last executing test programs: 1m9.635845948s ago: executing program 3 (id=243): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x608783, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x10a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1m9.55715217s ago: executing program 3 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x800) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 1m9.556731296s ago: executing program 3 (id=246): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 1m9.497514064s ago: executing program 3 (id=247): clock_adjtime(0x1, &(0x7f00000001c0)={0x2, 0x5, 0xffffffffffffffff, 0xbcf7, 0x4431, 0x1, 0x401, 0x3, 0x4d, 0x9, 0x8000000000000001, 0xffffffffffffffff, 0x1, 0x7, 0xd5d9, 0x8, 0xf, 0xcb, 0x7, 0x4, 0x6, 0x6b, 0x2, 0x9, 0x1000, 0x8}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', '', [], 0xa, "2077b92d7330c2e5c6c8a81e05"}, 0x11) (async) write$binfmt_script(r1, &(0x7f0000000580)={'#! ', '', [], 0xa, "2077b92d7330c2e5c6c8a81e05"}, 0x11) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x3, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x9, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x6, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x6, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x800a9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m9.497157907s ago: executing program 3 (id=248): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=0x0) capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (rerun: 32) r1 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async) tkill(r1, 0x16) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) preadv(r4, &(0x7f00000032c0)=[{&(0x7f0000001080)=""/60, 0x3c}], 0x1, 0x4, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000180), &(0x7f0000000280), 0x8, 0xa8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = fsmount(r2, 0x0, 0x0) (rerun: 64) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000680)={[{@metacopy_on}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '@((,:'}}, {@euid_eq={'euid', 0x3d, r6}}, {@audit}]}) 1m9.327728429s ago: executing program 3 (id=249): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616d996334f13adb8f95374b68653d6d6d61702c6b"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 1m9.326276387s ago: executing program 32 (id=249): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c63616d996334f13adb8f95374b68653d6d6d61702c6b"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 39.688351615s ago: executing program 0 (id=682): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3519, 0xc2de, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003958aeeffffffcdbdf250000ef6d", @ANYRES32=r5, @ANYBLOB="216100000000000014001400726f7365300000000000000000000000280016802400018014000b"], 0x5c}}, 0x4000000) socket$alg(0x26, 0x5, 0x0) (async) syz_io_uring_setup(0x29ab, &(0x7f0000000380)={0x0, 0x5888, 0x10000, 0x1, 0x1c1}, &(0x7f0000000340), &(0x7f0000000280)) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x80800}) (async) io_uring_enter(r1, 0x3519, 0xc2de, 0x8, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003958aeeffffffcdbdf250000ef6d", @ANYRES32=r5, @ANYBLOB="216100000000000014001400726f7365300000000000000000000000280016802400018014000b"], 0x5c}}, 0x4000000) (async) 39.636997687s ago: executing program 0 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = epoll_create1(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4}}, &(0x7f0000000440)=0xe8) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000380)=@md0, r1, &(0x7f0000000300)) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) (async) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d76697274696f2c76657273696fc7baa199d9a7aa6e3d3970323030302e752c00"]) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fchdir(r2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x1, 0x2, 0x8, 0x2000000000000000}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x3}) (async) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001a80), 0x2000, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="f00000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="0a00180003030303030300000c0070000500060000000000"], 0x34}}, 0x0) (async) ioctl$DVD_READ_STRUCT(r4, 0x5392, &(0x7f0000001ac0)=@manufact={0x4, 0x0, 0x800, "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"}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x2, 0x2}}, 0x20) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) 39.636845031s ago: executing program 0 (id=686): socket(0x10, 0x800, 0x0) socket(0x10, 0x800, 0x0) (async) 39.566392521s ago: executing program 0 (id=691): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) iopl(0x3) (async) iopl(0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, 0x0) unshare(0x62000000) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) (async) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r7, 0x0, 0x0) (async) write$binfmt_misc(r7, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0xa, 0x2f7c343a1feef19c, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) (async) r8 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000240)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) 39.272177926s ago: executing program 0 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = fanotify_init(0x10, 0x2) write$sequencer(0xffffffffffffffff, &(0x7f0000000240)=[@n={0x1, 0x73, @generic=0xa4, 0x4}], 0x4) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x121200, 0x44, 0x24}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f7508ee}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}]}]}], {0x14}}, 0xa8}}, 0x0) fanotify_mark(r0, 0x2, 0x40000019, r1, &(0x7f00000001c0)='./bus\x00') close(0xffffffffffffffff) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 38.971717167s ago: executing program 0 (id=703): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) socket$phonet(0x23, 0x2, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) 38.970534391s ago: executing program 33 (id=703): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) socket$phonet(0x23, 0x2, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011) 38.562670927s ago: executing program 2 (id=724): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc179fd2f8dda1af1ea89de2b7fb0a0100000000000000000300000000000004000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x80049370, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 38.506539234s ago: executing program 2 (id=725): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, "cf"}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) (async) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, "cf"}}}}}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) (async) 38.42833588s ago: executing program 2 (id=726): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) r0 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 32) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r7, @ANYBLOB="000000000000000008000300", @ANYRES32], 0x28}, 0x1, 0x8}, 0x0) 38.428173051s ago: executing program 2 (id=727): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129400, 0x0) r2 = getpgrp(0x0) prlimit64(r2, 0x0, &(0x7f0000000100)={0x5, 0x5}, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x21) fstat(r1, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x8000005) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000140)=[@cstype3], 0x1) mprotect(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 38.428068511s ago: executing program 2 (id=728): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e22, 0x4, @remote}, r1, 0xfffffffc}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb, 0x0, 0x0, 0x9800}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 38.042113581s ago: executing program 2 (id=731): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 37.989162448s ago: executing program 34 (id=731): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.010440434s ago: executing program 4 (id=1290): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) 951.653976ms ago: executing program 4 (id=1291): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f000084c000/0x4000)=nil, 0x4000}, 0x4}) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000001500)=[{&(0x7f0000000300)=""/233, 0xe9}], 0x1, 0x0) wait4(r3, 0x0, 0x2, &(0x7f0000000140)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="d306c5", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x20040005) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'caif0\x00'}) wait4(r3, &(0x7f0000000280), 0x0, &(0x7f0000000400)) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x8080200, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 901.61374ms ago: executing program 4 (id=1292): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="80ffffff00c600001c0012800b00010062726964676500000c00028008000300110005"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0504"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, &(0x7f0000000e40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x23, 0x0, &(0x7f00000000c0)="3d6ee2e04b91ab10143d9abe86dd9a014efa09790d5e2ffd5d05eb6f982ff43034bdb3", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010427bd7000fedadf25010000000c00020000000000000000000400040092c889600000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x10) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r8, 0x80) accept$netrom(r8, 0x0, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[], 0xffdd) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x88c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x3ffd, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xfffffff8, 0x3, 0x6, 0x8, 0x1fb, 0x4, 0x3, 0x6, 0x3, 0xffffff4b, 0x1, 0x2d, 0x100, 0x9, 0x1, 0x0, 0x5, 0x9, 0x5, 0x2, 0x0, 0x9c, 0x8, 0xebf, 0x3, 0x3, 0x8001, 0x3, 0x3, 0x0, 0xffff7fff, 0xda19, 0x7, 0x7, 0x2, 0x6, 0xbee5, 0x5, 0x0, 0x1, 0xc, 0x83, 0x5, 0x9, 0x200, 0x4, 0xcd3, 0x5, 0x81, 0x6, 0x1, 0x8, 0x9, 0x0, 0x0, 0x2, 0x3, 0x0, 0xe, 0x800, 0x8, 0x6, 0x9, 0x5, 0x7ff, 0xc, 0x2, 0xb1, 0x8, 0xe056, 0x8, 0x6, 0x6b30, 0x8, 0x5, 0xff, 0xe3c, 0x400, 0x1, 0x9, 0x4, 0x0, 0x0, 0x4, 0x2, 0x52, 0xff, 0x5, 0x8, 0x1000, 0xaad, 0x9, 0x8, 0x7ff, 0x253d, 0x8001, 0x9, 0x1, 0x8, 0x3, 0xffff, 0x3, 0x5, 0xeabd, 0x105, 0x7, 0x6, 0x7, 0xaf6a, 0xfffffffb, 0x0, 0x1, 0x9, 0x1, 0x4, 0x0, 0x6, 0x9, 0x7f, 0x3, 0x2, 0xfffff010, 0x3, 0x9, 0x81, 0xa8, 0x4489, 0x9, 0x10001, 0x527b1588, 0xf, 0x8, 0x7, 0x10000, 0x0, 0xd47, 0xe, 0x40, 0x1, 0x9, 0x71cd80, 0x0, 0xd86, 0x5, 0x5, 0x3, 0x7, 0xfffffff7, 0xdeb3500, 0x0, 0x401, 0x55f, 0x6, 0x4, 0x462, 0x5, 0x5, 0x5, 0x3, 0xb1a, 0x2, 0x2, 0x4, 0xffff8000, 0x7, 0x1, 0x6, 0x7, 0x2, 0xfffffffe, 0x2, 0x6, 0x40, 0x4, 0x1ff, 0x57c6, 0x6, 0x6, 0xa5a5, 0x5, 0x6, 0x0, 0x7, 0xbc2, 0x6, 0x2, 0xb, 0x0, 0x2, 0x9, 0x8, 0x0, 0x0, 0x0, 0x3, 0x6feb, 0xfc9, 0x1, 0x10000, 0x1ddf4b9a, 0x9, 0x3, 0x9, 0x80000001, 0x7f, 0xfc7, 0x3, 0x8, 0x64, 0xa7, 0x7b, 0x5, 0x101, 0xa5, 0x7f, 0x2d, 0xc00000, 0x4, 0x7f, 0x101, 0x1, 0x0, 0x8, 0x0, 0x4, 0x6, 0x8, 0xfe, 0x7, 0xff, 0x9, 0x74c, 0x80000001, 0x44b, 0x7ff, 0x7, 0x2, 0x4, 0x1, 0xffff0e4b, 0xffff, 0x5, 0x1ff, 0x2, 0x33, 0xfff, 0x6, 0x4, 0x1, 0x2, 0x1ff, 0x19, 0x2, 0xffff, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x1, 0x1, 0x5, 0x3, 0x3, 0x101, 0x3, 0x4, 0xc211, 0x2, 0xa, 0x20000000, 0x7f, 0x7, 0x8, 0x401, 0x3, 0x80000001, 0x7, 0x9, 0xffff, 0xffffffff, 0x3, 0x5, 0xed, 0xc7a, 0x7, 0xd288, 0x101a87ff, 0x7, 0x2, 0xff, 0x3, 0x9, 0x7fff, 0x80000001, 0x0, 0x2, 0x6, 0x3, 0x4, 0x76, 0x9, 0x7ff, 0x3800, 0x5, 0x7, 0x3, 0x26, 0x5, 0x2, 0x24e2, 0xfffffff8, 0x0, 0x1, 0xfb5, 0x7fff, 0x90, 0x8001, 0x0, 0xada, 0x5, 0x7, 0xff, 0x1f4, 0x4, 0x81, 0x7, 0x6b8, 0x5, 0x6, 0x0, 0x2, 0x1ff, 0xffff, 0x7ff, 0x800, 0x1, 0x4, 0x3, 0x5, 0x8, 0xf, 0x80, 0x7fff, 0x2fc4, 0xf, 0xe65, 0xb, 0x3, 0x10000, 0x9, 0xe361, 0x5, 0x6, 0x6, 0xfffffffd, 0x7, 0x8, 0xb, 0x9, 0x8000, 0xc, 0x4, 0x2, 0xc, 0x7, 0x5, 0x81, 0x9, 0x2, 0x3e81, 0xffffffff, 0x381d, 0x4, 0x80000001, 0x6, 0x4, 0x5, 0x1, 0x10000, 0x7, 0xfffffffb, 0x1, 0xa, 0x7, 0x9, 0x7, 0x1, 0x5, 0x2, 0x4, 0x10001, 0x1000, 0x1, 0xb, 0x9, 0x4, 0x9, 0x6, 0x0, 0x3, 0x4, 0xfd, 0x101, 0x7, 0x837, 0x70bb, 0x0, 0xae, 0x2, 0x7, 0x3ff, 0x0, 0x883, 0x3, 0x8001, 0x1, 0x87d3, 0x76, 0x1, 0x7, 0x2, 0xffffff01, 0xfffffff8, 0x6000000, 0x5, 0x7, 0x3ff, 0x5, 0x2ba8, 0xdf86eef1, 0x7, 0xff, 0x4, 0x6351, 0x400, 0x5, 0x1, 0x101, 0x9, 0x7, 0x282f, 0x9, 0x791ed394, 0x3d, 0x6d9b, 0xaa0c, 0x4, 0x10000, 0x1, 0x8, 0x7f, 0x0, 0x3ff, 0x3, 0x3, 0x81, 0xffff, 0x1, 0x6, 0x7, 0x0, 0x6, 0x7e0, 0x1, 0xe442, 0x7, 0x4, 0x355, 0x10000, 0x7, 0x3ff, 0xd5, 0x3, 0x673c19c6, 0x3, 0x6, 0x8a9, 0x7, 0x10001, 0x0, 0x1, 0x2, 0x3, 0x0, 0x5, 0x400, 0xffff, 0x28, 0x0, 0x8000, 0x4, 0x57, 0x9, 0x5, 0x1, 0xfffffffd, 0x6ba1, 0x40309eea, 0x3, 0x800, 0xc, 0x1, 0x2, 0x6, 0x1, 0x80, 0xda, 0x1220125a, 0x81, 0x10000, 0x3ff, 0xdefc]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 740.285374ms ago: executing program 6 (id=1296): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0xb2fe}]}}}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) 738.204889ms ago: executing program 6 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) poll(0x0, 0x0, 0x7) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000000c0)=0xffffffff) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x68003, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x10000000, 0x4, 0x10000, 0x5, 0x7fffffffffffffff, 0x8000000000000000, 0x1, 0x9, 0x7, 0x1000049, 0x3ff, 0x5, 0x1ff, 0x2, 0x8, 0x7, 0xc1, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xb, 0x96, 0xffffffff, 0xffffffff00000000, 0x7e, 0x2, 0xc00000000000000, 0x4, 0x2, 0x9, 0x888f, 0x1, 0x8, 0x46, 0x7, 0x3, 0xa3de, 0x20000000006, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x200000000004, 0xe6, 0x200000000000101, 0x5, 0x3, 0x6a, 0x5, 0x7, 0x40000007, 0xfffffffeffffffff, 0x9, 0xd, 0x0, 0xbbd9, 0x5, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x9e, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x5, 0xab6, 0x0, 0x9, 0x1ff, 0xffffffffffffff81, 0x9, 0x7, 0x7fff, 0x28000800, 0x6a, 0x8061d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x40, 0x4, 0xfffffffffffffffb, 0x2, 0x7, 0xdfd4, 0x3, 0x10, 0x5, 0x9, 0xfff, 0x3, 0xeb4, 0x0, 0xfffffffffffffffe, 0x800000b692, 0xcc, 0x8, 0x1000003]}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000700)="b80500000053530200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209089a0e00000038010f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x5c}], 0x0, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) remap_file_pages(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x0, 0x3, 0x100000) dup2(r1, r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) 450.490138ms ago: executing program 5 (id=1304): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800004503"]) (async) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) 449.109821ms ago: executing program 4 (id=1305): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000001c0)={0x9f0000, 0x5, 0x11, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990902, 0x10, '\x00', @p_u32=0x0}}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 448.535695ms ago: executing program 5 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', r1, @xdp}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000280)={&(0x7f0000000340)=[0x446f, 0xc0b, 0x401, 0x9, 0xc, 0x6, 0x6, 0xfff, 0xffff6ff4, 0x401, 0x48a3, 0x92, 0x3, 0x100, 0x401, 0x7, 0xe2a7, 0x6, 0x97, 0x9, 0x7, 0x7, 0x1, 0x8000, 0xfffffffb, 0xf, 0x6, 0x6, 0x0, 0x4, 0x6, 0x2, 0x3, 0x6, 0x4, 0x6, 0x400, 0x401, 0x7fff, 0x400, 0x7, 0x10000, 0x7, 0x0, 0x59, 0x1, 0x5, 0x4, 0x38000000, 0x4, 0x76ce, 0x0, 0x1000, 0xfffffff5, 0x5, 0xe57b, 0xb, 0x0, 0x4, 0x6, 0xa533, 0x401, 0xc, 0x6, 0x2, 0x5, 0xec, 0x0, 