kvm [15275]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x2600 [ 259.846435][T15276] kvm: kvm [15275]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x2600 [ 259.896096][ T1962] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 259.916447][ T1962] usb 10-1: device descriptor read/8, error -71 [ 260.027388][ T1962] usb usb10-port1: unable to enumerate USB device [ 260.179935][T15304] kvm: kvm [15303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe000 [ 260.182850][T15304] kvm: kvm [15303]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe000 [ 260.201246][T15304] kvm: kvm [15303]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 260.204055][T15304] kvm: kvm [15303]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 260.364156][T15313] fuse: Bad value for 'rootmode' [ 260.375017][T15313] No control pipe specified [ 260.746377][ T1962] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 260.855635][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 260.898586][ T1962] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.902339][ T1962] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 260.907183][ T1962] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.911063][ T1962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 260.917547][ T1962] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 260.921452][ T1962] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 260.924807][ T1962] usb 6-1: Product: syz [ 260.927203][ T1962] usb 6-1: Manufacturer: syz [ 260.936349][ T1962] cdc_wdm 6-1:1.0: skipping garbage [ 260.938351][ T1962] cdc_wdm 6-1:1.0: skipping garbage [ 260.940112][ T1962] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 261.005837][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 261.008883][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.012131][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.015355][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.019305][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.024370][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.027532][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.136218][ T60] usb 6-1: USB disconnect, device number 20 [ 261.237344][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 261.239520][ T10] usbtmc 9-1:16.0: can't read capabilities [ 261.384486][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2889'. [ 261.388621][T15331] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2889'. [ 261.482983][ T5991] usb 9-1: USB disconnect, device number 29 [ 261.521829][T15335] netlink: 'syz.2.2891': attribute type 1 has an invalid length. [ 261.543353][T15335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.998793][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 262.016892][T15367] syz.2.2901: attempt to access beyond end of device [ 262.016892][T15367] sr0: rw=0, sector=0, nr_sectors = 4 limit=0 [ 262.022772][T15367] (syz.2.2901,15367,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 262.025232][T15367] (syz.2.2901,15367,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 262.028529][T15367] (syz.2.2901,15367,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 262.031991][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2900'. [ 262.035234][T15365] ip_vti0: Master is either lo or non-ether device [ 262.038172][T15367] (syz.2.2901,15367,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 262.150748][T15377] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.2903'. [ 262.171949][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.175308][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.182660][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.185056][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.189100][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.195665][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.198256][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.200341][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.203029][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.205110][ T24] hid-generic 8001:0006:0009.0046: unknown main item tag 0x0 [ 262.211675][ T24] hid-generic 8001:0006:0009.0046: hidraw1: HID v8.00 Device [syz1] on syz1 [ 262.245452][T15387] fido_id[15387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.315598][ T7941] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 262.357648][T15393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2910'. [ 262.466431][ T7941] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 262.470713][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.474659][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.479850][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.483289][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.486663][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.487297][T15404] afs: Unknown parameter 'appraise' [ 262.490383][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.495843][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.504683][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.511354][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 262.514509][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.519457][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.523227][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.528201][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.531825][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.534701][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.539555][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.539609][T15406] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 262.543522][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.548845][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.553267][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.557248][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.560298][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.564191][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.567279][ T7941] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 262.570069][ T7941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 262.573431][ T7941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 262.579183][ T7941] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 262.582981][ T7941] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 262.585917][ T7941] usb 6-1: Product: syz [ 262.587240][ T7941] usb 6-1: Manufacturer: syz [ 262.588678][ T7941] usb 6-1: SerialNumber: syz [ 262.591629][ T7941] usb 6-1: config 0 descriptor?? [ 262.601784][ T7941] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 262.624875][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.630230][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.633472][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.640075][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.643095][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.647120][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.650230][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.653095][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.656897][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.659686][ T5991] hid-generic 8001:0006:0009.0047: unknown main item tag 0x0 [ 262.664098][ T5991] hid-generic 8001:0006:0009.0047: hidraw1: HID v8.00 Device [syz1] on syz1 [ 262.669736][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.672575][ T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.684741][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.687780][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 262.693645][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.697828][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.701235][ T24] usb 10-1: Product: syz [ 262.703145][ T24] usb 10-1: Manufacturer: syz [ 262.712576][T15414] fido_id[15414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.718791][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 262.721029][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 262.730355][ T24] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 262.939503][ C2] usb 6-1: yurex_control_callback - control failed: -71 [ 262.940602][ T10] usb 6-1: USB disconnect, device number 21 [ 262.945130][T15417] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 262.952603][ T24] usb 10-1: USB disconnect, device number 25 [ 262.954308][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 263.092259][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 263.384825][T15442] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.2923'. [ 263.869142][T15449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 264.030818][T15460] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2930'. [ 264.364195][T15477] futex_wake_op: syz.1.2935 tries to shift op by 32; fix this program [ 264.366574][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 264.505609][ T24] usb 9-1: device descriptor read/64, error -71 [ 264.775621][ T24] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 264.915686][ T24] usb 9-1: device descriptor read/64, error -71 [ 265.035750][ T24] usb usb9-port1: attempt power cycle [ 265.185671][ T53] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 265.338110][ T53] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.341724][ T53] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.346726][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.350468][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.360264][ T53] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.364072][ T53] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.367889][ T53] usb 6-1: Product: syz [ 265.369772][ T53] usb 6-1: Manufacturer: syz [ 265.377747][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 265.379790][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 265.382156][ T53] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 265.395802][ T24] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 265.416467][ T24] usb 9-1: device descriptor read/8, error -71 [ 265.580928][ T53] usb 6-1: USB disconnect, device number 22 [ 265.655654][ T24] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 265.675964][ T24] usb 9-1: device descriptor read/8, error -71 [ 265.786390][ T24] usb usb9-port1: unable to enumerate USB device [ 266.080363][T15508] netlink: 'syz.5.2945': attribute type 2 has an invalid length. [ 266.083657][T15508] netlink: 784 bytes leftover after parsing attributes in process `syz.5.2945'. [ 266.122622][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 266.125408][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 266.130348][T15510] netlink: 'syz.2.2944': attribute type 13 has an invalid length. [ 266.215156][ T40] kauditd_printk_skb: 322 callbacks suppressed [ 266.215173][ T40] audit: type=1400 audit(1750426270.598:1025): avc: denied { write } for pid=15505 comm="syz.2.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.239526][T15521] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 266.446349][T15531] netlink: 'syz.5.2952': attribute type 2 has an invalid length. [ 266.511198][T15534] netlink: 'syz.5.2953': attribute type 8 has an invalid length. [ 266.513687][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 266.516833][T15534] bridge0: entered allmulticast mode [ 266.795557][ T5956] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 266.946930][ T5956] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 266.950034][ T5956] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.953262][ T5956] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 266.958270][ T5956] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.962575][ T5956] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 266.971816][ T5956] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 266.980081][ T5956] usb 10-1: Product: syz [ 266.981847][ T5956] usb 10-1: Manufacturer: syz [ 266.990546][ T5956] cdc_wdm 10-1:1.0: skipping garbage [ 266.995675][ T5956] cdc_wdm 10-1:1.0: skipping garbage [ 266.999096][ T5956] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 267.197307][ T6180] usb 10-1: USB disconnect, device number 26 [ 267.685813][ T53] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 267.835647][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 267.848567][ T53] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 267.851800][ T53] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 267.855254][ T53] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 267.865693][ T53] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 267.871122][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 267.953114][ T53] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 267.956854][ T53] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 267.965721][ T53] usb 7-1: Product: syz [ 267.967134][ T53] usb 7-1: Manufacturer: syz [ 267.968935][ T53] usb 7-1: SerialNumber: syz [ 267.978297][ T53] usb 7-1: config 0 descriptor?? [ 267.986702][ T53] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 267.996051][ T53] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 268.192037][ T40] audit: type=1400 audit(1750426272.578:1026): avc: denied { setattr } for pid=15569 comm="syz.2.2965" name="ldusb0" dev="devtmpfs" ino=3827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 268.218026][ T40] audit: type=1400 audit(1750426272.598:1027): avc: denied { execute } for pid=15584 comm="syz.4.2970" path="/dev/adsp1" dev="devtmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 268.350641][ T40] audit: type=1400 audit(1750426272.738:1028): avc: denied { setattr } for pid=15591 comm="syz.4.2972" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 268.740063][T15614] ata1.00: invalid multi_count 128 ignored [ 268.864686][ T40] audit: type=1400 audit(1750426273.248:1029): avc: denied { lock } for pid=15622 comm="syz.1.2982" path="/dev/video37" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 268.911976][T15627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2983'. [ 268.924927][T15629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2983'. [ 269.045089][T15634] xt_hashlimit: size too large, truncated to 1048576 [ 269.097570][T15637] FAULT_INJECTION: forcing a failure. [ 269.097570][T15637] name failslab, interval 1, probability 0, space 0, times 0 [ 269.101429][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.5.2986 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 269.101444][T15637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 269.101452][T15637] Call Trace: [ 269.101456][T15637] [ 269.101461][T15637] dump_stack_lvl+0x16c/0x1f0 [ 269.101498][T15637] should_fail_ex+0x512/0x640 [ 269.101520][T15637] should_failslab+0xc2/0x120 [ 269.101537][T15637] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 269.101553][T15637] ? skb_clone+0x190/0x3f0 [ 269.101572][T15637] skb_clone+0x190/0x3f0 [ 269.101588][T15637] netlink_deliver_tap+0xabd/0xd30 [ 269.101603][T15637] netlink_unicast+0x5df/0x7f0 [ 269.101616][T15637] ? __pfx_netlink_unicast+0x10/0x10 [ 269.101632][T15637] netlink_sendmsg+0x8d1/0xdd0 [ 269.101646][T15637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.101664][T15637] ____sys_sendmsg+0xa95/0xc70 [ 269.101677][T15637] ? copy_msghdr_from_user+0x10a/0x160 [ 269.101693][T15637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.101712][T15637] ___sys_sendmsg+0x134/0x1d0 [ 269.101729][T15637] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.101743][T15637] ? __lock_acquire+0x622/0x1c90 [ 269.101778][T15637] __sys_sendmsg+0x16d/0x220 [ 269.101794][T15637] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.101820][T15637] do_syscall_64+0xcd/0x4c0 [ 269.101837][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.101849][T15637] RIP: 0033:0x7ff99938e929 [ 269.101859][T15637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.101870][T15637] RSP: 002b:00007ff9971f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.101881][T15637] RAX: ffffffffffffffda RBX: 00007ff9995b5fa0 RCX: 00007ff99938e929 [ 269.101888][T15637] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 269.101894][T15637] RBP: 00007ff9971f6090 R08: 0000000000000000 R09: 0000000000000000 [ 269.101901][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.101926][T15637] R13: 0000000000000000 R14: 00007ff9995b5fa0 R15: 00007ffed5d623c8 [ 269.101944][T15637] [ 270.462882][ T53] usb 7-1: USB disconnect, device number 43 [ 270.466725][ T53] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 270.535022][T15672] /dev/nullb0: Can't open blockdev [ 270.877843][T15685] netlink: 'syz.4.3003': attribute type 1 has an invalid length. [ 270.925801][T15689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3005'. [ 270.945874][ T53] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 270.962356][T15691] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.965876][T15691] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.968761][T15691] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.971544][T15691] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.042634][ T40] audit: type=1400 audit(1750426275.428:1030): avc: denied { bind } for pid=15697 comm="syz.5.