0x6, 0x5, 0x2, 0x9, 0x4308, 0x7fffffff, 0x4, 0x343c, 0x7, 0xfffff178, 0x7fffffff, 0x401, 0x8, 0x1, 0x20, 0xa, 0x2, 0xfffffffa, 0x400, 0x1, 0x10, 0x400, 0x7, 0x4d, 0x2, 0x8001, 0xd, 0x3, 0x2, 0x9, 0x0, 0xffffffff, 0x3, 0x361, 0x2, 0x382, 0x4a3d, 0x5, 0x3, 0x477, 0x3, 0xb, 0x4, 0x7, 0x0, 0x1, 0x401, 0x7, 0xbc2, 0x37, 0x5, 0x6, 0x4d, 0x2, 0xffffffff, 0xffffffff, 0x83, 0xff, 0x200, 0x173f, 0x2e4, 0x6, 0x2, 0x7f, 0x5b5b, 0x7, 0x6, 0x1, 0x8, 0x6, 0x5, 0x5, 0x9, 0x8, 0x4, 0x5, 0x3, 0x3ff, 0x5, 0x0, 0x3, 0x8, 0x6e37c86a, 0x8, 0x8, 0x5, 0xd, 0x3, 0x101, 0x6, 0x8ce, 0x0, 0x4, 0x0, 0xf4f7, 0x4, 0x1, 0x4, 0xbaf, 0x42, 0x9, 0x7, 0x57b, 0x7, 0xfffffffe, 0x6, 0x1, 0x1ff, 0x5, 0x2, 0x4, 0x9, 0x4, 0x9, 0x42, 0x1, 0x10, 0x3, 0x1, 0xfff, 0xfffffeff, 0xb, 0x80, 0x3ff, 0xd1, 0x9, 0x6, 0x0, 0x2, 0xeb8, 0xddd9, 0xa04, 0x9, 0x9, 0x0, 0x8a2, 0x5e, 0x5, 0x0, 0x19, 0x0, 0xc7, 0x8, 0xff, 0x5, 0x2196, 0x2, 0x4, 0x9, 0xf7, 0xe3eb, 0x9, 0x7, 0x4, 0xab1, 0xffffffff, 0xbe0c, 0x38, 0x80000001, 0x7fff, 0x2, 0x40, 0x1c8b8005, 0x74, 0x6, 0x0, 0x3, 0x8, 0x10, 0x2, 0x2, 0x2, 0x18, 0x6, 0xb22, 0x3ff, 0x8, 0x7, 0x4d5e, 0x1, 0x663, 0x2, 0x2, 0x8001, 0x2, 0x8001, 0xffffffff, 0x9, 0x8, 0x0, 0x0, 0x7, 0x3, 0x3, 0x5, 0x80000001, 0x0, 0x2, 0x7, 0x8000, 0x3, 0x390, 0x2, 0x10000, 0x100, 0x2, 0x9, 0x9, 0x3, 0xc96, 0x4, 0x1, 0xc8, 0xba, 0x2, 0xce, 0x3, 0x7, 0x40, 0x1, 0x0, 0xb33f, 0x10, 0xfb1e, 0x401, 0x200, 0x4, 0x3, 0x8, 0xc3a7, 0x1442, 0x9, 0x6, 0x0, 0x7, 0xd49, 0x1, 0xd, 0x5, 0x0, 0xffffffff, 0x9, 0x225000, 0x3, 0x4, 0xd04, 0xfffffffb, 0x5, 0xce8a, 0x9, 0xf25f, 0x6, 0x1, 0x1000, 0x5, 0x8, 0x4, 0x5, 0x2, 0x3, 0x0, 0x401, 0x489d, 0x1, 0x6, 0xfffffff6, 0x18e, 0x7f, 0x40, 0x2512, 0x6, 0x99, 0x6, 0x9, 0xb, 0x4, 0x6e, 0x3, 0x6, 0x2e0, 0x1c5a017, 0x5, 0x2, 0x4, 0x6f, 0x6, 0x31c0, 0x42e21be, 0x9, 0x1, 0x7f, 0xffffffff, 0xd5, 0x1, 0x0, 0x0, 0xe0, 0x6, 0x80, 0x401, 0xd49, 0x2, 0x9, 0x80000001, 0x401, 0x0, 0x4, 0x2, 0x3, 0x1, 0xfffffffb, 0x3, 0x2e0, 0xec47, 0x7, 0x1ff, 0x8, 0x6d, 0x6, 0x1, 0x1, 0x6, 0x9, 0x6, 0x4, 0x2, 0x300000, 0x4f, 0x5, 0xd86, 0x9, 0x6b27, 0x2, 0xa0, 0x5, 0x70000, 0x4, 0xffff92d0, 0x8, 0x5, 0x2, 0x7, 0xfffffff7, 0x2, 0x6, 0xfffffd3f, 0x3, 0x6, 0x2, 0x80a, 0x2, 0x7, 0x9e74, 0x2, 0x6f, 0x1, 0x3, 0x7a37, 0xffffffff, 0x6, 0x77d2e9e1, 0xc51, 0x0, 0x0, 0x7, 0x8001, 0xea6, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1000, 0x0, 0x3, 0x6, 0x3, 0x8009, 0x53, 0x9, 0x4, 0x3, 0x0, 0x64e, 0x2951, 0x1, 0x1, 0x1, 0x1000, 0x40000, 0x8358, 0xa78, 0x8, 0x7ff, 0x5ff612cc, 0x9, 0x1, 0x8000, 0x1629e516, 0x4, 0x8, 0x2, 0x8, 0x6, 0x6, 0x6df, 0x3, 0xd, 0x52e8, 0x101, 0x2, 0x8, 0x80000001, 0x8000, 0xc2, 0xb, 0x4, 0x72dc, 0xa14cb2b, 0xb, 0x3, 0xf2, 0x8, 0x8, 0x3, 0xe, 0xfffffffc, 0x10, 0x0, 0x9, 0x15, 0x0, 0x200, 0x0, 0x0, 0x9, 0x3, 0x7, 0x3, 0x1, 0x80, 0x401, 0x1, 0xa, 0x9, 0x6, 0x474, 0x7fff, 0x1, 0xfffffff0, 0x118f, 0x1, 0x10000, 0x5, 0x4f90, 0x9, 0xffffffff, 0x10001, 0x2, 0x7, 0x81, 0x5, 0xf049, 0xe83a, 0x550d, 0x9, 0x9, 0xfffffffc, 0x82d, 0x1, 0x4, 0x81, 0x10040, 0xfffffffe, 0xcb0, 0x0, 0x2, 0x5, 0x6, 0x5, 0x7, 0x9, 0xfffffffb, 0x5, 0x0, 0x116, 0x4, 0x7, 0x2, 0x60, 0x4, 0x8, 0x7116, 0x8, 0xdf2, 0x9, 0x9, 0x0, 0x10001, 0x101, 0x3, 0x9, 0x4, 0x6, 0x0, 0x9, 0x7ff, 0x1, 0xfa, 0x4, 0x7fff, 0x41, 0x1ee, 0x130, 0x5, 0x3, 0xffffff01, 0x80000000, 0x1, 0xcbd, 0x8, 0xf183, 0x0, 0xff, 0x10000, 0x3, 0x8, 0x7fff, 0x0, 0x67, 0xc73, 0x6, 0xb, 0x8d7f, 0x5167, 0x3, 0x3, 0x8f, 0x2, 0x7, 0x8, 0x4, 0x638a, 0x2, 0xffff9642, 0xc, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x10, 0x1, 0x6, 0x7f, 0x1, 0x81, 0x4, 0x8, 0x9, 0x800, 0xfffffffd, 0x0, 0x2bf, 0x0, 0x568, 0x4, 0xa, 0xfffffff3, 0x6, 0x8, 0xffff, 0x4b80, 0x800, 0x9, 0x5, 0x3, 0x94, 0x3, 0x3, 0x2, 0x3, 0x6, 0x1c000, 0x200, 0xffff, 0x4, 0x867e, 0x7fff, 0x16d, 0xfffffffd, 0x6, 0x2, 0x1, 0x197, 0x7, 0x3, 0x9, 0x3, 0x1, 0x1, 0xe, 0x7, 0x7fffffff, 0x81, 0x80, 0xfff, 0x7, 0x2, 0x1, 0x3, 0xfffffff0, 0x7, 0x7, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0xf, 0x4, 0xfffff1bf, 0x9, 0x0, 0x3, 0x3, 0x17a000, 0x73de405a, 0xb, 0x3, 0x7, 0x7, 0x6, 0x4, 0x5, 0xff, 0xdeb, 0x7, 0x7, 0x8, 0x7f3a, 0xf, 0x5523, 0x2, 0x119d, 0x9, 0x9, 0x7fffffff, 0x3, 0xc63, 0x8, 0xe, 0xe, 0x10, 0x9, 0x4, 0x4, 0x9, 0x2, 0x8000, 0xb43, 0x5, 0x11, 0xa, 0x2, 0xd59, 0x7, 0x3, 0x7, 0x5, 0x8, 0xfff, 0x0, 0x2, 0xffffffc4, 0x7, 0x4, 0xdac, 0x7, 0x1, 0xf28, 0x2, 0x10001, 0xffffffff, 0x1, 0x3, 0x7c, 0x6, 0x7, 0xfd2e, 0x4, 0x4, 0x10, 0x6, 0x4, 0x5, 0x6, 0xffff, 0x4, 0x10000, 0xeae, 0x3, 0x71, 0xfffffff8, 0x4b29, 0xf, 0x1, 0xcb, 0x0, 0x8, 0x80, 0x5, 0x5fb, 0x2, 0x7, 0x16d6, 0x10001, 0x0, 0x3, 0x6, 0x66bc, 0x8, 0xf34, 0x4, 0xfff, 0x2, 0x7fff, 0x9, 0x2, 0x5, 0x2, 0x6, 0x5, 0x7, 0xffff, 0x7, 0x55ca, 0x9, 0x10, 0x5411, 0xfffffffe, 0x80, 0xbf, 0x8000, 0x71fa, 0x9, 0xe, 0x9, 0x7, 0xa5d, 0x0, 0x9, 0x5a191a76, 0x0, 0x8, 0x0, 0x7, 0x400, 0x200, 0x5, 0x8, 0x8, 0x4, 0x1, 0xba, 0x0, 0x9, 0x200, 0x0, 0xf6a, 0x6, 0x3, 0x401, 0x5, 0x6, 0xb99, 0x3, 0x5, 0x7, 0x2458ff82, 0x1, 0x80000000, 0x3e6b40bf, 0x9, 0x1, 0x40, 0x6, 0x7, 0x1, 0xffff79cc, 0x8, 0x1, 0x1, 0xd61, 0x3, 0x7, 0x14e7, 0x2, 0x2, 0x4, 0x5, 0x4, 0x2, 0x6, 0x200, 0xf, 0x4, 0x8, 0x5, 0x0, 0x9, 0xfffffffb, 0x2, 0xa97, 0x8001, 0x81, 0x4c28, 0x10, 0xfffffffe, 0x1, 0x8, 0xffff7fff, 0x9, 0x5, 0x172, 0x1, 0x10000, 0xfff, 0x0, 0x8001, 0x3, 0x2000000, 0x0, 0x1, 0x9, 0x1, 0x7, 0x7, 0x80000000, 0xcba, 0x9, 0x8, 0x1, 0x0, 0x5, 0x6, 0xa30c, 0xfffffffd, 0x2, 0x7fffffff, 0x2, 0x80000001, 0x5, 0x6, 0x40, 0x7, 0x2, 0x7, 0x0, 0x3, 0x4, 0xfffffff7, 0xfffffbff, 0x9, 0xfffffffd, 0x400, 0x8, 0x8, 0x5, 0x3ff, 0x3, 0x1, 0xfffffffa, 0x0, 0x8, 0x81, 0x4, 0xfffffffe, 0x6, 0x7f, 0x9, 0x5, 0xf, 0x23e7, 0x10000, 0x2, 0xb2ed, 0x6, 0x8, 0xd01a, 0x200, 0x7fff, 0x4, 0x7f, 0x8, 0xb, 0x3, 0x3, 0x0, 0x2, 0x6, 0xf2d3, 0x0, 0x1, 0x101, 0x81, 0x5, 0xa, 0x4, 0x6, 0x0, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x1, 0x3, 0xe7, 0x3, 0x1, 0x140, 0x9, 0x1, 0x4, 0x4, 0x6, 0x1, 0x6, 0x4, 0x80, 0xe9, 0x2, 0x8, 0xa9, 0x4, 0x4, 0x1, 0x1, 0x10000, 0x1, 0x38, 0x80, 0x5, 0x6ec, 0x1, 0x2, 0x8000, 0x9, 0x6, 0x4, 0xc, 0x2, 0x6, 0x7f], 0x6, 0x400}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x90000016}) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) 382.965292ms ago: executing program 1 (id=1309): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x840) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00810046ffff000000001c000000000002907800000000e00000011100907800000001943244c9a391251885aa4d7f9eec7d9667449f1a036a15dc68aa7ee0b7e50e9acfd3f3f5991031fffc264afc4eb6d482a083d80b3b4d6e49bf46db2161f54cc3572e537de56a9eaaa793ae6977a27a95db52be6833d35158c78d9b88f45647"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@remote, @local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x7, 0x0, 0x2}}, {@canfd={0xd, {{0x3, 0x1, 0x1}, 0x38, 0x2, 0x0, 0x0, "065468e550d55ce5228fd376b47bcf2d267aea1f4633d252d85551861662a2f5128bbd2d2c89031ba35d7db6006a5ef8a3fa4726a75958efd16cd49f3e692820"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x7ca, 0x153, 0xdda, 0x6f]}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 382.490042ms ago: executing program 5 (id=1310): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000000917dfbd37243da502be8e97e26c3db31e2af3004f312bb1cac701856ca2960421323934ad212d1bd9b2111ccb6868c8a09568a5c716a5322738d217498457431c0a32a5ce074a3f8916f52d3865f0b4f4cfa8253c5f62ae2daac27ec1b29630a97a563d3e4a13c7d0fc29fc37f8895c789f367ce6f11d6aeb69cb03a7304a35534ceeab6604097ce5e763da03d912526a369f7ebac338d3a715270d334482afbbf96953f92fc6b51afbeede7f0d72ab57d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x40000002}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3a}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x21, 0x3, 0x4000) r4 = socket$unix(0x1, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r5, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', r6, 0x2f, 0x4, 0x4, 0x5ea3, 0x12, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8000, 0x7800, 0x80, 0x1f}}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x50, 0x29, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5}, {0xb, 0x5}, {0x7, 0x3}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x91, 0x6}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @tclass_kind_options=@c_red={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 240.7385ms ago: executing program 4 (id=1311): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x2, 0x6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x007', @ANYRES16=0x0, @ANYBLOB="010000000000000000001c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x3c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34758aa20e001ecbfca7c217201c9b17cd702b0f74308f8f2ac7d8089ed3479a8167d08cd83c1d469da4959c4e67882a30dbe598408e57354db55a", @ANYRES8=r1, @ANYRES64=r0], 0x34}}, 0x4004011) 240.074737ms ago: executing program 1 (id=1312): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x89, 0x2}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) (async) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1f, 0x0) ioctl$I2C_TENBIT(r6, 0x704, 0x1) (async) ioctl$I2C_SLAVE(r6, 0x703, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000280)='macvtap0\x00', 0x10) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @mcast2}, r8}}, 0x48) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r10}}, 0x48) (async) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0) (async) r11 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x120, 0x0, 0x112, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) r12 = syz_pidfd_open(r0, 0x0) setns(r12, 0x24020000) (async) r13 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) tkill(r13, 0x39) 235.513726ms ago: executing program 6 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x6, 0x1) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f00000001c0)) 232.630724ms ago: executing program 1 (id=1314): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz1\x00', {0x1, 0x27, 0x869d, 0xff00}, 0x2d, [0x9, 0x4, 0x995, 0x0, 0x101, 0x4, 0xd4f5, 0x3, 0x0, 0x101, 0xcff, 0xc, 0xad80, 0x1000, 0x10001, 0x3, 0x5, 0x60000, 0x2, 0xffff8000, 0x0, 0x7, 0xfe8, 0x8, 0xfff, 0x9, 0xffff, 0x8, 0x7f, 0x9d4, 0x2, 0xa, 0x4b3, 0x7, 0x6, 0xad, 0x97f, 0x5, 0x6, 0x0, 0x7, 0x3, 0x8, 0x2, 0x9, 0xd, 0x6bc, 0x8, 0xcc, 0x52b, 0x3, 0x6, 0x4, 0x4, 0x4, 0x1, 0x7, 0xfffffffd, 0x15, 0x80, 0xa0000000, 0x0, 0x5, 0x3], [0x2, 0xfffffff7, 0x8, 0x401, 0x13, 0x7fff, 0x6, 0x78, 0x0, 0x1e, 0x0, 0x3, 0x10000, 0x2, 0x1, 0x7fff, 0x6, 0x2, 0xff, 0x0, 0x10000, 0x4, 0x6, 0x6, 0x2, 0x101, 0xe, 0x536, 0x5, 0x2, 0x4, 0xf, 0x1ff, 0x7ff, 0x5b0175d7, 0x800, 0x0, 0x0, 0x7, 0xffffffff, 0x47ff, 0x7, 0xe000000, 0x53a2, 0x7, 0x0, 0x8, 0x9, 0x3, 0x7, 0x10, 0xfff, 0x40, 0x200, 0x5, 0x0, 0x9, 0x9, 0xff7ffffc, 0x5, 0x1, 0x7, 0x7, 0x8], [0x0, 0x1, 0x5, 0x10, 0x6, 0x4, 0x4, 0xd0d, 0x0, 0x5, 0x9, 0x8000, 0x60, 0x7f, 0x5, 0xa159, 0x4, 0x3, 0xfff, 0x7, 0x9, 0x3, 0xa8, 0x80, 0x4, 0x632, 0x3, 0x7, 0x8000, 0xb994000, 0x2, 0x2fe5, 0x9, 0x6, 0x8, 0x5, 0x0, 0x100, 0x5, 0x0, 0x8001, 0xffffffff, 0x1, 0xbade, 0x8, 0x6, 0xfffff001, 0x4, 0x2, 0xfffffff8, 0x8, 0x0, 0x7, 0x128, 0x6, 0x51e, 0x4, 0x7ff, 0x200, 0xe, 0x1, 0x5, 0x4], [0x9, 0x6, 0x5, 0x6, 0xb, 0x5, 0x9, 0xfffffffd, 0x2, 0x5, 0x4, 0x1, 0x9, 0x8, 0x8, 0x7, 0x7fffffff, 0x2, 0xa, 0x7fffffff, 0xffffff81, 0x3, 0x2, 0x7, 0x80000000, 0x35b, 0x3, 0xfffffff9, 0x8, 0x0, 0x7da57323, 0x7, 0x3, 0x49, 0x9, 0x40, 0x400, 0x5, 0x0, 0x1, 0x4, 0x18, 0x8, 0xfff, 0x81, 0x2, 0x5, 0x7, 0xe3, 0x6, 0x0, 0x9, 0x2, 0x1ff, 0x6, 0xffffffff, 0x33, 0x8, 0xf, 0x364b, 0x2, 0x3, 0x3]}, 0x45c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], 0x0, 0xa, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 170.421236ms ago: executing program 4 (id=1315): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)="5cdd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2a, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x8}}]}}) r4 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000300)) listen(r4, 0x81) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/oss_mixer\x00', 0x102, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x38b5, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x6, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0xffffeb61}) ppoll(&(0x7f0000000040)=[{r0, 0x1010}, {r0, 0x8111}, {r0, 0x420}, {r0, 0xe0}], 0x4, &(0x7f0000000080), &(0x7f00000000c0), 0x8) mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r10 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r10) 170.155265ms ago: executing program 1 (id=1316): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x257, 0x2, {0xffffffffffffffff}, {0xee00}, 0x9, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x6, 0x400, 0x1, 0x1, [0x0, 0x0, 0x0], [0x529, 0x1, 0x401, 0x9], [0x2, 0xfffffffc, 0x5, 0x80000], [0xfffffffffffffff2, 0x5, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={r3}) move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x8c, 0x1000, 0x80000000, 0x2, 0x2cda, 0x3, 0x10, 0x2, 0x6], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x257, 0x2, {0xffffffffffffffff}, {0xee00}, 0x9, 0x5}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x6, 0x400, 0x1, 0x1, [], [0x529, 0x1, 0x401, 0x9], [0x2, 0xfffffffc, 0x5, 0x80000], [0xfffffffffffffff2, 0x5, 0x0, 0x7fffffffffffffff]}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={r3}) (async) move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x8c, 0x1000, 0x80000000, 0x2, 0x2cda, 0x3, 0x10, 0x2, 0x6], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) 169.165405ms ago: executing program 5 (id=1317): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) 166.136198ms ago: executing program 1 (id=1318): mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000000a01"]) write$binfmt_register(r3, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfffffffffffffffe, 0x3a, '/dev/kvm\x00', 0x3a, '*[', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x50, 0x43, 0x43, 0x50]}, 0x38) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000040)="672e0f013d020d00000f300f01df660f38175b073ef30f0966b96c0b00000f3266b9e40a000066b89c92ac7766ba7c6406010f30ad26670f38c9ce2e0fc735", 0x3f}], 0x1, 0x23, &(0x7f00000000c0)=[@cr0={0x0, 0x1}, @cr4={0x1, 0x400004}], 0x2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r4, 0x8000000000000001, 0x2, 0xffffffffffffff16}) 88.96839ms ago: executing program 1 (id=1319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9009633b45cf1b6b}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000091}, 0x24000000) syz_clone(0x80011, 0x0, 0x3f, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x28, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) 86.200026ms ago: executing program 5 (id=1320): ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) (async) r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n'], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f", "80031f0000000200"}, 0x38) (async, rerun: 32) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="000227bd7000fddbdf254c00000008000300000000000c00a600020000000000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a9007365636f6eb0acbdc2165cffef00a8007365636f6e646e616d6500000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0xac}, 0x1, 0x0, 0x0, 0x20000800}, 0x8840) r9 = socket(0x10, 0x803, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8, 0x5, 0xc, "8834c1", 0x10001, [0x6, 0x8, 0x3, 0x3, 0x2, 0xffffff6f]}}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) (async, rerun: 32) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0x3, 0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001e00)=@newtaction={0x2db4, 0x31, 0x100, 0x70bd25, 0x25dfdbfb, {0x9}, [{0x9c, 0x1, [@m_sample={0x98, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x6a, 