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.043128][T15698] /dev/nullb0: Can't open blockdev [ 271.059053][ T40] audit: type=1400 audit(1750426275.448:1031): avc: denied { accept } for pid=15697 comm="syz.5.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.095587][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 271.111826][T15700] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 271.127196][T15702] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 271.129972][T15702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.135800][T15702] vhci_hcd vhci_hcd.0: Device attached [ 271.140724][T15706] usbip_core: unknown command [ 271.142742][T15706] vhci_hcd: unknown pdu 795108726 [ 271.144974][T15706] usbip_core: unknown command [ 271.149381][ T1152] vhci_hcd: stop threads [ 271.151202][ T1152] vhci_hcd: release socket [ 271.153196][ T1152] vhci_hcd: disconnect device [ 271.250891][ T53] usb 7-1: unable to get BOS descriptor or descriptor too short [ 271.260687][ T53] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 271.264060][ T53] usb 7-1: can't read configurations, error -71 [ 271.338367][T15720] bpf: Bad value for 'uid' [ 271.395665][ T1333] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 271.441962][T15727] netlink: 'syz.5.3016': attribute type 10 has an invalid length. [ 271.444521][T15727] hsr_slave_0: entered allmulticast mode [ 271.446829][T15727] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 271.565787][ T1333] usb 9-1: Using ep0 maxpacket: 16 [ 271.570716][ T1333] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 271.573596][ T1333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.576420][ T1333] usb 9-1: Product: syz [ 271.578178][ T1333] usb 9-1: Manufacturer: syz [ 271.579827][ T1333] usb 9-1: SerialNumber: syz [ 271.584437][ T1333] usb 9-1: config 0 descriptor?? [ 271.591189][ T1333] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 271.596219][ T1333] usb 9-1: Detected FT232H [ 271.673610][T15742] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3019'. [ 271.775353][ T40] audit: type=1400 audit(1750426276.158:1032): avc: denied { create } for pid=15749 comm="syz.5.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 271.797290][ T1333] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 271.803990][ T1333] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 271.810309][ T1333] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 271.814549][ T1333] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 271.823522][ T1333] usb 9-1: USB disconnect, device number 34 [ 271.834032][ T1333] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 271.845239][ T1333] ftdi_sio 9-1:0.0: device disconnected [ 272.005084][T15757] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3022'. [ 272.015578][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3022'. [ 272.793943][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.802038][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.804405][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.808228][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.812189][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.814626][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.817058][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.819441][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.821746][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.824047][T14908] hid-generic 8001:0006:0009.0048: unknown main item tag 0x0 [ 272.830203][T15770] fuse: Bad value for 'fd' [ 272.833665][T14908] hid-generic 8001:0006:0009.0048: hidraw1: HID v8.00 Device [syz1] on syz1 [ 272.886865][T15771] fido_id[15771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 273.884730][ T40] audit: type=1400 audit(1750426278.268:1033): avc: denied { bind } for pid=15794 comm="syz.5.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 273.900180][ T40] audit: type=1400 audit(1750426278.288:1034): avc: denied { listen } for pid=15794 comm="syz.5.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.568191][ T40] audit: type=1400 audit(1750426278.958:1035): avc: denied { create } for pid=15810 comm="syz.4.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 274.591665][T15818] vlan2: entered allmulticast mode [ 274.593278][T15818] bond0: entered allmulticast mode [ 274.595374][T15818] bridge0: port 1(vlan2) entered blocking state [ 274.597650][T15818] bridge0: port 1(vlan2) entered disabled state [ 274.600607][T15818] vlan2: entered promiscuous mode [ 274.602163][T15818] bond0: entered promiscuous mode [ 274.605730][T15816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15816 comm=syz.2.3045 [ 275.488341][T15830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3050'. [ 275.495147][T15830] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 275.573487][T15839] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 275.606097][T15840] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3051'. [ 275.609868][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3051'. [ 275.620980][T15843] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 276.010141][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.017414][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.021771][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.025598][ T5945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.028972][ T5945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.152655][T15853] chnl_net:caif_netlink_parms(): no params data found [ 276.217232][T15853] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.219522][T15853] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.221774][T15853] bridge_slave_0: entered allmulticast mode [ 276.224402][T15853] bridge_slave_0: entered promiscuous mode [ 276.227461][T15853] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.229696][T15853] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.231910][T15853] bridge_slave_1: entered allmulticast mode [ 276.234522][T15853] bridge_slave_1: entered promiscuous mode [ 276.253639][ T7850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.257797][ T7850] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.308633][T15853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.315886][T15853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.375432][ T7850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.380373][ T7850] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.396582][T15853] team0: Port device team_slave_0 added [ 276.400646][T15853] team0: Port device team_slave_1 added [ 276.438890][T15853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.441950][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.458473][T15853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.486353][ T7850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.489932][ T7850] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.502536][T15853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.505416][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.520018][T15853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.601270][ T7850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.605082][ T7850] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.641580][T15853] hsr_slave_0: entered promiscuous mode [ 276.644692][T15853] hsr_slave_1: entered promiscuous mode [ 276.651797][T15853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.654581][T15853] Cannot create hsr debugfs directory [ 277.251186][ T40] audit: type=1401 audit(1750426281.638:1036): op=fscreate invalid_context=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 277.399051][ T7850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.434512][ T7850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.443664][ T7850] bond0 (unregistering): Released all slaves [ 277.537423][ T5945] Bluetooth: hci0: command tx timeout [ 277.551070][ T7850] bond1 (unregistering): Released all slaves [ 277.652850][ T40] audit: type=1400 audit(1750426282.038:1037): avc: denied { listen } for pid=15876 comm="syz.2.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 277.713928][ T7850] IPVS: stopping backup sync thread 15234 ... [ 277.921587][T15853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.939580][ T7850] hsr_slave_0: left promiscuous mode [ 277.942190][ T7850] hsr_slave_1: left promiscuous mode [ 277.945052][ T7850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.948883][ T7850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.097921][ T5945] Bluetooth: hci3: command tx timeout [ 278.554976][ T7850] team0 (unregistering): Port device team_slave_1 removed [ 278.628948][ T7850] team0 (unregistering): Port device team_slave_0 removed [ 279.139730][T15853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.146164][T15853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.156440][T15853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.164758][T15902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3067'. [ 279.234378][T15902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15902 comm=syz.2.3067 [ 279.320984][T15853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.337711][T15853] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.343379][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.345762][T14390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.376008][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.378984][ T7855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.421839][T15853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.425039][T15853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.549548][T15923] block nbd5: shutting down sockets [ 279.564253][T15853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.759561][T15853] veth0_vlan: entered promiscuous mode [ 279.764722][T15853] veth1_vlan: entered promiscuous mode [ 279.778508][T15853] veth0_macvtap: entered promiscuous mode [ 279.790670][T15853] veth1_macvtap: entered promiscuous mode [ 279.804566][T15853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.812162][T15853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.820552][T15853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.824151][T15853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.829236][T15853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.832869][T15853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.909694][ T7850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.912911][ T7850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.944437][T14388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.955669][T14388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.094425][T15941] Bluetooth: MGMT ver 1.23 [ 280.182098][ T40] audit: type=1400 audit(1750426284.568:1038): avc: denied { unmount } for pid=15944 comm="syz.4.3075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 280.188366][ T63] Bluetooth: hci3: command tx timeout [ 280.315146][ T40] audit: type=1400 audit(1750426284.698:1039): avc: denied { accept } for pid=15948 comm="syz.2.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 280.499084][T15961] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3080'. [ 280.509351][T15961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3080'. [ 280.646723][ T40] audit: type=1400 audit(1750426285.038:1040): avc: denied { setopt } for pid=15968 comm="syz.5.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 280.711653][T15971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3085'. [ 280.899893][ T40] audit: type=1400 audit(1750426285.288:1041): avc: denied { unmount } for pid=15991 comm="syz.5.3092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 280.913604][T15992] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3092'. [ 280.958429][T15995] sp0: Synchronizing with TNC [ 281.009126][T16001] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3095'. [ 281.047199][T16003] tmpfs: Bad value for 'mpol' [ 281.344134][ T40] audit: type=1400 audit(1750426285.728:1042): avc: denied { setattr } for pid=16021 comm="syz.5.3102" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 281.477867][T16032] vlan3: entered promiscuous mode [ 281.480072][T16032] vlan3: entered allmulticast mode [ 281.485952][T16032] hsr_slave_1: entered allmulticast mode [ 281.524448][ T5991] hid (null): unknown global tag 0xd [ 281.527801][T16034] netlink: 344 bytes leftover after parsing attributes in process `syz.5.3107'. [ 281.528316][ T5991] hid (null): unknown global tag 0xc [ 281.532641][ T5991] hid (null): global environment stack underflow [ 281.534699][ T5991] hid (null): invalid report_size 39736 [ 281.536689][ T5991] hid (null): global environment stack underflow [ 281.538615][ T5991] hid (null): report_id 0 is invalid [ 281.543339][ T5991] hid-generic 0005:0005:0040.0049: reserved main item tag 0xd [ 281.547909][ T5991] hid-generic 0005:0005:0040.0049: unknown global tag 0xd [ 281.550204][ T5991] hid-generic 0005:0005:0040.0049: item 0 1 1 13 parsing failed [ 281.552904][ T5991] hid-generic 0005:0005:0040.0049: probe with driver hid-generic failed with error -22 [ 281.609905][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.616805][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.620068][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.623176][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.629983][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.633116][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.637121][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.640716][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.644186][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.646676][ T40] audit: type=1400 audit(1750426286.028:1043): avc: denied { node_bind } for pid=16047 comm="syz.5.3111" saddr=2001:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 281.648211][ T9] hid-generic 8001:0006:0009.004A: unknown main item tag 0x0 [ 281.661465][T16048] netlink: 'syz.5.3111': attribute type 6 has an invalid length. [ 281.667917][ T9] hid-generic 8001:0006:0009.004A: hidraw1: HID v8.00 Device [syz1] on syz1 [ 281.712588][T16049] fido_id[16049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 281.764929][ T40] audit: type=1400 audit(1750426286.148:1044): avc: denied { read } for pid=16050 comm="syz.2.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 281.961962][T16051] batadv_slave_0: entered promiscuous mode [ 281.971425][T16058] netlink: 'syz.4.3114': attribute type 9 has an invalid length. [ 281.974862][T16058] netlink: 212012 bytes leftover after parsing attributes in process `syz.4.3114'. [ 282.156783][T16064] binder: BINDER_SET_CONTEXT_MGR already set [ 282.159257][T16064] binder: 16062:16064 ioctl 4018620d 200000000040 returned -16 [ 282.239750][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3120'. [ 282.265802][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 282.656922][T16095] usb usb2: usbfs: process 16095 (syz.4.3126) did not claim interface 0 before use [ 282.662271][T16096] usb usb2: usbfs: process 16096 (syz.4.3126) did not claim interface 0 before use [ 282.701096][T16099] FAULT_INJECTION: forcing a failure. [ 282.701096][T16099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.705195][T16099] CPU: 3 UID: 0 PID: 16099 Comm: syz.2.3128 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 282.705212][T16099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.705219][T16099] Call Trace: [ 282.705223][T16099] [ 282.705228][T16099] dump_stack_lvl+0x16c/0x1f0 [ 282.705264][T16099] should_fail_ex+0x512/0x640 [ 282.705285][T16099] _copy_from_user+0x2e/0xd0 [ 282.705302][T16099] move_addr_to_kernel+0x65/0x170 [ 282.705316][T16099] __copy_msghdr+0x386/0x470 [ 282.705333][T16099] copy_msghdr_from_user+0xc1/0x160 [ 282.705348][T16099] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 282.705371][T16099] ___sys_sendmsg+0xfe/0x1d0 [ 282.705388][T16099] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.705402][T16099] ? __lock_acquire+0x622/0x1c90 [ 282.705436][T16099] __sys_sendmsg+0x16d/0x220 [ 282.705452][T16099] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.705489][T16099] do_syscall_64+0xcd/0x4c0 [ 282.705508][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.705520][T16099] RIP: 0033:0x7fc8aaf8e929 [ 282.705530][T16099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.705541][T16099] RSP: 002b:00007fc8abe45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.705552][T16099] RAX: ffffffffffffffda