0x6, "087d7fc3bd458870ad9f3c971c993bf9373a64219c0689aa96de8112f9cfd59a9133fbed52ab40cd523c2e21565aa7f2722c3cb4bd0b247c978542644aa881d7b37ad4571e50714de949c92637e2ce9e45d853beb09eb426a76b798658345d2e9bb5924cee86"}, {0xc}, {0xc, 0x4}}}]}, {0x130c, 0x1, [@m_skbedit={0xb8, 0x14, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x8}}]}, {0x84, 0x6, "0d499581711e501f21a5f9973ba2f519e15880442aa0ac3a7c08ef7245e794ba0a0fa9b7e6ccccfb239069b8b05cf545fa79ee9b0bc0c483fbe6e8fe6bd651d6c61f3dae40efcc648f136138fa971a716b11f11c42b32a4ce107b772d6f845f0c6a4843fd53f4c75470ba0aa514f0f114ab84a4a111aaff2607215d1117a5c46"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xfc, 0x5, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xc3, 0x6, "9e3956fe67e66c8dd5d6c923b8b931650cba031c3ceb920d82e20f94779f6cedfa9b34cf328130f125b1603b6378bdcd43fd62bea598010f637ecf595e63d5886e267aeb7664ba29a34cbe8cf2495a8cf26088058aa164be47f8c4601a557732c21269f2773ef64254c9f31fa2e482a270dbde3ebd28a2258f1847a609057b703a80478b251ce6911ac0c414721e166d24faa14ef8b267e405ebea1de64d775079d98fc91df2dce8f71f216a638336f6d62cda09241c45e89f897fc4d71560"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_ife={0x104, 0x1, 0x0, 0x0, {{0x8}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_METALST={0x34, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x100}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x61c8}, @IFE_META_PRIO={0x8, 0x3, @val=0x10000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfffffff9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0xa8f}]}, {0x3e, 0x6, "1cc3a228fd9a8dd4f64595ce7a3ec5b06c88a95ee2fc4dd250d467d50d23bb2fcd9754c16c93d3dcbb9ac7eed634021ce78c350fb4fe16326250"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x904, 0x3, 0x0, 0x0, {{0xb}, {0x890, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x3, 0x3, 0x11, 0xc, 0xf, 0x5, 0x7, 0x3, 0x7, 0x898d, 0x0, 0xfffffeaa, 0x3, 0xc9a, 0xfffffff8, 0x7, 0xcd15, 0x4, 0x4, 0x1ff, 0x743, 0x0, 0x9, 0xd0000000, 0x0, 0x6568, 0x9, 0x7, 0x7, 0x6, 0x1, 0x7, 0x10, 0x4, 0x5, 0x7, 0x1, 0xc, 0x2, 0x8, 0x8, 0x4, 0x2, 0x7, 0xb, 0x1135, 0x0, 0x2, 0x2, 0xc93, 0x3, 0x8, 0x7fff, 0x10001, 0x5, 0x3, 0x0, 0x1, 0x80000001, 0x65ad741, 0x1, 0x80000000, 0x3, 0x1, 0xe75, 0xa81, 0x580, 0x10001, 0x7ff, 0x4, 0xf5, 0xffffffff, 0x5, 0xffffffff, 0x8, 0xff, 0x32, 0xe, 0x0, 0x7fff, 0x3da5a5e5, 0x7, 0xfffffff7, 0x101, 0x6, 0x5, 0xffff, 0x3, 0x7, 0xdff8, 0x7fffffff, 0x43, 0xe, 0x8, 0x2, 0x6, 0x8, 0x6, 0x9, 0x0, 0x7f, 0xfffff1c1, 0x1, 0x5, 0x121, 0x3, 0x8, 0x7, 0x6, 0xffffffff, 0x1, 0x3, 0xfffffff8, 0x2, 0x45, 0x1ff, 0x7, 0x7, 0x5, 0x0, 0x634c3532, 0x101, 0x92, 0x7ff, 0x0, 0x4, 0xfffffff0, 0x0, 0x10000, 0x3, 0x1800000, 0x5a5, 0x3, 0xbd, 0x7f, 0x3, 0xec7, 0x9, 0x9a, 0xfffffffa, 0x8, 0x1, 0x7, 0x7, 0x1, 0x3a6, 0x81, 0x2, 0x4, 0x4, 0x6, 0xeae2, 0x9, 0xfffffffb, 0x5, 0xff, 0xab5d, 0x5, 0x4, 0x8, 0x5, 0x4, 0x6, 0x6, 0x3, 0x8, 0x3, 0x0, 0x6, 0x0, 0x6d, 0x7fff, 0x3a5, 0x1, 0x9, 0xff, 0xffffff01, 0x1d3, 0x6, 0xffff382b, 0x0, 0x5, 0x447, 0x72, 0x4, 0x5, 0x100, 0x55, 0x9, 0x6, 0x3, 0x9, 0x7f, 0x0, 0x931e, 0x3116, 0x4, 0x5, 0x1, 0x5, 0x9, 0x5, 0x0, 0x3, 0x7ff, 0xfffffffb, 0x2, 0x81, 0x80000001, 0x8, 0x3, 0x10001, 0xc, 0x7b0, 0x5, 0x9, 0x3, 0x5, 0x800, 0x63, 0x4, 0x1, 0x9276, 0xcb5e, 0x3, 0x7, 0x8d, 0x1f013d93, 0x6, 0x6, 0x1, 0x8, 0x8000, 0x1, 0x5, 0xe, 0x2, 0x8001, 0x1, 0x51, 0x7b61, 0x3, 0x8, 0xffff9897, 0x2, 0x625b, 0x10000, 0x2, 0xf0, 0x2, 0xe1, 0x200, 0x9, 0x7, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xffffffff, 0x5, 0x30, 0x40000, 0x7, 0x5, 0xc4, 0x0, 0xff, 0x3, 0x9, 0x10000, 0xffff14a8, 0x4, 0x8, 0x3, 0x8, 0x0, 0x9, 0x81, 0x1000000, 0x2, 0x1, 0xfffffffe, 0x6, 0x9, 0x7284800, 0x9, 0xa, 0x4, 0x4, 0x7, 0x9, 0x6, 0x9, 0x3, 0x0, 0xe75, 0x0, 0x80, 0x3, 0x7, 0x9, 0x8001, 0xd, 0x6, 0x39e5, 0x1ff, 0x7ff, 0xd, 0x61b6eca9, 0x71, 0xbf, 0x0, 0xfffffffd, 0x80000000, 0x8, 0x3, 0x0, 0x6, 0xffffffff, 0x5, 0x6, 0x3ff, 0x0, 0x6, 0x60ee, 0x1, 0x7fffffff, 0x1, 0x3db, 0x5, 0x3, 0x2, 0x8, 0x7, 0xe, 0x4, 0x81, 0x6, 0x7, 0x0, 0x3, 0x8, 0x9, 0x1, 0x5, 0xaa3d, 0x2805, 0x7, 0xffff8000, 0x5, 0x7fff, 0x8000, 0x7, 0x7ff, 0x2, 0xb, 0x0, 0x7, 0x4, 0xa, 0xd, 0x4, 0x6, 0x401, 0xf, 0x5, 0xa, 0x1000, 0x0, 0x6, 0x6, 0x5, 0x8, 0x5, 0xa, 0x0, 0x2, 0x6, 0x80, 0xf7df, 0x9, 0x3, 0xfffffffc, 0x1, 0x5, 0x2, 0xfffffff0, 0x4, 0x1ff, 0x8, 0x7, 0x9, 0x7, 0x4, 0x0, 0x2, 0x7, 0x81, 0x8, 0x513, 0x9, 0x81, 0xffffffff, 0x6, 0xd, 0x8000, 0x7, 0x81, 0xbbe8, 0xe, 0x8, 0x6, 0x4, 0xb, 0x401, 0x4, 0x0, 0x80000001, 0x1, 0xfffffffc, 0x4, 0x1d, 0x7, 0x7, 0x86, 0x7, 0x4, 0x7, 0x101, 0x3e0, 0xf, 0x800, 0xb80, 0x81, 0x4, 0x8, 0x0, 0x7, 0xfff, 0x5, 0x3, 0xcc9, 0x80000000, 0x2, 0x8, 0x400, 0x8, 0x0, 0xffffffff, 0x147, 0x8, 0x63f43f5, 0x6, 0x8, 0x390, 0x8, 0x9, 0x1, 0x101, 0x7ff, 0x4, 0x4, 0x1, 0xc6d, 0x200, 0x6, 0x9, 0xfffffff8, 0x17b, 0x2, 0x2, 0x1, 0x1, 0x7, 0x5d3b, 0x6, 0x4, 0x1, 0x8, 0x6, 0x5, 0xdc7b, 0x1, 0x382a41c7, 0x9, 0x1, 0x9, 0x6e6b5ba8, 0x5, 0x5, 0x2, 0x8, 0x3, 0x1, 0x80000001, 0x2, 0x1000, 0x2, 0xfffffffb, 0x720, 0x1, 0xd113, 0x4, 0xc7, 0xfff, 0xffff, 0x7fff, 0x80, 0x49a6, 0xe5e, 0xf, 0xca67, 0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0xfc, 0xfff, 0x6, {0x10, 0x1, 0xa, 0x6, 0xff81, 0xe6}, {0x10, 0x1, 0x6, 0x6, 0x164f, 0xfffffe00}, 0x8, 0x3, 0xa17}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x6, 0x5, 0x3, {0x1, 0x0, 0xa1, 0x7ff, 0x8, 0x220}, {0x9, 0x0, 0x8, 0x8000, 0x4, 0xd}, 0x8, 0x80000001, 0x200}}]]}, {0x49, 0x6, "820cdd35d6aa3bf5b492b83d866847f408d78cc18b0cdcc6c05e0a2e51babe0702c64a0aa4538b88993dafe8bcdfd2ec126d8c484751984eedba34be1f0d89e1a862720126"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0xa4, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x77, 0x6, "1175b24a05f2824cbeb7adc6cfe1fec0353e7554034a1d751ad2f8c8cd7b7bb5f8c0740f5c9465f58b7add521b1aee638dbe130ba511c30adafb32343f80bf1d742684f18e2c0f24193947f59d4ae65faafe480cd9c8a4e2727dabe35d8133a76deb87a04e30726931678904944bac210d7449"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xe4, 0xc, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0xaf, 0x6, "5fa3d74d5bb036ff94422c8d6687048b5b7199a6888ea20315cb5ed1f46c07437bef0a3325ee1909f7e8a25c207f9c80aa3a292d4a3d3daf03ec4f0e633c9b9621848982c49193029bd9d638165ac124ac709174dda1d0123d5c851f05f10b4c55ad6b53efda439d5f63dde069b8047c205984d9b145e254d925be61493296310b7ca745e6a881346a904b7c9cad158e3fb227c5e521c83933f2f6741eb2617123188c571f861fba084498"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}, @m_vlan={0xe4, 0x11, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0xe69f, 0x4, 0x8, 0x2}, 0x2}}]}, {0x8b, 0x6, "47535777d8a7a1ec845300567594311edc49ed722526d18e8044baf9721c4014d1395031bb32683fcaff98e0cb8dac0335415b6376034cc7f5017d7358a1f3fbbac902e6ee262f638ddcf283e468708600ed6ddd816668407e43e308871ff3b23c4ba8a5417a1035ae2fdac653260184dff047baedeaf295ddb3323ccf69cea08fd135e3ef8e1b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x210, 0x4, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa71, 0x2, 0xffffffffffffffff, 0x6, 0xfffffbff}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xd53f, 0x0, 0xf, 0xe}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xffffffff, 0x7, 0x81, 0xd14}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x400, 0x5, 0x9, 0xffffffff}, 0x401}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7e9, 0x1a, 0x20000000, 0x9, 0x2938}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4a, 0x5ed, 0x1, 0x3, 0x3}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x3, 0x504c, 0x1}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x1000000, 0x0, 0x3, 0x4}, 0x8}}]}, {0xff, 0x6, "c1bc0acd75516338ddcda95a6ce71df93f1cdd97627a3ca04b5ba04f92621775604305634c50052459b8489b83f515ba09b20d97da92be43591e341b7c771c1361b8b9bfb839b82b2bf61de0776ed37f784bfc1c7da492f90a1a91d58c5ec72937bc88176d961deaa5eca8ac4e7e769ef108070435834affe34cd402806aa0d7285bdbce1c26f6571ef1b8ea1746188468db097894d8bc0f4de9ccc56ba7d1a6e84874253dc23e41ca8cfa1372505d233c65bb6231a0e03fa7452b706ee47034aa90ace11006ec7d9b7fbe5c85b2283110aa5f7d28e83106929c29b9c0094ce85d4a891b49fa36f9a11f6dc79db20e4f31cfbd5356240684a2acae"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x178, 0x1d, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x80, 0x7, 0x9, 0x3}}, @TCA_ACT_BPF_FD={0x8, 0x5, r11}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0xfc, 0x6, "0128816213074338cdb89d0cff50628bb708e1cf37636e43d21a01d4a847f6328a2697f722559aaf066a4934696860d663efb534c02d0a66ee431f63182cbec4f72b3bca3de0149adf68258b830fac058ee4ab812109c48ea6571f5bf04ac2f5ac86785146acf8214042737a20399206c14c52f325280ea87de7fd27f13b68d5abc5539d5ff026ea67b8eacf91776d1a92c97df510fc78d927305b095d954f3a6d3c2fce2d2364472c634acf7a056941adef6902ec1551cdecfb7eac77d4d736a7772873ad8e5afbafa99c2ba4ace08c0f0d9fb88be229544b33bce11afe892c8216de372b7159ac570a48237d3ea87836f9681180008bc9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x158, 0x10, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x9, 0x0, 0x401, 0xf5c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffff8, 0x0, 0x1}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}]}, {0xcb, 0x6, "d17b0f1ad735c181cf24d17a1499fad67df4099a502502a8382e898387ae84f18e9ce1d696f6efd8790bc291b57e93c9b0ff0b601bb707b5fa64829da94fd5d17e5879e3566862635fea25d1331898e42ea67ee8dfd15da39f134b0e6d4db87c3aa875dcc63afd46af3395606899fc8fdff9e17a350809f7d15634752f844801252522b01f8d1d57fa692a7deb49ec402d2a8730f3cca72b6cbf43945d5012a6956de7134d173db8ab44109750d13987a616991acc3ae438be6e9d1f31ecbe3b9c8be722cb1c5c"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, {0x19f8, 0x1, [@m_xt={0x26c, 0x1b, 0x0, 0x0, {{0x7}, {0x20c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xc9, 0x6, {0x3066, 'filter\x00', 0x8, 0x5, "e08f3c9e7b3314c1200300394aa87ac33defa31d8cdb2b80bec685601a253f9f3b39bc09d93cea5c267e9da498f33221227e17f1edc372327366fbff570c27b0397d2b5c6d24834ad5fab99ee9b348fa0c060a39e5df863a4d0ffcd06749e36c30d073fc68ede596e9611f79c99920874deca61d25c5a761cf4a4b5729d53deebf7b7fd61c0990ec13508a5a04f3e355eff3716824cc93ada3925d3f311449"}}, @TCA_IPT_TARG={0xf5, 0x6, {0x9a4e, 'filter\x00', 0x21, 0x1, "80e6493d2ea462982f88f99f946587aefd0f779d8b4c1800a0fac85b8513c8f57bf1697ce93f807f0a7840a42ec9ab59e167b3d8d43fbb9deb3bdec146333676696daa2d65374f98dc3fd7b4ad86e43f5ea174721540623740b2d1ed5f04feb79a08126d0fbed8b61ed64af63b207cfbe6211747d3a00d873d2c152e4465c7bc72fb8f7e2bd418ffd51e2f34de646dfa1c9180b54f5e063714c0c756f967edd870b1e3ea35bd25c65bb52d0a6d7e7e93ccacbe12b9cac0e73c342b7780e11c079b515c52cc2770a7268211"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}]}, {0x3b, 0x6, "9cd276096ff168c456cc8fea1530919a60dc05e0e9e1ad414a43a38ec69f5102d5c6a593db8e9cc1131fac7e2735e3f782b2f497301fa5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x160, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xc3, 0xc, 0xffffffffffffffff, 0xad1, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0xffffffffffffffff, 0xd, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0xffffffffffffffff, 0x53, 0x1}}]}, {0xea, 0x6, "d2fdb1f5047df0167015d4a65fbaab33448e74efa688991446844504a7ac185175dfe5c1050e7ac600efbc812b6eb2e5e6052e947e2eef850a89d258bacbcec4a9580010f0783304bf5ba05952883d1f65b072621d37b785a1ad41b82cf8987419e07d851ad0d9f2cf367feedf261b181290d31629545fa67f8745d4b1023b217d8df6530958f4c28e8e1af00a3d21ca33cc65f7950eea8feff32c07e8669795fdba9f014b50225aa20c1f0afacacc0bb9dc5f3f3c88c87822901914831ba4b363dfd7722f73ba6d07ba792ec163a3669c7f339490b6e0b4be460d0165cd54932762c6f7bfa3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x1078, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1000000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5f}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x88, 0x9, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff7f}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff3}]}, {0x2c, 0x6, "740e7363e9f1da9a1f8bd40a86507b146a8aab481786b84e16a7f302c39e568a98aec41105d2db3e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x168, 0x0, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x989, 0x1, 0xfffffff8, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x6, 0x0, 0xb79, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x7, 0x3, 0xffff}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xfffffff9, 0x5, 0x8, 0x2}, 0x1d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000, 0x3, 0x0, 0x0, 0x180000}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x0, 0x2, 0x6, 0x6e3}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x5, 0x5}}}]}, {0x73, 0x6, "4e7c47e8866583dc6e93caa4fb51162682d248669072a5785e9941a11a5d57df579e7b1ada58d6037d6d288bc27c9887bcecf07d806de4dbe836bd63ca30d253c62993aafb2c4cf9b5b2bea3af38b0313eff9bf9d2330d3c60cb2c9536902b2a39b958b9dc0eb325fecb7661bb0ba9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x54, 0x17, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x24, 0x6, "a86217645cb85966860243656f71383c4194d84346859e1eee6224205996635c"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x148, 0x1f, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0xffff, 0xf0, 0x0, 0x6}, {0x8, 0xff, 0x3, 0x8}, {0x32c, 0x8, 0x3, 0x5b3}, {0x2, 0x70, 0xfe, 0x4}, {0x200, 0x9, 0x8, 0x6}, {0x7, 0x4, 0x4, 0x2}]}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x8000, 0x7, 0x3, 0x9}, {0xa000, 0x4, 0x8, 0x4}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc2, 0x6, "d0f4f2ed8ded41c9d3d75dd8427842f19d4b591e2d4dcae84336f3bcf1c100fd6935913577451d8afd47737bd905119a5f3ad50343d8e5c9a71c2386f5992184347f12557b76f888c1bda0b73b1d7d3d01f3f1d6afb83f3c59ce11469de7f27f338f5d01b4b35f7e2ae711aa7660cdb6d897b9c2fb5786f878334ef16e7dde28388b2ac422320def9c0da9ca5eb60ee7a9c8d86a973a688511570749daefeb0a63d72dba454f104ce0f7bbcc7265b74ee242a9fc06dc42763faa5cba079c"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0x16c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x4, 0x4, 0x7, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0xf6, 0x6, "b7e89066f815b4084816c8611c21cf5809897a29d4579e3f96181d2d1fed7a8f26dd707c2b1f86f9297beedb656f236574e71f28288f550a61c44250a3a0691e6171b60f72e2ea37fa545a36a488d3bae37614000ccac428d063412aba2f7f758cf7ed0ee8f977058ea8070a32559daa353890071e5c6ce52848ea305332acf8fa1d63033fafa2d688aed05df8c6529e2c5fc51d8a62226c42c2828b838768856bc01262e70f4b07ca766d02514b7424d0aa129e2fb283894f9bf453239a312abca825364db84f2188aa56a795bad1eeca1c8fa1a2c7f5e25700e3d46b5451e65104d512096c0aa5fafd5580b8514776e4b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xb8, 0x3, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x3, 0x7f, 0x1}, {0x6, 0x2, 0x4, 0xfffffffe}, {0x3, 0x1, 0x1, 0xe4f}, {0x4, 0x9, 0x5, 0x81}, {0x4, 0x2, 0x7f, 0x5}, {0x2d, 0x6, 0xb}, {0x3, 0x5, 0x3, 0x57a3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x2810, 0x6, 0x7, 0xfffffffb}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0x2, 0xfe, 0xced5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}]}, {0x20, 0x6, "42d66cb179415e173f79d4c68b380349f0444aaca2c43543c4a52f3c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2db4}}, 0x0) 82.303656ms ago: executing program 6 (id=1321): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) (async) r1 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x40001) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085"]) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x61, 0x1}}}]}, 0x24}}, 0x0) 81.213248ms ago: executing program 5 (id=1322): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) read$qrtrtun(r0, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x286}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) (async) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r10 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x5, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0xfff, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x9, 0x6, 0x7, 0x6, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0x1, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x2, 