RBX: 00007fc8ab1b5fa0 RCX: 00007fc8aaf8e929 [ 282.705559][T16099] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 282.705565][T16099] RBP: 00007fc8abe45090 R08: 0000000000000000 R09: 0000000000000000 [ 282.705572][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.705578][T16099] R13: 0000000000000000 R14: 00007fc8ab1b5fa0 R15: 00007ffdd98a6558 [ 282.705592][T16099] [ 282.705867][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3127'. [ 282.783774][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3127'. [ 282.823758][T16107] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.935400][T16107] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.048977][T16107] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.153739][T16107] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.196921][T16121] netlink: 'syz.4.3134': attribute type 12 has an invalid length. [ 283.258728][T16107] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.266440][T16107] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.274548][T16107] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.281816][T16107] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.345857][ T5945] Bluetooth: hci3: command 0x040f tx timeout [ 285.456050][T16127] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 285.466841][ T5945] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.471356][T16127] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 286.363704][T16127] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 286.368673][T16127] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.370944][T16127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 286.373310][T16127] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 286.403813][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.409981][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3142'. [ 286.412045][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.419979][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.428727][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.432238][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.468950][ T7871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.471130][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3145'. [ 286.523815][T16155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16155 comm=syz.2.3145 [ 286.569178][ T7871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.666698][ T7871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.713810][T16143] chnl_net:caif_netlink_parms(): no params data found [ 286.827506][ T7871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.876160][T16143] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.879099][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.882245][T16143] bridge_slave_0: entered allmulticast mode [ 286.889700][T16143] bridge_slave_0: entered promiscuous mode [ 286.894798][T16143] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.897492][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.900364][T16143] bridge_slave_1: entered allmulticast mode [ 286.903205][T16143] bridge_slave_1: entered promiscuous mode [ 286.943161][T16143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.950661][T16143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.037229][T16143] team0: Port device team_slave_0 added [ 287.056154][T16143] team0: Port device team_slave_1 added [ 287.101826][T16143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.103771][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.111474][T16143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.115793][ T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 287.206266][ T53] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 287.275655][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 287.279448][ T9] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 287.284446][ T9] usb 9-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.289538][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 287.294491][ T9] usb 9-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 287.298464][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.301584][ T9] usb 9-1: Product: エಇ程閳实ᶻ짝큂鯍嚘ၟ셩掔㌏ږ솨흠䀚跏㧞ꥹ꼝㮘娰Ƥꨖɗ孰ꧏ蒾㗴簶男핷㠴⿝䶖ểᚓ絝ꇻ큉ܛ퍺㡯᫋㼡Ⲓ唪䧨ఒ팙໼璡甮씫瑆䏅⤭അ㳹げዱ팯汀瓱鐖옝ᚠ塹짃ḉ [ 287.311023][ T9] usb 9-1: Manufacturer: ⒴᠌涀Ⴝ쐢匏謼啡糳溛쏠靴倰긏㡄╓믿ᶿ曾㤗䤡޴倓⓱㗠担棊էꈢ饭砉⪃쥬쵺欯谿❤碜뎗쉑蔅荦턐廘䨙憨▒봼⎼ᓻ㪅薳榚०፷ꄟཱྀ禝ᷳꪖ涥⤕잗礖防ᮡ햄끪‰╧췾綄⵩䝋殁妝ଝ劅ፕ谞ꄸ퓨쒷噗늽섣ᢔ挜ꀯ罏ᯨ≧ [ 287.322375][ T9] usb 9-1: SerialNumber: 쒯ꂀ蕀﬜蘃䃁遃ⷫ鶅꧿㡆題ⷁ鐨ꈜ쪜ꊲ䉩⇚Ꮺꍺ鞏쁲䢬浮픲뻐Ꜻ醨橏ﹳ㊅儅௣㇘壹꥗㼍᡽૴쒅蜒鉗슩᮴ꯘ鈲濪 [ 287.375713][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 287.387049][ T53] usb 10-1: config 0 has an invalid interface number: 145 but max is 0 [ 287.390538][ T53] usb 10-1: config 0 has no interface number 0 [ 287.397290][ T53] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 287.401100][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.404342][ T53] usb 10-1: Product: syz [ 287.406279][ T53] usb 10-1: Manufacturer: syz [ 287.408262][ T53] usb 10-1: SerialNumber: syz [ 287.412748][ T53] usb 10-1: config 0 descriptor?? [ 287.417905][ T53] hub 10-1:0.145: bad descriptor, ignoring hub [ 287.420384][ T53] hub 10-1:0.145: probe with driver hub failed with error -5 [ 287.426377][ T53] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.145/input/input21 [ 287.538394][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.568749][ T7871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.577351][ T7871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.582398][ T7871] bond0 (unregistering): Released all slaves [ 287.593497][T16143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.596556][T16143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.607377][T16143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.651169][ T40] audit: type=1400 audit(1750426292.038:1045): avc: denied { listen } for pid=16201 comm="syz.2.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.660374][ T9] usbhid 9-1:1.0: can't add hid device: -71 [ 287.662086][ T9] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 287.664301][ T40] audit: type=1400 audit(1750426292.038:1046): avc: denied { allowed } for pid=16201 comm="syz.2.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 287.672778][ T9] usb 9-1: USB disconnect, device number 35 [ 287.676819][ T40] audit: type=1400 audit(1750426292.058:1047): avc: denied { read } for pid=16201 comm="syz.2.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 287.696767][ T40] audit: type=1400 audit(1750426292.088:1048): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.705798][ T40] audit: type=1400 audit(1750426292.088:1049): avc: denied { open } for pid=14944 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.714242][ T40] audit: type=1400 audit(1750426292.088:1050): avc: denied { ioctl } for pid=14944 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.795445][T16143] hsr_slave_0: entered promiscuous mode [ 287.798954][T16143] hsr_slave_1: entered promiscuous mode [ 287.801513][T16143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.804211][T16143] Cannot create hsr debugfs directory [ 287.984598][ T7871] hsr_slave_1: left promiscuous mode [ 287.985833][ T6180] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 287.989491][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.992111][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.994915][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.997540][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.039264][ T7871] veth1_macvtap: left promiscuous mode [ 288.042540][ T7871] veth0_macvtap: left promiscuous mode [ 288.045049][ T7871] veth1_vlan: left promiscuous mode [ 288.047803][ T7871] veth0_vlan: left promiscuous mode [ 288.167101][ T6180] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.169887][ T6180] usb 7-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 288.173028][ T6180] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.176907][ T6180] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.181905][ T6180] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.184736][ T6180] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.187597][ T6180] usb 7-1: Product: syz [ 288.188962][ T6180] usb 7-1: Manufacturer: syz [ 288.193255][ T6180] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 288.285872][T16216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=16216 comm=syz.4.3160 [ 288.379386][T16222] netlink: 1968 bytes leftover after parsing attributes in process `syz.4.3161'. [ 288.399605][ T9] usb 7-1: USB disconnect, device number 46 [ 288.415683][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 288.448270][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3162'. [ 288.495672][ T63] Bluetooth: hci2: command tx timeout [ 288.791468][ T7871] team0 (unregistering): Port device team_slave_1 removed [ 288.894436][ T7871] team0 (unregistering): Port device team_slave_0 removed [ 289.510696][ T5991] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 289.615661][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.663428][T16143] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.670780][T16143] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.677808][ T5991] usb 7-1: config 0 has an invalid interface number: 248 but max is 0 [ 289.681085][T16143] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.681192][ T5991] usb 7-1: config 0 has no interface number 0 [ 289.686238][ T5991] usb 7-1: too many endpoints for config 0 interface 248 altsetting 128: 89, using maximum allowed: 30 [ 289.694981][ T5991] usb 7-1: config 0 interface 248 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 289.702895][T16143] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.721511][ T5991] usb 7-1: config 0 interface 248 has no altsetting 0 [ 289.754581][ T5991] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 289.774731][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.787043][ T5991] usb 7-1: Product: syz [ 289.790730][ T5991] usb 7-1: Manufacturer: syz [ 289.794558][ T5991] usb 7-1: SerialNumber: syz [ 289.871624][ T5991] usb 7-1: config 0 descriptor?? [ 289.940462][T16143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.952350][T16143] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.958507][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.960789][T14390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.975076][T14390] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.977863][T14390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.163705][T16143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.386450][ T5991] usb 7-1: USB disconnect, device number 47 [ 290.389299][T16143] veth0_vlan: entered promiscuous mode [ 290.408055][T16143] veth1_vlan: entered promiscuous mode [ 290.505636][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 290.562828][T16143] veth0_macvtap: entered promiscuous mode [ 290.567620][T16143] veth1_macvtap: entered promiscuous mode [ 290.575721][ T63] Bluetooth: hci2: command tx timeout [ 290.580530][T16143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.593996][T16143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.600229][T16143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.603352][T16143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.607270][T16143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.611077][T16143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.686112][ T7855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.689298][ T7855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.726876][T14390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.729974][T14390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.850230][T16294] netlink: 'syz.2.3172': attribute type 1 has an invalid length. [ 290.853136][T16294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3172'. [ 290.948532][ T7941] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 290.963704][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3175'. [ 291.029335][T16310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16310 comm=syz.6.3176 [ 291.108389][ T7941] usb 9-1: Using ep0 maxpacket: 32 [ 291.112083][ T7941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.116632][ T7941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.120648][ T7941] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 291.125628][ T7941] usb 9-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 291.129452][ T7941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.135082][ T7941] usb 9-1: config 0 descriptor?? [ 291.141633][ T53] usb 10-1: USB disconnect, device number 27 [ 291.341503][ T7941] usb 9-1: string descriptor 0 read error: -71 [ 291.346876][ T7941] usbhid 9-1:0.0: can't add hid device: -71 [ 291.348862][ T7941] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 291.352588][ T7941] usb 9-1: USB disconnect, device number 36 [ 291.640287][T16349] uprobe: syz.2.3184:16349 failed to unregister, leaking uprobe [ 292.163115][ T40] audit: type=1400 audit(1750426296.548:1051): avc: denied { create } for pid=16375 comm="syz.4.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.169593][ T40] audit: type=1400 audit(1750426296.548:1052): avc: denied { connect } for pid=16375 comm="syz.4.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.216948][ T40] audit: type=1400 audit(1750426296.608:1053): avc: denied { bind } for pid=16375 comm="syz.4.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.223071][ T40] audit: type=1400 audit(1750426296.608:1054): avc: denied { listen } for pid=16375 comm="syz.4.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 292.576290][ T63] Bluetooth: hci3: command 0x040f tx timeout [ 292.655846][ T63] Bluetooth: hci2: command tx timeout [ 292.821559][T16418] random: crng reseeded on system resumption [ 292.928600][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 293.298383][T16452] netlink: 'syz.2.3216': attribute type 2 has an invalid length. [ 293.302681][T16452] netlink: 'syz.2.3216': attribute type 1 has an invalid length. [ 293.395882][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 293.395900][ T40] audit: type=1400 audit(1750426297.778:1059): avc: denied { execute } for pid=16458 comm="syz.2.3219" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=91756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 293.416313][T16464] usb 2-1: USB disconnect, device number 2 [ 293.504497][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 293.581551][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 293.585193][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 293.638253][T16487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3229'. [ 293.675595][ C0] ------------[ cut here ]------------ [ 293.678873][ C0] ODEBUG: activate active (active state 0) object: ffff888037c51e58 object type: rcu_head hint: 0x0 [ 293.683688][ C0] WARNING: CPU: 0 PID: 16143 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 293.687678][ C0] Modules linked in: [ 293.690169][ C0] CPU: 0 UID: 0 PID: 16143 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 293.697611][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.702022][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 293.704500][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 40 8a 15 8c 4c 89 e6 48 c7 c7 c0 7e 15 8c e8 8f 4a 99 fc 90 <0f> 0b 90 90 58 83 05 26 b4 c6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 293.712416][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00010286 [ 293.714922][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ae248 [ 293.718309][ C0] RDX: ffff88802d2f2440 RSI: ffffffff817ae255 RDI: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 293.720746][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 293.723429][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8c1584e0 [ 293.726167][ C0] R13: ffffffff8baeb4a0 R14: 0000000000000000 R15: ffffc90000007b98 [ 293.728729][ C0] FS: 000055555e7ac500(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 293.731510][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.733526][ C0] CR2: 00007fee008e56c0 CR3: 0000000048bb4000 CR4: 0000000000352ef0 [ 293.736035][ C0] DR0: 0000000000000002 DR1: 000000000000004a DR2: 0000000000000000 [ 293.738518][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 293.740970][ C0] Call Trace: [ 293.742043][ C0] [ 293.742962][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 293.744785][ C0] debug_object_activate+0x2bc/0x4c0 [ 293.746506][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 293.748387][ C0] ? try_to_wake_up+0xa25/0x1680 [ 293.749955][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 293.751576][ C0] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 293.753481][ C0] __call_rcu_common.constprop.0+0x2c/0x9f0 [ 293.755727][ C0] delete_node+0x1fc/0x8d0 [ 293.757723][ C0] ? find_held_lock+0x2b/0x80 [ 293.759741][ C0] __radix_tree_delete+0x193/0x3d0 [ 293.761972][ C0] radix_tree_delete_item+0xea/0x230 [ 293.764256][ C0] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 293.766975][ C0] ? queue_work_on+0x12a/0x1f0 [ 293.769096][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 293.771402][ C0] ? queue_work_on+0x8b/0x1f0 [ 293.773487][ C0] ? rcu_core+0x797/0x14e0 [ 293.775455][ C0] ? rcu_core+0x797/0x14e0 [ 293.777524][ C0] afs_cell_destroy+0x1db/0x310 [ 293.779651][ C0] rcu_core+0x799/0x14e0 [ 293.781514][ C0] ? __pfx_rcu_core+0x10/0x10 [ 293.783606][ C0] ? run_timer_base+0x121/0x190 [ 293.785791][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 293.788087][ C0] handle_softirqs+0x216/0x8e0 [ 293.790177][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 293.792446][ C0] __irq_exit_rcu+0x109/0x170 [ 293.794508][ C0] irq_exit_rcu+0x9/0x30 [ 293.796470][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 293.798928][ C0] [ 293.800227][ C0] [ 293.801539][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.804103][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 293.806461][ C0] Code: 53 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 9b 0f 0f 0f 82 74 02 00 00 8b 35 4a cd 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 52 34 12 0f 85 c7 02 00 00 48 83 c4 [ 293.814427][ C0] RSP: 0018:ffffc9000d4b71c8 EFLAGS: 00000206 [ 293.817042][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4880 RCX: 000000007f0e5375 [ 293.820426][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf4df3 RDI: ffffffff8c157960 [ 293.823749][ C0] RBP: 0000000000000002 R08: 65b552a6fd109480 R09: 0000000000000000 [ 293.827159][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 293.830503][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.833893][ C0] get_mem_cgroup_from_objcg+0x197/0x330 [ 293.836395][ C0] ? get_mem_cgroup_from_objcg+0x183/0x330 [ 293.838931][ C0] obj_cgroup_charge_pages+0x12/0x1f0 [ 293.841250][ C0] __memcg_kmem_charge_page+0xc6/0x200 [ 293.843600][ C0] __alloc_frozen_pages_noprof+0x325/0x23f0 [ 293.846218][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 293.848423][ C0] ? lock_acquire+0x179/0x350 [ 293.850480][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 293.853160][ C0] ? find_held_lock+0x2b/0x80 [ 293.855217][ C0] ? page_table_check_set+0x627/0x750 [ 293.857615][ C0] ? __page_table_check_ptes_set+0x1ae/0x420 [ 293.860529][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.863088][ C0] ? policy_nodemask+0xea/0x4e0 [ 293.865164][ C0] alloc_pages_mpol+0x1fb/0x550 [ 293.867383][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 293.869708][ C0] alloc_pages_noprof+0x131/0x390 [ 293.871874][ C0] pte_alloc_one+0x1c/0x3a0 [ 293.873861][ C0] __pte_alloc+0x6d/0x3c0 [ 293.875844][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 293.877999][ C0] ? __pfx___might_resched+0x10/0x10 [ 293.880287][ C0] ? copy_page_range+0x13f0/0x5740 [ 293.882534][ C0] copy_page_range+0x1aed/0x5740 [ 293.884686][ C0] ? __lock_acquire+0x622/0x1c90 [ 293.886956][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 293.889205][ C0] ? __pfx___might_resched+0x10/0x10 [ 293.891453][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 293.893663][ C0] ? dup_mmap+0xe38/0x21d0 [ 293.895665][ C0] ? down_write+0x14d/0x200 [ 293.897603][ C0] ? up_write+0x1b2/0x520 [ 293.899451][ C0] dup_mmap+0xe88/0x21d0 [ 293.901245][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 293.903262][ C0] copy_process+0x4081/0x76a0 [ 293.905331][ C0] ? do_wp_page+0x1aa7/0x4f20 [ 293.907174][ C0] ? __pfx_copy_process+0x10/0x10 [ 293.909353][ C0] kernel_clone+0xfc/0x960 [ 293.911289][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 293.913469][ C0] ? css_rstat_updated+0x9d/0xd30 [ 293.915607][ C0] __do_sys_clone+0xce/0x120 [ 293.917342][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 293.919645][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 293.921549][ C0] ? do_user_addr_fault+0x843/0x1370 [ 293.923841][ C0] do_syscall_64+0xcd/0x4c0 [ 293.925853][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.928165][ C0] RIP: 0033:0x7fedffb85193 [ 293.930091][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 293.937643][ C0] RSP: 002b:00007ffdd517b258 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 293.940978][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedffb85193 [ 293.944161][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 293.947525][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 293.950730][ C0] R10: 000055555e7ac7d0 R11: 0000000000000246 R12: 0000000000000000 [ 293.953956][ C0] R13: 00000000000927c0 R14: 00000000000479dd R15: 00007ffdd517b3f0 [ 293.957431][ C0] [ 293.958806][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 293.961873][ C0] CPU: 0 UID: 0 PID: 16143 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(full) [ 293.966704][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.971218][ C0] Call Trace: [ 293.972676][ C0] [ 293.973941][ C0] dump_stack_lvl+0x3d/0x1f0 [ 293.975962][ C0] panic+0x71c/0x800 [ 293.977658][ C0] ? __pfx_panic+0x10/0x10 [ 293.979580][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 293.981805][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 293.983969][ C0] ? debug_print_object+0x1a2/0x2b0 [ 293.986178][ C0] check_panic_on_warn+0xab/0xb0 [ 293.988321][ C0] __warn+0xf6/0x3c0 [ 293.989878][ C0] ? debug_print_object+0x1a2/0x2b0 [ 293.991952][ C0] report_bug+0x3c3/0x580 [ 293.993832][ C0] ? debug_print_object+0x1a2/0x2b0 [ 293.995767][ C0] handle_bug+0x184/0x210 [ 293.997633][ C0] exc_invalid_op+0x17/0x50 [ 293.999616][ C0] asm_exc_invalid_op+0x1a/0x20 [ 294.001714][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 294.003809][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 40 8a 15 8c 4c 89 e6 48 c7 c7 c0 7e 15 8c e8 8f 4a 99 fc 90 <0f> 0b 90 90 58 83 05 26 b4 c6 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 294.010787][ C0] RSP: 0018:ffffc90000007ad8 EFLAGS: 00010286 [ 294.012724][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ae248 [ 294.015188][ C0] RDX: ffff88802d2f2440 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 294.017663][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 294.020130][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8c1584e0 [ 294.022592][ C0] R13: ffffffff8baeb4a0 R14: 0000000000000000 R15: ffffc90000007b98 [ 294.025034][ C0] ? __warn_printk+0x198/0x350 [ 294.026556][ C0] ? __warn_printk+0x1a5/0x350 [ 294.028079][ C0] ? debug_print_object+0x1a1/0x2b0 [ 294.029722][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 294.031565][ C0] debug_object_activate+0x2bc/0x4c0 [ 294.033213][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 294.035037][ C0] ? try_to_wake_up+0xa25/0x1680 [ 294.036588][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 294.038223][ C0] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 294.040108][ C0] __call_rcu_common.constprop.0+0x2c/0x9f0 [ 294.041973][ C0] delete_node+0x1fc/0x8d0 [ 294.043378][ C0] ? find_held_lock+0x2b/0x80 [ 294.044857][ C0] __radix_tree_delete+0x193/0x3d0 [ 294.046480][ C0] radix_tree_delete_item+0xea/0x230 [ 294.048147][ C0] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 294.050000][ C0] ? queue_work_on+0x12a/0x1f0 [ 294.051504][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 294.053127][ C0] ? queue_work_on+0x8b/0x1f0 [ 294.054610][ C0] ? rcu_core+0x797/0x14e0 [ 294.056009][ C0] ? rcu_core+0x797/0x14e0 [ 294.057416][ C0] afs_cell_destroy+0x1db/0x310 [ 294.058945][ C0] rcu_core+0x799/0x14e0 [ 294.060283][ C0] ? __pfx_rcu_core+0x10/0x10 [ 294.061766][ C0] ? run_timer_base+0x121/0x190 [ 294.063292][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 294.064920][ C0] handle_softirqs+0x216/0x8e0 [ 294.066429][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 294.068081][ C0] __irq_exit_rcu+0x109/0x170 [ 294.069563][ C0] irq_exit_rcu+0x9/0x30 [ 294.070850][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.072552][ C0] [ 294.073466][ C0] [ 294.074414][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.076288][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 294.077956][ C0] Code: 53 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 9b 0f 0f 0f 82 74 02 00 00 8b 35 4a cd 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 52 34 12 0f 85 c7 02 00 00 48 83 c4 [ 294.083950][ C0] RSP: 0018:ffffc9000d4b71c8 EFLAGS: 00000206 [ 