0x3, 0x1000, 0x7, 0x1, 0x0, 0x1000, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x105, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a3, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1000, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0x10, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0x2, 0x63, 0x7, 0xddfd, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x1, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x4ad, 0x3, 0x20000005], [0x4, 0x4, 0x5, 0xfffffff9, 0x8000493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0x9, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0xf, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0xfe5d, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r11, &(0x7f0000000080)=""/221, 0xdd, 0x7fffffffffffffff) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async) pread64(r2, &(0x7f00000005c0)=""/4, 0x4, 0x400) 80.329979ms ago: executing program 6 (id=1323): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x200, 0x0, 0x500, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e6acbcf274e20ef44771d21814b66be9780bf366b632bd604294ca31dc86b0c877de1aa53a452a577897ddee5be9c2c8674c8d166d65b06652e0f6fc8060eb3c279793273bc768c0586cc275cd517febfcc5c28b3182e303d3a667b5c89a022613bcfb57dd512ab0c9669ed6b30fd64763317e96"], 0x50) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a40), 0x4a0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f000088b000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000002000000014001a80100005800c000780"], 0x34}}, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000002a80)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x18) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r7, 0x4008af13, &(0x7f0000000300)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x20, 0x301, 0x4, 0x4, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffeb, 0xffff}, {0x1, 0xfff2}, {0xd, 0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x4008040) close_range(r7, r7, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x501}) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@multicast1, @broadcast, r9}, 0xc) ioctl$vim2m_VIDIOC_STREAMON(r10, 0xc0285628, &(0x7f0000000040)=0x3) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) kernel console output (not intermixed with test programs): orkdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.183432][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.190102][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.200715][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.209363][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.218396][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.226147][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.231296][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.239413][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.251331][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.256922][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.264173][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.270509][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.275416][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.282730][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.287677][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.298210][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.305066][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.313352][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.322641][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.331869][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.339371][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.347900][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.361036][ T6139] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 47.458439][ T6192] ======================================================= [ 47.458439][ T6192] WARNING: The mand mount option has been deprecated and [ 47.458439][ T6192] and is ignored by this kernel. Remove the mand [ 47.458439][ T6192] option from the mount to silence this warning. [ 47.458439][ T6192] ======================================================= [ 47.944118][ T6232] overlayfs: failed to clone upperpath [ 48.029931][ T6241] Illegal XDP return value 8 on prog (id 5) dev N/A, expect packet loss! [ 48.058643][ T6243] tipc: Enabling of bearer rejected, failed to enable media [ 48.178740][ T6249] netlink: 184 bytes leftover after parsing attributes in process `syz.2.60'. [ 48.182458][ T6249] xt_socket: unknown flags 0xd0 [ 48.185335][ T6249] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 48.188466][ T6249] netlink: 'syz.2.60': attribute type 2 has an invalid length. [ 48.219221][ T6253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 48.319633][ T5966] Bluetooth: hci2: command tx timeout [ 48.319646][ T5975] Bluetooth: hci0: command tx timeout [ 48.319668][ T5975] Bluetooth: hci1: command tx timeout [ 48.389958][ T6271] Zero length message leads to an empty skb [ 48.399685][ T5975] Bluetooth: hci3: command tx timeout [ 48.408584][ T6273] overlayfs: failed to clone upperpath [ 48.415740][ T6275] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 48.418220][ T6275] netlink: 224 bytes leftover after parsing attributes in process `syz.1.68'. [ 48.424178][ T6275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.68'. [ 48.437203][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 48.444089][ T6278] atomic_op ffff88805572f198 conn xmit_atomic 0000000000000000 [ 48.512344][ T6284] program syz.1.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.515733][ T6284] ata1.00: invalid service action 31 [ 48.995761][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 48.995777][ T40] audit: type=1400 audit(1755679284.753:258): avc: denied { write } for pid=6300 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.144885][ T6306] overlayfs: failed to clone upperpath [ 49.199737][ T40] audit: type=1400 audit(1755679284.963:259): avc: denied { name_bind } for pid=6309 comm="syz.2.79" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 49.212295][ T40] audit: type=1400 audit(1755679284.973:260): avc: denied { ioctl } for pid=6309 comm="syz.2.79" path="socket:[10572]" dev="sockfs" ino=10572 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.216071][ T6310] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.222256][ T40] audit: type=1400 audit(1755679284.973:261): avc: denied { bind } for pid=6309 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.229111][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 49.237415][ T6268] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 49.267239][ T6312] bridge_slave_0: left allmulticast mode [ 49.269577][ T6312] bridge_slave_0: left promiscuous mode [ 49.271484][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.275369][ T6312] bridge_slave_1: left allmulticast mode [ 49.277300][ T6312] bridge_slave_1: left promiscuous mode [ 49.279200][ T6312] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.282393][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 49.287221][ T6312] bond0: (slave bond_slave_0): Releasing backup interface [ 49.290950][ T6312] bond0: (slave bond_slave_1): Releasing backup interface [ 49.297104][ T6312] team0: Port device team_slave_0 removed [ 49.302735][ T40] audit: type=1400 audit(1755679285.063:262): avc: denied { unmount } for pid=5964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.302939][ T6312] team0: Port device team_slave_1 removed [ 49.314088][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.317019][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.317358][ T40] audit: type=1400 audit(1755679285.073:263): avc: denied { write } for pid=6316 comm="syz.0.81" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 49.321504][ T6317] usb usb8: usbfs: process 6317 (syz.0.81) did not claim interface 0 before use [ 49.327677][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.329651][ T40] audit: type=1400 audit(1755679285.073:264): avc: denied { transfer } for pid=6311 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.333130][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.375959][ T40] audit: type=1400 audit(1755679285.133:265): avc: denied { ioctl } for pid=6319 comm="syz.0.82" path="socket:[11532]" dev="sockfs" ino=11532 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.411750][ T40] audit: type=1400 audit(1755679285.173:266): avc: denied { accept } for pid=6319 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.498511][ T40] audit: type=1400 audit(1755679285.253:267): avc: denied { name_bind } for pid=6334 comm="syz.0.86" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 49.500913][ T6335] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 49.585842][ T6341] @: renamed from vlan0 (while UP) [ 50.184081][ T6374] capability: warning: `syz.0.100' uses 32-bit capabilities (legacy support in use) [ 50.237224][ T6382] sctp: [Deprecated]: syz.0.102 (pid 6382) Use of int in maxseg socket option. [ 50.237224][ T6382] Use struct sctp_assoc_value instead [ 50.399715][ T5975] Bluetooth: hci0: command tx timeout [ 50.399742][ T5966] Bluetooth: hci1: command tx timeout [ 50.406920][ T6392] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 50.409597][ T5966] Bluetooth: hci2: command tx timeout [ 50.479728][ T5966] Bluetooth: hci3: command tx timeout [ 50.524899][ T6395] : renamed from lo (while UP) [ 50.574218][ T6409] syzkaller1: entered promiscuous mode [ 50.576090][ T6409] syzkaller1: entered allmulticast mode [ 50.583702][ T6409] netlink: zone id is out of range [ 50.593083][ T6409] netlink: set zone limit has 4 unknown bytes [ 50.793797][ T6443] netlink: 'syz.0.118': attribute type 5 has an invalid length. [ 50.861163][ T6457] MPI: mpi too large (16392 bits) [ 50.863541][ T5966] Bluetooth: hci3: unexpected subevent 0x19 length: 3 < 28 [ 50.932759][ T6472] random: crng reseeded on system resumption [ 51.077288][ T6502] overlayfs: failed to clone upperpath [ 51.155277][ T6514] netlink: 'syz.3.145': attribute type 5 has an invalid length. [ 51.157770][ T6514] netlink: 'syz.3.145': attribute type 7 has an invalid length. [ 51.165955][ T6514] : entered promiscuous mode [ 51.198567][ T6524] sctp: failed to load transform for md5: -2 [ 51.280796][ T6538] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 51.549634][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.580532][ T5966] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 51.580670][ T6547] __nla_validate_parse: 4 callbacks suppressed [ 51.580680][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 51.589872][ T6547] IPv6: sit1: Disabled Multicast RS [ 51.591837][ T6547] sit1: entered allmulticast mode [ 51.619170][ T6552] mmap: syz.0.157 (6552) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.664802][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.667691][ T6558] netlink: 264 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.671078][ T6558] netlink: 56 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.699682][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 51.702598][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.706295][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.709771][ T53] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 51.713105][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.717969][ T53] usb 8-1: config 0 descriptor?? [ 51.957346][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055057800: rx timeout, send abort [ 52.019487][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 52.125830][ T53] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 52.146067][ T6584] netlink: 'syz.1.167': attribute type 10 has an invalid length. [ 52.151089][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.154533][ T6584] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.219409][ T6601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.222838][ T6601] bond0: (slave bond1): Enslaving as an active interface with an up link [ 52.237701][ T6598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6598 comm=syz.1.171 [ 52.323856][ T6618] tmpfs: Unknown parameter 'hugP}always' [ 52.460065][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055057800: abort rx timeout. Force session deactivation [ 52.479679][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 52.489590][ T5966] Bluetooth: hci2: command tx timeout [ 52.733330][ T6637] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.742637][ T6637] evm: overlay not supported [ 52.921211][ T6659] team0: Port device team_slave_0 removed [ 52.926667][ T6660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.190'. [ 53.035530][ T6666] overlayfs: failed to clone upperpath [ 53.240851][ T6682] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 53.248337][ T6682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.252609][ T6682] 9pnet_fd: p9_fd_create_unix (6682): problem connecting socket: ./file0: -111 [ 53.298856][ T6689] netlink: 'syz.2.202': attribute type 10 has an invalid length. [ 53.303403][ T6689] team0: Device ipvlan1 failed to register rx_handler [ 53.408708][ T6697] overlayfs: failed to clone upperpath [ 53.430141][ T6701] capability: warning: `syz.2.206' uses deprecated v2 capabilities in a way that may be insecure [ 53.518126][ T6713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.522896][ T6713] team_slave_1: entered promiscuous mode [ 53.524987][ T6713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.529459][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 53.802051][ T6735] netlink: 'syz.2.217': attribute type 2 has an invalid length. [ 53.805132][ T6735] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 53.808176][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 53.816026][ T6740] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 53.890756][ T6752] overlayfs: failed to clone upperpath [ 53.918157][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'. [ 54.050416][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 54.050428][ T40] audit: type=1400 audit(1755679289.813:372): avc: denied { add_name } for pid=6753 comm="syz.1.225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.056850][ T6763] ata1.00: invalid multi_count 128 ignored [ 54.060083][ T40] audit: type=1400 audit(1755679289.813:373): avc: denied { create } for pid=6753 comm="syz.1.225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.068930][ T40] audit: type=1400 audit(1755679289.813:374): avc: denied { associate } for pid=6753 comm="syz.1.225" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.109353][ T40] audit: type=1400 audit(1755679289.863:375): avc: denied { ioctl } for pid=6753 comm="syz.1.225" path="/35/file0/file0" dev="9p" ino=35913901 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.211111][ T40] audit: type=1400 audit(1755679289.973:376): avc: denied { append } for pid=6780 comm="syz.0.232" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.257810][ T6788] overlayfs: failed to clone upperpath [ 54.275195][ T29] usb 8-1: USB disconnect, device number 2 [ 54.352359][ T40] audit: type=1400 audit(1755679290.113:377): avc: denied { write } for pid=6802 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.390694][ T6808] overlayfs: overlapping lowerdir path [ 54.424141][ T40] audit: type=1400 audit(1755679290.183:378): avc: denied { create } for pid=6815 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.440660][ T40] audit: type=1400 audit(1755679290.193:379): avc: denied { module_load } for pid=6814 comm="syz.3.241" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 54.458064][ T40] audit: type=1400 audit(1755679290.213:380): avc: denied { read write } for pid=6820 comm="syz.3.243" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.466743][ T40] audit: type=1400 audit(1755679290.213:381): avc: denied { open } for pid=6820 comm="syz.3.243" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.559660][ T5966] Bluetooth: hci0: command 0x0419 tx timeout [ 54.737679][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.845450][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.898723][ T5975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.903485][ T5975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.906666][ T5975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.910315][ T5975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.913668][ T5975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.955946][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.994665][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 55.045347][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.047928][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.050435][ T6835] bridge_slave_0: entered allmulticast mode [ 55.052779][ T6835] bridge_slave_0: entered promiscuous mode [ 55.055510][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.057913][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.060247][ T6835] bridge_slave_1: entered allmulticast mode [ 55.062562][ T6835] bridge_slave_1: entered promiscuous mode [ 55.087007][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.094884][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.100532][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.137307][ T6835] team0: Port device team_slave_0 added [ 55.142623][ T6835] team0: Port device team_slave_1 added [ 55.145021][ T6844] netlink: 'syz.1.251': attribute type 6 has an invalid length. [ 55.178225][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.181545][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.191083][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.195990][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.198286][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.207160][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.240957][ T6835] hsr_slave_0: entered promiscuous mode [ 55.243369][ T6835] hsr_slave_1: entered promiscuous mode [ 55.245579][ T6835] debugfs: 'hsr0' already exists in 'hsr' [ 55.247555][ T6835] Cannot create hsr debugfs directory [ 55.527358][ T46] bond0 (unregistering): Released all slaves [ 55.531479][ T46] bond1 (unregistering): Released all slaves [ 55.587863][ T6835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.595572][ T6835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.600576][ T6835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.602865][ T5966] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 55.605522][ T5966] Bluetooth: hci1: Injecting HCI hardware error event [ 55.607801][ T5966] Bluetooth: hci1: hardware error 0x00 [ 55.612473][ T46] : left promiscuous mode [ 55.616959][ T6835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.669432][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.675276][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.697003][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.700066][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.706789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.709874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.793226][ T6897] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 55.802465][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.857466][ T46] hsr_slave_0: left promiscuous mode [ 55.860037][ T46] hsr_slave_1: left promiscuous mode [ 55.864252][ T46] veth1_macvtap: left promiscuous mode [ 55.866126][ T46] veth0_macvtap: left promiscuous mode [ 55.867953][ T46] veth1_vlan: left promiscuous mode [ 55.870401][ T46] veth0_vlan: left promiscuous mode [ 56.107162][ T6835] veth0_vlan: entered promiscuous mode [ 56.112457][ T6835] veth1_vlan: entered promiscuous mode [ 56.122200][ T6924] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 56.126197][ T6835] veth0_macvtap: entered promiscuous mode [ 56.131271][ T6835] veth1_macvtap: entered promiscuous mode [ 56.140712][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.145782][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.151950][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.154225][ T6928] XFS (nullb0): Invalid superblock magic number [ 56.154848][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.160765][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.163610][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.194785][ T214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.198175][ T214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.209265][ T214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.212373][ T214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.600117][ T6977] overlayfs: unescaped trailing colons in lowerdir mount option. [ 56.813695][ T6983] __nla_validate_parse: 1 callbacks suppressed [ 56.813710][ T6983] netlink: 112 bytes leftover after parsing attributes in process `syz.2.288'. [ 56.820578][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.288'. [ 56.959751][ T5975] Bluetooth: hci3: command tx timeout [ 56.999449][ T61] bond0: (slave bond_slave_0): interface is now down [ 57.001007][ T6999] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 57.002347][ T61] bond0: (slave bond_slave_1): interface is now down [ 57.008279][ T61] bond0: (slave bond1): interface is now down [ 57.010992][ T6999] syz_tun: entered promiscuous mode [ 57.017340][ T6999] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 57.029790][ T46] bond0: (slave bond_slave_0): interface is now down [ 57.032688][ T46] bond0: (slave bond_slave_1): interface is now down [ 57.035470][ T46] bond0: (slave bond1): interface is now down [ 57.038269][ T46] bond0: (slave syz_tun): interface is now down [ 57.041957][ T46] bond0: now running without any active interface! [ 57.251958][ T7010] new mount options do not match the existing superblock, will be ignored [ 57.258024][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.1.298'. [ 57.263204][ T7010] cgroup: Unknown subsys name '' [ 57.522141][ T7030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.306'. [ 57.529672][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.661751][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 57.686037][ T7051] binder: 7050:7051 unknown command 0 [ 57.687173][ T7052] binder: BINDER_SET_CONTEXT_MGR already set [ 57.687802][ T7051] binder: 7050:7051 ioctl c0306201 200000000080 returned -22 [ 57.689628][ T5966] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 57.689867][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 57.691120][ T7052] binder: 7050:7052 ioctl 4018620d 200000000040 returned -16 [ 57.701134][ T53] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 57.703863][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.706979][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.710830][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 57.714069][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 57.718273][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.721921][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.731736][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 57.732026][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 57.732173][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 57.732300][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 57.732411][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 57.930787][ T53] usb 6-1: usb_control_msg returned -32 [ 57.932608][ T53] usbtmc 6-1:16.0: can't read capabilities [ 58.187995][ T7116] overlayfs: failed to clone upperpath [ 58.214055][ T7118] netlink: 'syz.2.332': attribute type 16 has an invalid length. [ 58.214884][ T7119] ptrace attach of "/syz-executor exec"[5968] was attempted by "/syz-executor exec"[7119] [ 58.282955][ T7127] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 58.297092][ T7012] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 58.467055][ T53] usb 6-1: USB disconnect, device number 2 [ 58.564336][ T7145] team0: Port device team_slave_0 removed [ 58.678112][ T7159] vlan0: entered allmulticast mode [ 58.680084][ T7159] bond0: entered allmulticast mode [ 58.681709][ T7159] bond_slave_0: entered allmulticast mode [ 58.683567][ T7159] bond_slave_1: entered allmulticast mode [ 58.691727][ T7159] trusted_key: syz.0.341 sent an empty control message without MSG_MORE. [ 59.040740][ T5966] Bluetooth: hci3: command tx timeout [ 59.124807][ T7173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7173 comm=syz.2.345 [ 59.218691][ T7192] 9pnet: Unknown protocol version 9p2"~= [ 59.465626][ T7213] vlan3: entered promiscuous mode [ 59.467659][ T7213] vlan3: entered allmulticast mode [ 59.469414][ T7213] hsr_slave_1: entered allmulticast mode [ 59.511821][ T7217] overlayfs: failed to resolve './file1': -2 [ 59.666204][ T7239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7239 comm=syz.0.369 [ 59.671402][ T7239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48346 sclass=netlink_route_socket pid=7239 comm=syz.0.369 [ 59.723003][ T40] kauditd_printk_skb: 38 callbacks suppressed [ 59.723014][ T40] audit: type=1400 audit(1755679295.483:420): avc: denied { getopt } for pid=7246 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.742258][ T7249] overlayfs: failed to resolve './file1': -2 [ 59.903088][ T7099] program syz.4.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.088780][ T40] audit: type=1400 audit(1755679295.843:421): avc: denied { accept } for pid=7257 comm="syz.4.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 60.339708][ T6254] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 60.505767][ T6254] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.508858][ T6254] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.513238][ T6254] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.516128][ T6254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.538843][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12524 sclass=netlink_route_socket pid=7262 comm=syz.2.377 [ 60.598683][ T40] audit: type=1326 audit(1755679296.353:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.606247][ T40] audit: type=1326 audit(1755679296.353:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.613547][ T40] audit: type=1326 audit(1755679296.353:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.621924][ T40] audit: type=1326 audit(1755679296.353:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.629250][ T40] audit: type=1326 audit(1755679296.353:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.637734][ T40] audit: type=1326 audit(1755679296.353:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.645953][ T40] audit: type=1326 audit(1755679296.353:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.653596][ T40] audit: type=1326 audit(1755679296.353:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.0.373" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5598ebe9 code=0x7fc00000 [ 60.730987][ T6254] usb 9-1: usb_control_msg returned -32 [ 60.732778][ T6254] usbtmc 9-1:16.0: can't read capabilities [ 60.829281][ T7278] overlayfs: failed to resolve './file1': -2 [ 61.083272][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.086563][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.119632][ T5966] Bluetooth: hci3: command tx timeout [ 61.204990][ T7310] unsupported nlmsg_type 40 [ 61.221157][ T7314] overlayfs: failed to resolve './file0': -2 [ 61.228427][ T7313] syz.0.391: attempt to access beyond end of device [ 61.228427][ T7313] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 61.233671][ T7313] XFS (nbd0): SB validate failed with error -5. [ 61.413041][ T7345] overlayfs: failed to resolve './file0': -2 [ 62.298544][ T7374] __nla_validate_parse: 160 callbacks suppressed [ 62.298561][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 62.757664][ T7382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.415'. [ 62.760859][ T7382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7382 comm=syz.0.415 [ 63.094009][ T29] usb 9-1: USB disconnect, device number 2 [ 63.108514][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 63.112466][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 63.117387][ T7389] netlink: 'syz.4.418': attribute type 9 has an invalid length. [ 63.152328][ T7391] netlink: 'syz.4.419': attribute type 4 has an invalid length. [ 63.199623][ T5966] Bluetooth: hci3: command tx timeout [ 63.249600][ T6051] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.399574][ T6051] usb 5-1: Using ep0 maxpacket: 16 [ 63.403144][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 63.408063][ T6051] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 63.411066][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.413716][ T6051] usb 5-1: Product: syz [ 63.415133][ T6051] usb 5-1: Manufacturer: syz [ 63.416758][ T6051] usb 5-1: SerialNumber: syz [ 63.419250][ T6051] usb 5-1: config 0 descriptor?? [ 63.422059][ T6051] hub 5-1:0.0: bad descriptor, ignoring hub [ 63.424001][ T6051] hub 5-1:0.0: probe with driver hub failed with error -5 [ 63.427267][ T6051] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 63.819740][ T29] usb 5-1: USB disconnect, device number 2 [ 64.005252][ T7359] mac80211_hwsim hwsim5 a: renamed from wlan1 (while UP) [ 64.150310][ T7417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.222255][ T7417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.227345][ T7424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.262616][ T7417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.273479][ T7439] macvlan3: entered promiscuous mode [ 64.275156][ T7439] macvlan3: entered allmulticast mode [ 64.366590][ T7417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.394274][ T7459] IPv4: Oversized IP packet from 127.202.26.0 [ 64.400581][ T7458] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 64.429237][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.434381][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.439387][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.444180][ T46] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.588937][ T7477] netlink: 64 bytes leftover after parsing attributes in process `syz.1.448'. [ 64.742205][ T7481] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.828658][ T40] kauditd_printk_skb: 99 callbacks suppressed [ 64.828669][ T40] audit: type=1400 audit(1756727876.587:529): avc: denied { ioctl } for pid=7486 comm="syz.4.452" path="socket:[22597]" dev="sockfs" ino=22597 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 64.828894][ T7487] cgroup: none used incorrectly [ 64.830761][ T40] audit: type=1400 audit(1756727876.587:530): avc: denied { getopt } for pid=7486 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.989788][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.109993][ T24] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 65.139883][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 65.142830][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.146390][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.149499][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.154218][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.156974][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.160134][ T53] usb 6-1: config 0 descriptor?? [ 65.230340][ T7493] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 65.237334][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 65.667938][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 