294.085858][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4880 RCX: 000000007f0e5375 [ 294.088298][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf4df3 RDI: ffffffff8c157960 [ 294.090712][ C0] RBP: 0000000000000002 R08: 65b552a6fd109480 R09: 0000000000000000 [ 294.093099][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 294.095507][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.097998][ C0] get_mem_cgroup_from_objcg+0x197/0x330 [ 294.099752][ C0] ? get_mem_cgroup_from_objcg+0x183/0x330 [ 294.101577][ C0] obj_cgroup_charge_pages+0x12/0x1f0 [ 294.103274][ C0] __memcg_kmem_charge_page+0xc6/0x200 [ 294.104982][ C0] __alloc_frozen_pages_noprof+0x325/0x23f0 [ 294.106852][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 294.108465][ C0] ? lock_acquire+0x179/0x350 [ 294.109959][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.111932][ C0] ? find_held_lock+0x2b/0x80 [ 294.113416][ C0] ? page_table_check_set+0x627/0x750 [ 294.115111][ C0] ? __page_table_check_ptes_set+0x1ae/0x420 [ 294.116984][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.118843][ C0] ? policy_nodemask+0xea/0x4e0 [ 294.120382][ C0] alloc_pages_mpol+0x1fb/0x550 [ 294.121930][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 294.123622][ C0] alloc_pages_noprof+0x131/0x390 [ 294.125233][ C0] pte_alloc_one+0x1c/0x3a0 [ 294.126672][ C0] __pte_alloc+0x6d/0x3c0 [ 294.128047][ C0] ? __pfx___pte_alloc+0x10/0x10 [ 294.129603][ C0] ? __pfx___might_resched+0x10/0x10 [ 294.131274][ C0] ? copy_page_range+0x13f0/0x5740 [ 294.132873][ C0] copy_page_range+0x1aed/0x5740 [ 294.134436][ C0] ? __lock_acquire+0x622/0x1c90 [ 294.135996][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 294.137668][ C0] ? __pfx___might_resched+0x10/0x10 [ 294.139345][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 294.140972][ C0] ? dup_mmap+0xe38/0x21d0 [ 294.142393][ C0] ? down_write+0x14d/0x200 [ 294.143803][ C0] ? up_write+0x1b2/0x520 [ 294.145156][ C0] dup_mmap+0xe88/0x21d0 [ 294.146508][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 294.148030][ C0] copy_process+0x4081/0x76a0 [ 294.149518][ C0] ? do_wp_page+0x1aa7/0x4f20 [ 294.151010][ C0] ? __pfx_copy_process+0x10/0x10 [ 294.152595][ C0] kernel_clone+0xfc/0x960 [ 294.154011][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 294.155599][ C0] ? css_rstat_updated+0x9d/0xd30 [ 294.157107][ C0] __do_sys_clone+0xce/0x120 [ 294.158587][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 294.160211][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 294.161781][ C0] ? do_user_addr_fault+0x843/0x1370 [ 294.163443][ C0] do_syscall_64+0xcd/0x4c0 [ 294.164876][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.166726][ C0] RIP: 0033:0x7fedffb85193 [ 294.168171][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 294.174144][ C0] RSP: 002b:00007ffdd517b258 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 294.176709][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedffb85193 [ 294.179161][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 294.181600][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 294.184043][ C0] R10: 000055555e7ac7d0 R11: 0000000000000246 R12: 0000000000000000 [ 294.186439][ C0] R13: 00000000000927c0 R14: 00000000000479dd R15: 00007ffdd517b3f0 [ 294.188934][ C0] [ 294.190611][ C0] Kernel Offset: disabled [ 294.191975][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:31:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b8b95 RDI=ffffffff9b087320 RBP=ffffffff9b0872e0 RSP=ffffc90000007440 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b0872e0 R15=ffffffff855b8b30 RIP=ffffffff855b8bbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055555e7ac500 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fee008e56c0 CR3=0000000048bb4000 CR4=00352ef0 DR0=0000000000000002 DR1=000000000000004a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd98a68e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=ffff88802a6401f0 RCX=ffffffff81c3ebdf RDX=0000000000000000 RSI=ffffffff8c1578e0 RDI=ffffffff8df26da8 RBP=ffff88802a6401e0 RSP=ffffc900035e73d8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff90a81857 R11=0000000000000001 R12=dffffc0000000000 R13=ffff888057d0f648 R14=ffff88802a640000 R15=ffff88802a6401e8 RIP=ffffffff8198558b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fea3f1b3300 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdd5179ff8 CR3=0000000032c80000 CR4=00352ef0 DR0=0000000000000002 DR1=000000000000004a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000000100008 0000000000000004 000c001a00100000 0014010000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c000000080004 0020000e00000000 0000000000000000 0c9f000000200000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002700000000017d 7840000000180000 00200000000e0014 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20d6ffffffff823e 24f7ffffffff823a 925cffffffff8160 a9c3ffffffff8160 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a30effffffff8160 a353ffffffff8160 a35fffffffff8160 aa15ffffffff8160 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa3effffffff8b7f b124000000130300 0000000000090000 000cffffff520000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03e6000000080004 0000000800080000 0014000000d00000 0002000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff823e2189 ffffffff823e20d6 ffffffff823e24f7 ffffffff823a925c ZMM25=27f63f6027f63f60 27f63f6027f63f60 27f63f6027f63f60 27f63f6027f63f60 27f63f6027f63f60 27f63f6027f63f60 27f63f6027f63f60 27f63f6027f63f60 ZMM26=54e477ea54e477ea 54e477ea54e477ea 54e477ea54e477ea 54e477ea54e477ea 54e477ea54e477ea 54e477ea54e477ea 54e477ea54e477ea 54e477ea54e477ea ZMM27=2bca92ea2bca92ea 2bca92ea2bca92ea 2bca92ea2bca92ea 2bca92ea2bca92ea 2bca92ea2bca92ea 2bca92ea2bca92ea 2bca92ea2bca92ea 2bca92ea2bca92ea ZMM28=000000400000003f 0000003e0000003d 0000003c0000003b 0000003a00000039 0000003800000037 0000003600000035 0000003400000033 0000003200000031 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f70f0000f70f0000 f70f0000f70f0000 f70f0000f70f0000 f70f0000f70f0000 f70f0000f70f0000 f70f0000f70f0000 f70f0000f70f0000 f70f0000f70f0000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=800000004b205027 RCX=ffffffff8207fef2 RDX=ffff888022492440 RSI=ffffffff8207fefc RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000c1cf798 R8 =0000000000000007 R9 =0000000000000000 R10=800000004b205027 R11=0000000000000001 R12=1ffff92001839ef3 R13=ffff88803b69b180 R14=00007fc8aa666000 R15=0000000000000000 RIP=ffffffff8207ff12 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c2c1d CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000002 DR1=000000000000004a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d635f616d6472 2f646e6162696e69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8ab011c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d03e31249828ab16 cd10a515cf865ca6 77721b010bd94c3e 940a5546640e0720 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 11b8f281de638042 d55fc0743566fe78 5535599c9ae50004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ee63287091df5bb 6abff39881f69231 6685677a45757660 745368d03e312498 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff91368632 RBX=ffffffff90b4ecfc RCX=dffffc0000000000 RDX=ffffffff8100015e RSI=0000000000000000 RDI=ffffffff90b4ece0 RBP=ffffffff90b4ece0 RSP=ffffc9000ce9f5c8 R8 =ffffffff913686fe R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff90b4ed1c R13=ffffffff8100012f R14=ffffffff90b4ece0 R15=ffffffff90b4ece0 RIP=ffffffff816abd6e RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555629f0500 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbd4c57e2d8 CR3=000000003a2a2000 CR4=00352ef0 DR0=0000000000000002 DR1=000000000000004a DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd39927880 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd4c411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd4c411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd4c411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd4c411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd4c411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbd4c411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000027800000004 ffffffff00000130 0000009800000000 ffffffffffffffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffffff00000130 0000009800000000 ffffffff0000000e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000