65.671387][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 65.885833][ T7522] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.464'. [ 65.931225][ T7533] overlayfs: missing 'lowerdir' [ 65.941804][ T40] audit: type=1326 audit(1756727877.675:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7529 comm="syz.4.467" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2eab8ebe9 code=0x0 [ 66.067369][ T7551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 66.101080][ T7563] netlink: 'syz.0.476': attribute type 29 has an invalid length. [ 66.135325][ T7563] netlink: 'syz.0.476': attribute type 29 has an invalid length. [ 66.145631][ T7570] raw_sendmsg: syz.2.479 forgot to set AF_INET. Fix it! [ 66.147337][ T54] IPVS: starting estimator thread 0... [ 66.174564][ T7576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.241793][ T7573] IPVS: using max 53 ests per chain, 127200 per kthread [ 66.288187][ T7576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.368908][ T40] audit: type=1400 audit(1756727878.092:532): avc: denied { create } for pid=7602 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.375467][ T40] audit: type=1400 audit(1756727878.092:533): avc: denied { getopt } for pid=7602 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 66.402647][ T7576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.454107][ T7612] overlayfs: missing 'lowerdir' [ 66.465035][ T7576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.528641][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.533394][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.538414][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.543991][ T1249] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.685094][ T7479] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 66.749358][ T53] usbhid 6-1:0.0: can't add hid device: -71 [ 66.751355][ T53] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 66.757618][ T53] usb 6-1: USB disconnect, device number 3 [ 66.848059][ T40] audit: type=1400 audit(1756727878.557:534): avc: denied { mounton } for pid=7630 comm="syz.4.502" path="/37/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 66.848941][ T7634] fuse: Bad value for 'fd' [ 66.890234][ T7636] overlayfs: missing 'lowerdir' [ 66.935518][ T40] audit: type=1400 audit(1756727878.645:535): avc: denied { bind } for pid=7639 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.991910][ T7644] x_tables: ip_tables: udp match: only valid for protocol 17 [ 67.004901][ T7644] netlink: 'syz.4.506': attribute type 11 has an invalid length. [ 67.127768][ T7665] overlayfs: missing 'workdir' [ 67.150886][ T7668] netlink: 'syz.4.516': attribute type 11 has an invalid length. [ 67.293662][ T7687] overlayfs: missing 'workdir' [ 67.336674][ T7694] geneve1: entered allmulticast mode [ 67.384424][ T7701] geneve2: entered promiscuous mode [ 67.386722][ T7701] geneve2: entered allmulticast mode [ 67.389044][ T214] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.391884][ T214] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.394824][ T214] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.397679][ T214] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.404655][ T40] audit: type=1400 audit(1756727879.091:536): avc: denied { mount } for pid=7707 comm="syz.2.533" name="/" dev="hugetlbfs" ino=23170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 67.453762][ T40] audit: type=1400 audit(1756727879.140:537): avc: denied { setopt } for pid=7710 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.505584][ T40] audit: type=1400 audit(1756727879.198:538): avc: denied { map } for pid=7707 comm="syz.2.533" path="socket:[23171]" dev="sockfs" ino=23171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 67.564290][ T5966] Bluetooth: hci2: connection err: -111 [ 67.565150][ T7719] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 67.567889][ T7721] overlayfs: missing 'workdir' [ 67.728093][ T6045] IPVS: starting estimator thread 0... [ 67.771994][ T7764] overlayfs: missing 'lowerdir' [ 67.792687][ T7766] fuse: Unknown parameter 'd<0x0000000000000004' [ 67.825365][ T7770] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 67.835748][ T7770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7770 comm=syz.2.551 [ 67.848717][ T7758] IPVS: using max 50 ests per chain, 120000 per kthread [ 67.863550][ T7772] __nla_validate_parse: 9 callbacks suppressed [ 67.863561][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'. [ 67.867893][ T7772] openvswitch: netlink: Flow key attr not present in new flow. [ 67.912236][ T7778] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 67.924573][ T7778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 67.927530][ T7778] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 67.930032][ T7778] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 67.932918][ T7778] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 67.936900][ T7778] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 67.964540][ T7789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.557'. [ 67.988137][ T7793] overlayfs: missing 'lowerdir' [ 68.029871][ T7799] netlink: set zone limit has 4 unknown bytes [ 68.071679][ T7810] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 68.132926][ T7829] overlayfs: missing 'lowerdir' [ 68.228663][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 68.324665][ T7874] netlink: 348 bytes leftover after parsing attributes in process `syz.2.583'. [ 68.327725][ T7874] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 68.332036][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 68.335993][ T7874] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 68.480015][ T7898] bridge4: entered promiscuous mode [ 68.483562][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.495408][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.616656][ T7908] afs: Unknown parameter 'dyn' [ 68.917316][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 68.983163][ T7928] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 68.985575][ T7928] SELinux: failed to load policy [ 69.382072][ T7932] syz_tun: entered allmulticast mode [ 69.386450][ T7931] syz_tun: left allmulticast mode [ 69.542179][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 69.674346][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 69.798650][ T7976] bridge5: entered promiscuous mode [ 70.384444][ T5975] Bluetooth: hci4: command 0x1003 tx timeout [ 70.387661][ T5966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 71.530947][ T5966] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 71.533870][ T5966] Bluetooth: hci2: Injecting HCI hardware error event [ 71.536134][ T5975] Bluetooth: hci2: hardware error 0x00 [ 73.655151][ T5975] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 76.599307][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.790262][ T72] cfg80211: failed to load regulatory.db [ 83.144120][ T40] kauditd_printk_skb: 645 callbacks suppressed [ 83.144131][ T40] audit: type=1400 audit(1756727894.542:1184): avc: denied { append } for pid=7985 comm="syz.0.616" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.147504][ T7987] vlan2: entered promiscuous mode [ 83.155690][ T7987] vlan2: entered allmulticast mode [ 83.167268][ T7987] hsr_slave_1: entered allmulticast mode [ 83.181579][ T40] audit: type=1400 audit(1756727894.581:1185): avc: denied { mounton } for pid=7980 comm="syz.1.617" path="/proc/300/task" dev="proc" ino=24227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 83.204765][ T40] audit: type=1400 audit(1756727894.601:1186): avc: denied { accept } for pid=7995 comm="syz.2.622" lport=49454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.226181][ T40] audit: type=1400 audit(1756727894.601:1187): avc: denied { getopt } for pid=7995 comm="syz.2.622" lport=49454 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.233771][ T40] audit: type=1400 audit(1756727894.611:1188): avc: denied { watch } for pid=7998 comm="syz.4.623" path="/63/file1" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.288171][ T40] audit: type=1400 audit(1756727894.680:1189): avc: denied { setattr } for pid=8013 comm="syz.0.627" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.319193][ T8020] can0: slcan on ptm0. [ 83.323878][ T5975] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 83.328846][ T40] audit: type=1400 audit(1756727894.730:1190): avc: denied { ioctl } for pid=8019 comm="syz.1.629" path="pid:[4026532864]" dev="nsfs" ino=4026532864 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.374059][ T8033] binder: 8032:8033 ioctl c0306201 200000000640 returned -22 [ 83.376793][ T40] audit: type=1400 audit(1756727894.769:1191): avc: denied { checkpoint_restore } for pid=8032 comm="syz.4.634" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.384679][ T8033] binder: 8032:8033 ioctl 5412 2000000001c0 returned -22 [ 83.398793][ T8019] can0 (unregistered): slcan off ptm0. [ 83.423232][ T8043] ata1.00: invalid cdb length 6 [ 83.470849][ T40] audit: type=1400 audit(1756727894.878:1192): avc: denied { mounton } for pid=8050 comm="syz.0.640" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 83.475056][ T8051] virtio-fs: tag not found [ 83.503378][ T40] audit: type=1400 audit(1756727894.908:1193): avc: denied { map } for pid=8048 comm="syz.1.639" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.682155][ T8066] can0: slcan on ptm0. [ 83.762590][ T8065] can0 (unregistered): slcan off ptm0. [ 83.833888][ T8079] validate_nla: 60 callbacks suppressed [ 83.833902][ T8079] netlink: 'syz.0.650': attribute type 5 has an invalid length. [ 83.863010][ T8085] netlink: 'syz.2.651': attribute type 1 has an invalid length. [ 83.969407][ T8114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'. [ 83.972557][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.974985][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.041184][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.665'. [ 84.083738][ T8136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=8136 comm=syz.2.667 [ 84.119071][ T8143] overlayfs: failed to resolve 'verity=require': -2 [ 84.125911][ T8140] overlayfs: failed to resolve 'verity=require': -2 [ 84.217271][ T8167] overlayfs: failed to clone upperpath [ 84.263284][ T8172] overlayfs: failed to resolve './file1': -2 [ 84.278169][ T8177] netlink: 48 bytes leftover after parsing attributes in process `syz.2.677'. [ 84.290178][ T8177] netlink: 'syz.2.677': attribute type 28 has an invalid length. [ 84.293189][ T8177] netlink: 'syz.2.677': attribute type 3 has an invalid length. [ 84.296029][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.677'. [ 84.311646][ T8172] netlink: 112 bytes leftover after parsing attributes in process `syz.0.675'. [ 84.377785][ T8187] batman_adv: batadv0: Adding interface: gretap1 [ 84.384271][ T8187] batman_adv: batadv0: Interface activated: gretap1 [ 84.387717][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.681'. [ 84.594789][ T8230] bridge6: entered promiscuous mode [ 84.596699][ T8230] bridge6: entered allmulticast mode [ 84.617602][ T8232] 9pnet_fd: p9_fd_create_tcp (8232): problem connecting socket to 127.0.0.1 [ 84.642754][ T8234] lo: Master is either lo or non-ether device [ 85.220776][ T5966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.223282][ T5966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.223616][ T8271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=8271 comm=syz.2.710 [ 85.225768][ T5966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.232858][ T5966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.235875][ T5966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.253291][ T7813] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.302106][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 85.332797][ T7813] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.352907][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.355172][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.357467][ T8268] bridge_slave_0: entered allmulticast mode [ 85.360546][ T8268] bridge_slave_0: entered promiscuous mode [ 85.363187][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.365415][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.369744][ T8268] bridge_slave_1: entered allmulticast mode [ 85.372157][ T8268] bridge_slave_1: entered promiscuous mode [ 85.387580][ T7813] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.393009][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.396983][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.415616][ T8268] team0: Port device team_slave_0 added [ 85.418491][ T8268] team0: Port device team_slave_1 added [ 85.435823][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.438058][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.445317][ T8303] overlayfs: failed to clone upperpath [ 85.447407][ T8268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.452432][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.454752][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.463723][ T8268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.468053][ T7813] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.492469][ T8268] hsr_slave_0: entered promiscuous mode [ 85.494572][ T8268] hsr_slave_1: entered promiscuous mode [ 85.496559][ T8268] debugfs: 'hsr0' already exists in 'hsr' [ 85.498375][ T8268] Cannot create hsr debugfs directory [ 85.565580][ T7813] bridge_slave_1: left allmulticast mode [ 85.567524][ T7813] bridge_slave_1: left promiscuous mode [ 85.569359][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.573192][ T7813] bridge_slave_0: left allmulticast mode [ 85.574963][ T7813] bridge_slave_0: left promiscuous mode [ 85.576855][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.836895][ T7813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.839765][ T7813] bond_slave_0: left allmulticast mode [ 85.842287][ T7813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.845336][ T7813] bond_slave_1: left allmulticast mode [ 85.847687][ T7813] bond0 (unregistering): Released all slaves [ 85.851445][ T7813] bond1 (unregistering): Released all slaves [ 85.855177][ T7813] bond2 (unregistering): Released all slaves [ 85.858757][ T8268] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.864069][ T7543] bond0: (slave syz_tun): Releasing backup interface [ 85.870174][ T8268] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.873900][ T8268] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.878465][ T8268] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.904439][ T8268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.912006][ T8268] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.917076][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919441][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.924561][ T8337] vcan1: entered allmulticast mode [ 85.927627][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.929962][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.032325][ T8341] netlink: 2 bytes leftover after parsing attributes in process `syz.4.730'. [ 86.042541][ T8268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.133991][ T7813] hsr_slave_0: left promiscuous mode [ 86.138662][ T7813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.141037][ T7813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.144243][ T7813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.144377][ T5965] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.146790][ T7813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.151954][ T5965] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.154978][ T5965] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.155243][ T7813] veth1_macvtap: left promiscuous mode [ 86.158523][ T5965] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.159186][ T7813] veth0_macvtap: left promiscuous mode [ 86.162156][ T5965] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.163068][ T7813] veth1_vlan: left promiscuous mode [ 86.167256][ T7813] veth0_vlan: left promiscuous mode [ 86.238065][ T7813] team0 (unregistering): Port device team_slave_1 removed [ 86.274748][ T8268] veth0_vlan: entered promiscuous mode [ 86.279429][ T8268] veth1_vlan: entered promiscuous mode [ 86.307450][ T8268] veth0_macvtap: entered promiscuous mode [ 86.313515][ T8268] veth1_macvtap: entered promiscuous mode [ 86.329954][ T8268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.335492][ T8268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.342087][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.347706][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.351849][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.355734][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 86.364860][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.407930][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.410788][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.413223][ T8358] bridge_slave_0: entered allmulticast mode [ 86.416385][ T8358] bridge_slave_0: entered promiscuous mode [ 86.421291][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.424129][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.427377][ T8358] bridge_slave_1: entered allmulticast mode [ 86.430660][ T8358] bridge_slave_1: entered promiscuous mode [ 86.460466][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.466595][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.470805][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.473286][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.505235][ T8358] team0: Port device team_slave_0 added [ 86.509974][ T8358] team0: Port device team_slave_1 added [ 86.512906][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.515409][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.530309][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.532562][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.541921][ T8358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.545866][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.548021][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.556215][ T8358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.590236][ T8358] hsr_slave_0: entered promiscuous mode [ 86.592361][ T8358] hsr_slave_1: entered promiscuous mode [ 86.602020][ T8372] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 86.645129][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 86.662543][ T8358] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.668684][ T8358] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.673945][ T8358] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.677628][ T8358] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.687576][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.689874][ T8358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.690327][ T8385] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 86.692544][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.697694][ T8358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.705957][ T8385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.725594][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.731991][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.736048][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.741322][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.746828][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.749029][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.754107][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.756381][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.769161][ T8387] bond1: (slave geneve3): making interface the new active one [ 86.774860][ T8387] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 86.783143][ T8389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.738'. [ 86.783288][ T8385] bond1: entered promiscuous mode [ 86.788259][ T8385] geneve3: entered promiscuous mode [ 86.796309][ T8389] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8389 comm=syz.5.738 [ 86.827445][ T8398] can0: slcan on ptm1. [ 86.857100][ T7813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.866867][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.912185][ T8395] can0 (unregistered): slcan off ptm1. [ 86.964552][ T8358] veth0_vlan: entered promiscuous mode [ 86.968288][ T8358] veth1_vlan: entered promiscuous mode [ 86.976188][ T7813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.988591][ T8358] veth0_macvtap: entered promiscuous mode [ 86.992087][ T8358] veth1_macvtap: entered promiscuous mode [ 87.002941][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.010430][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.017624][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.021367][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.026254][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.030158][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.082270][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.086872][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.091520][ T7813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.102490][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.105403][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.108298][ T8426] netlink: 'syz.5.747': attribute type 17 has an invalid length. [ 87.110733][ T8426] netlink: 5 bytes leftover after parsing attributes in process `syz.5.747'. [ 87.113583][ T8426] macvtap0: entered allmulticast mode [ 87.115480][ T8426] veth0_macvtap: entered allmulticast mode [ 87.117833][ T8426] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 87.133411][ T8432] netlink: 'syz.6.732': attribute type 10 has an invalid length. [ 87.137641][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.141076][ T8432] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 87.160920][ T7813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.271042][ T7813] bridge_slave_1: left allmulticast mode [ 87.272954][ T7813] bridge_slave_1: left promiscuous mode [ 87.274836][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.278373][ T7813] bridge_slave_0: left allmulticast mode [ 87.280898][ T7813] bridge_slave_0: left promiscuous mode [ 87.283342][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.291660][ T7813] batman_adv: batadv0: Interface deactivated: gretap1 [ 87.338813][ T6254] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.345476][ T7813] batman_adv: batadv0: Removing interface: gretap1 [ 87.500833][ T6254] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 87.504108][ T6254] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.508502][ T6254] usb 6-1: config 0 interface 0 has no altsetting 0 [ 87.512715][ T6254] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.516345][ T6254] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.519496][ T6254] usb 6-1: Product: syz [ 87.520853][ T6254] usb 6-1: Manufacturer: syz [ 87.522379][ T6254] usb 6-1: SerialNumber: syz [ 87.525305][ T6254] usb 6-1: config 0 descriptor?? [ 87.528972][ T6254] hub 6-1:0.0: bad descriptor, ignoring hub [ 87.531347][ T6254] hub 6-1:0.0: probe with driver hub failed with error -5 [ 87.535695][ T6254] usb 6-1: selecting invalid altsetting 0 [ 87.781648][ T7813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.786300][ T7813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.790325][ T7813] bond0 (unregistering): (slave bond1): Releasing backup interface [ 87.793533][ T7813] bond0 (unregistering): Released all slaves [ 87.798920][ T7813] bond1 (unregistering): Released all slaves [ 87.804267][ T7813] bond2 (unregistering): Released all slaves [ 87.809138][ T7813] bond3 (unregistering): Released all slaves [ 87.816746][ T8450] pimreg: entered allmulticast mode [ 88.137547][ T7813] hsr_slave_0: left promiscuous mode [ 88.140323][ T7813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.143710][ T7813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.147250][ T7813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.150280][ T7813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.155816][ T7813] team_slave_1: left promiscuous mode [ 88.157721][ T7813] veth1_macvtap: left promiscuous mode [ 88.160123][ T7813] veth0_macvtap: left promiscuous mode [ 88.162096][ T7813] veth1_vlan: left promiscuous mode [ 88.163965][ T7813] veth0_vlan: left promiscuous mode [ 88.172621][ T5966] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 88.172945][ T5965] Bluetooth: hci2: command 0xfc11 tx timeout [ 88.243307][ T5966] Bluetooth: hci4: command tx timeout [ 88.262243][ T7813] team0 (unregistering): Port device team_slave_1 removed [ 88.360881][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 88.360893][ T40] audit: type=1400 audit(1756727899.713:1229): avc: denied { setopt } for pid=8473 comm="syz.6.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.375934][ T40] audit: type=1400 audit(1756727899.733:1230): avc: denied { read } for pid=8473 comm="syz.6.761" path="socket:[28873]" dev="sockfs" ino=28873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.395086][ T8480] can0: slcan on ptm0. [ 88.422430][ T8486] IPv6: NLM_F_REPLACE set, but no existing node found! [ 88.445182][ T8488] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 88.445206][ T8428] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 88.453254][ T8428] usb 6-1: device reset changed ep0 maxpacket size! [ 88.455802][ T6254] usb 6-1: USB disconnect, device number 4 [ 88.535687][ T8479] can0 (unregistered): slcan off ptm0. [ 88.577971][ T40] audit: type=1400 audit(1756727899.931:1231): avc: denied { getopt } for pid=8495 comm="syz.5.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.597402][ T6254] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.725300][ T40] audit: type=1400 audit(1756727900.070:1232): avc: denied { mount } for pid=8501 comm="syz.5.769" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.742597][ T7813] IPVS: stop unused estimator thread 0... [ 88.743236][ T8505] binder_alloc: binder_alloc_mmap_handler: 8503 200000ff9000-200000ffd000 already mapped failed -16 [ 88.746185][ T40] audit: type=1400 audit(1756727900.090:1233): avc: denied { unmount } for pid=8268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 88.768040][ T6254] usb 6-1: Using ep0 maxpacket: 8 [ 88.773594][ T6254] usb 6-1: config 8 has an invalid interface number: 98 but max is 3 [ 88.774995][ T8508] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 88.776179][ T6254] usb 6-1: config 8 has an invalid interface number: 135 but max is 3 [ 88.776193][ T6254] usb 6-1: config 8 has an invalid interface number: 232 but max is 3 [ 88.776203][ T6254] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 88.786953][ T6254] usb 6-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 88.790002][ T6254] usb 6-1: config 8 has no interface number 0 [ 88.791909][ T6254] usb 6-1: config 8 has no interface number 1 [ 88.793824][ T6254] usb 6-1: config 8 has no interface number 2 [ 88.795771][ T6254] usb 6-1: config 8 interface 98 altsetting 82 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 88.799300][ T6254] usb 6-1: config 8 interface 98 altsetting 82 endpoint 0xD has an invalid bInterval 79, changing to 10 [ 88.802609][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0xE, skipping [ 88.806037][ T6254] usb 6-1: config 8 interface 98 altsetting 82 endpoint 0x5 has invalid maxpacket 544, setting to 64 [ 88.810416][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0x5, skipping [ 88.813804][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has an endpoint descriptor with address 0x18, changing to 0x8 [ 88.817399][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has an invalid descriptor for endpoint zero, skipping [ 88.820894][ T6254] usb 6-1: config 8 interface 98 altsetting 82 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 88.824225][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0x6, skipping [ 88.827533][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0xE, skipping [ 88.830937][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0x7, skipping [ 88.834241][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0x4, skipping [ 88.837565][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has a duplicate endpoint with address 0x4, skipping [ 88.840913][ T6254] usb 6-1: config 8 interface 98 altsetting 82 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 88.844966][ T6254] usb 6-1: config 8 interface 135 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 88.848494][ T6254] usb 6-1: config 8 interface 135 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 88.851911][ T6254] usb 6-1: config 8 interface 135 altsetting 173 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 88.855534][ T6254] usb 6-1: config 8 interface 135 altsetting 173 has a duplicate endpoint with address 0x8D, skipping [ 88.859045][ T6254] usb 6-1: config 8 interface 135 altsetting 173 has a duplicate endpoint with address 0xD, skipping [ 88.862404][ T6254] usb 6-1: config 8 interface 232 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 88.865720][ T6254] usb 6-1: config 8 interface 232 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 88.870029][ T6254] usb 6-1: config 8 interface 98 has no altsetting 0 [ 88.872137][ T6254] usb 6-1: config 8 interface 135 has no altsetting 0 [ 88.874277][ T6254] usb 6-1: config 8 interface 232 has no altsetting 0 [ 88.878136][ T6254] usb 6-1: Dual-Role OTG device on HNP port [ 88.880479][ T6254] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0128, bcdDevice=cb.db [ 88.883262][ T6254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.885798][ T6254] usb 6-1: Product: 튜畂⩦ꪭ堎។氣⮼ↆ裰넷㼯ﻈ颥锅鹆አ禆ുᏎ㫿⠛䤎﯌☿᪲僖ꂷ죈椿蟇拾鈷荡뷙㯰踿㹼֎旃饙玮迏 [ 88.891047][ T6254] usb 6-1: Manufacturer: 跫ⲳ텈傁큈᪒侤쩲⦂퐧 [ 88.893471][ T6254] usb 6-1: SerialNumber: syz [ 88.896729][ T8454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.103633][ T8428] __nla_validate_parse: 5 callbacks suppressed [ 89.103646][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 89.113094][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.115909][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.120426][ T6254] option 6-1:8.98: GSM modem (1-port) converter detected [ 89.127636][ T6254] usb 6-1: USB disconnect, device number 5 [ 89.131618][ T6254] option 6-1:8.98: device disconnected [ 90.338884][ T5966] Bluetooth: hci4: command tx timeout [ 90.419734][ T5966] Bluetooth: hci1: command tx timeout [ 92.432863][ T5966] Bluetooth: hci4: command tx timeout [ 92.513365][ T5966] Bluetooth: hci1: command tx timeout [ 94.525184][ T5966] Bluetooth: hci4: command tx timeout [ 101.440610][ T8530] Bluetooth: MGMT ver 1.23 [ 101.458190][ T8532] overlayfs: empty lowerdir [ 101.513272][ T8544] trusted_key: encrypted_key: insufficient parameters specified [ 101.552567][ T8550] can0: slcan on ptm0. [ 101.572168][ T8546] 8021q: VLANs not supported on vxcan1 [ 101.589556][ T8551] loop6: detected capacity change from 0 to 2560 [ 101.592251][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.595510][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.598478][ T8547] can0 (unregistered): slcan off ptm0. [ 101.598729][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.602994][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.605564][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.612615][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.620113][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.622916][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.625493][ T8512] ldm_validate_partition_table(): Disk read failed. [ 101.627907][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.630441][ T8512] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.632999][ T8512] Dev loop6: unable to read RDB block 0 [ 101.637130][ T8512] loop6: unable to read partition table [ 101.648032][ T8551] ldm_validate_partition_table(): Disk read failed. [ 101.651108][ T8551] Dev loop6: unable to read RDB block 0 [ 101.652389][ T40] audit: type=1400 audit(1756727912.930:1234): avc: denied { getopt } for pid=8560 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.653785][ T8551] loop6: unable to read partition table [ 101.664384][ T8551] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 101.790661][ T8584] can0: slcan on ptm0. [ 101.843621][ T8594] fuse: Bad value for 'fd' [ 101.848104][ T40] audit: type=1400 audit(1756727913.119:1235): avc: denied { mounton } for pid=8593 comm="syz.4.800" path="/90/file0" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.855095][ T40] audit: type=1400 audit(1756727913.129:1236): avc: denied { setattr } for pid=8593 comm="syz.4.800" name="file0" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.859012][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'. [ 101.862299][ T8583] can0 (unregistered): slcan off ptm0. [ 101.898113][ T40] audit: type=1400 audit(1756727913.169:1237): avc: denied { read } for pid=8605 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.924616][ T40] audit: type=1400 audit(1756727913.199:1238): avc: denied { bind } for pid=8610 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.935684][ T40] audit: type=1400 audit(1756727913.209:1239): avc: denied { ioctl } for pid=8610 comm="syz.5.806" path="socket:[29948]" dev="sockfs" ino=29948 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.949600][ T40] audit: type=1400 audit(1756727913.229:1240): avc: denied { write } for pid=8605 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.970370][ T40] audit: type=1400 audit(1756727913.258:1241): avc: denied { shutdown } for pid=8626 comm="syz.5.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.006138][ T8635] netlink: 'syz.4.814': attribute type 3 has an invalid length. [ 102.011502][ T8635] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 102.013903][ T8635] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.814'. [ 102.203698][ T40] audit: type=1400 audit(1756727913.488:1242): avc: denied { write } for pid=8643 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.305317][ T8654] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 102.307942][ T8654] cramfs: wrong magic [ 102.439968][ T8663] can0: slcan on ptm0. [ 102.510899][ T8662] can0 (unregistered): slcan off ptm0. [ 102.571635][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 102.576769][ T40] audit: type=1400 audit(1756727913.856:1243): avc: denied { mount } for pid=8667 comm="syz.4.825" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 102.612927][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.5.828'. [ 102.668925][ T8685] can0: slcan on ptm0. [ 102.706887][ T8687] ./cgroup: Can't lookup blockdev [ 102.741457][ T8684] can0 (unregistered): slcan off ptm0. [ 102.784017][ T8699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.896901][ T8716] cgroup: Unknown subsys name 'fowner<00000000000000000000' [ 102.900807][ T8719] cgroup: Unknown subsys name 'fowner<00000000000000000000' [ 102.908252][ T8718] can0: slcan on ptm0. [ 102.967402][ T8725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.982472][ T8717] can0 (unregistered): slcan off ptm0. [ 103.225471][ T8743] mkiss: ax0: crc mode is auto. [ 103.243023][ T8734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20336 sclass=netlink_route_socket pid=8734 comm=syz.5.848 [ 103.326002][ T8754] can0: slcan on ptm0. [ 103.328668][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 103.423966][ T8753] can0 (unregistered): slcan off ptm0. [ 103.441634][ T8766] nftables ruleset with unbound set [ 103.442838][ T8767] netlink: 'syz.4.859': attribute type 7 has an invalid length. [ 103.452858][ T8772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.860'. [ 103.457464][ T8773] tipc: Started in network mode [ 103.459033][ T8773] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 103.461307][ T8773] tipc: Enabled bearer , priority 0 [ 103.462519][ T8775] overlayfs: failed to clone upperpath [ 103.511330][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 103.532433][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 103.578668][ T8794] program syz.5.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.656848][ T8803] netlink: 36 bytes leftover after parsing attributes in process `syz.4.871'. [ 103.660415][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.871'. [ 103.663962][ T8803] netlink: 36 bytes leftover after parsing attributes in process `syz.4.871'. [ 103.686420][ T8807] netlink: 'syz.4.872': attribute type 7 has an invalid length. [ 103.934226][ T8821] can0: slcan on ptm0. [ 103.986142][ T8820] can0 (unregistered): slcan off ptm0. [ 104.007415][ T8824] bond0: (slave batadv0): Releasing backup interface [ 104.012031][ T8824] bridge_slave_0: left allmulticast mode [ 104.013891][ T8824] bridge_slave_0: left promiscuous mode [ 104.015966][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.019325][ T8824] bridge_slave_1: left allmulticast mode [ 104.021122][ T8824] bridge_slave_1: left promiscuous mode [ 104.022933][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.028564][ T8824] bond0: (slave bond_slave_0): Releasing backup interface [ 104.034448][ T8824] bond0: (slave bond_slave_1): Releasing backup interface [ 104.039702][ T8824] team0: Port device team_slave_0 removed [ 104.043116][ T8824] team0: Port device team_slave_1 removed [ 104.045186][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.047564][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.050654][ T8824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.053008][ T8824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.085097][ T8823] team0: Mode changed to "activebackup" [ 104.254573][ T8829] overlayfs: conflicting options: userxattr,metacopy=on [ 104.254650][ T8830] overlayfs: conflicting options: userxattr,metacopy=on [ 104.294941][ T8832] can: request_module (can-proto-0) failed. [ 104.334888][ T8844] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 104.337420][ T6051] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 104.391631][ T8857] veth1_macvtap: left promiscuous mode [ 104.393413][ T8857] macsec0: entered promiscuous mode [ 104.395063][ T8857] macsec0: entered allmulticast mode [ 104.457087][ T6254] tipc: Node number set to 11578026 [ 104.495308][ T5966] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 104.495326][ T5966] Bluetooth: hci1: Malformed LE Event: 0x0d [ 104.507101][ T6051] usb 11-1: Using ep0 maxpacket: 32 [ 104.513345][ T6051] usb 11-1: config 0 has an invalid interface number: 247 but max is 0 [ 104.516362][ T6051] usb 11-1: config 0 has no interface number 0 [ 104.520149][ T6051] usb 11-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 104.523047][ T6051] usb 11-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 104.525603][ T6051] usb 11-1: Product: syz [ 104.526945][ T6051] usb 11-1: Manufacturer: syz [ 104.529826][ T6051] usb 11-1: config 0 descriptor?? [ 104.556314][ T8880] netlink: 'syz.5.894': attribute type 2 has an invalid length. [ 104.559095][ T8880] netlink: 'syz.5.894': attribute type 2 has an invalid length. [ 104.564826][ T8880] netlink: 'syz.5.894': attribute type 13 has an invalid length. [ 104.591458][ T8880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.616708][ T8883] can0: slcan on ptm0. [ 104.678073][ T8882] can0 (unregistered): slcan off ptm0. [ 104.734832][ T6008] usb 11-1: USB disconnect, device number 2 [ 104.974758][ T8904] fuse: Bad value for 'fd' [ 105.578159][ T8954] can0: slcan on ptm0. [ 105.631744][ T8953] can0 (unregistered): slcan off ptm0. [ 105.876916][ T8980] syzkaller1: entered promiscuous mode [ 105.878722][ T8980] syzkaller1: entered allmulticast mode [ 106.099938][ T8993] can0: slcan on ptm0. [ 106.142928][ T8992] can0 (unregistered): slcan off ptm0. [ 106.255144][ T9014] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 106.452310][ T9033] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 106.471604][ T9050] can0: slcan on ptm0. [ 106.543844][ T9049] can0 (unregistered): slcan off ptm0. [ 106.577337][ T9069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9069 comm=syz.4.954 [ 106.591616][ T9072] fuse: Bad value for 'fd' [ 106.596789][ T9074] tipc: MTU too low for tipc bearer [ 106.650612][ T9091] can0: slcan on ptm0. [ 106.725338][ T9090] can0 (unregistered): slcan off ptm0. [ 106.762531][ T40] kauditd_printk_skb: 714 callbacks suppressed [ 106.762542][ T40] audit: type=1400 audit(1756727918.023:1958): avc: denied { read } for pid=9097 comm="syz.5.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.876307][ T9103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.880721][ T9103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.884941][ T9103] bond0 (unregistering): Released all slaves [ 106.953579][ T40] audit: type=1400 audit(1756727918.213:1959): avc: denied { mounton } for pid=9105 comm="syz.5.968" path="/file1" dev="ramfs" ino=30655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 106.954268][ T9106] overlay: Unknown parameter 'mask' [ 106.964794][ T9106] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 106.967027][ T9106] overlayfs: failed to set xattr on upper [ 106.968868][ T9106] overlayfs: ...falling back to redirect_dir=nofollow. [ 106.970991][ T9106] overlayfs: ...falling back to index=off. [ 106.972822][ T9106] overlayfs: ...falling back to uuid=null. [ 106.977280][ T40] audit: type=1400 audit(1756727918.243:1960): avc: denied { remount } for pid=9105 comm="syz.5.968" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.070371][ T9118] netlink: 'syz.5.971': attribute type 1 has an invalid length. [ 107.073795][ T9118] __nla_validate_parse: 16 callbacks suppressed [ 107.073804][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.971'. [ 107.154945][ T9120] can0: slcan on ptm0. [ 107.195545][ T9119] can0 (unregistered): slcan off ptm0. [ 107.272234][ T9129] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.288690][ T9129] can: request_module (can-proto-0) failed. [ 107.412953][ T9139] io-wq is not configured for unbound workers [ 107.422730][ T9144] bridge0: entered promiscuous mode [ 107.427677][ T9144] macsec1: entered promiscuous mode [ 107.430849][ T9144] bridge0: port 3(macsec1) entered blocking state [ 107.433736][ T9144] bridge0: port 3(macsec1) entered disabled state [ 107.441481][ T9144] macsec1: entered allmulticast mode [ 107.443433][ T9144] bridge0: entered allmulticast mode [ 107.447051][ T9144] macsec1: left allmulticast mode [ 107.449170][ T9144] bridge0: left allmulticast mode [ 107.451916][ T9144] bridge0: left promiscuous mode [ 107.472962][ T9147] geneve2: entered promiscuous mode [ 107.474701][ T9147] geneve2: entered allmulticast mode [ 107.476706][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.480114][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.483706][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.487345][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 107.494556][ T9149] dlm: non-version read from control device 8224 [ 107.515145][ T9152] can0: slcan on ptm0. [ 107.576073][ T9151] can0 (unregistered): slcan off ptm0. [ 107.577805][ T9154] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20003 [ 107.578159][ T40] audit: type=1400 audit(1756727918.841:1961): avc: denied { setopt } for pid=9153 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.716884][ T9164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 107.790837][ T9166] futex_wake_op: syz.1.988 tries to shift op by -1; fix this program [ 107.797950][ T9166] syzkaller1: entered promiscuous mode [ 107.799678][ T9166] syzkaller1: entered allmulticast mode [ 107.866775][ T6008] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 107.969456][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 107.997123][ T6008] usb 11-1: device descriptor read/64, error -71 [ 108.000310][ T9188] can0: slcan on ptm0. [ 108.002149][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 108.003213][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 108.005009][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 108.012324][ T9190] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.995'. [ 108.038038][ T9192] overlayfs: conflicting options: userxattr,redirect_dir=on [ 108.040828][ T9192] overlayfs: failed to resolve './file1': -2 [ 108.047319][ T9187] can0 (unregistered): slcan off ptm0. [ 108.257763][ T6008] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 108.307284][ T9213] virtio-fs: tag not found [ 108.388191][ T6008] usb 11-1: device descriptor read/64, error -71 [ 108.508765][ T6008] usb usb11-port1: attempt power cycle [ 108.518997][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1005'. [ 108.536512][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 108.540975][ T9224] overlayfs: failed to resolve './file1': -2 [ 108.584272][ T9231] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 108.595676][ T9231] bond0: (slave a): Enslaving as an active interface with an up link [ 108.622858][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'. [ 108.665454][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 108.706527][ T9262] tmpfs: Unknown parameter 'qunode_hardlimit' [ 108.708245][ T8721] udevd[8721]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 108.843175][ T40] audit: type=1326 audit(1756727920.108:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1021" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2eab8ebe9 code=0x0 [ 108.850520][ T6008] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 108.869740][ T6008] usb 11-1: device descriptor read/8, error -71 [ 108.918181][ T9280] fuse: Bad value for 'fd' [ 109.063160][ T9285] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 109.120629][ T6008] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 109.140592][ T6008] usb 11-1: device descriptor read/8, error -71 [ 109.168598][ T9290] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1026'. [ 109.260932][ T6008] usb usb11-port1: unable to enumerate USB device [ 109.562572][ T9294] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 109.605219][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 109.647160][ T40] audit: type=1400 audit(1756727920.906:1963): avc: denied { write } for pid=9314 comm="syz.5.1034" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.688880][ T40] audit: type=1400 audit(1756727920.946:1964): avc: denied { create } for pid=9322 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 109.694595][ T9321] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 109.697417][ T40] audit: type=1400 audit(1756727920.946:1965): avc: denied { getopt } for pid=9322 comm="syz.1.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 109.705731][ T9321] CIFS mount error: No usable UNC path provided in device string! [ 109.705731][ T9321] [ 109.705749][ T9321] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.719508][ T40] audit: type=1400 audit(1756727920.946:1966): avc: denied { read write } for pid=9322 comm="syz.1.1036" dev="sockfs" ino=31551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 109.834734][ T9343] openvswitch: netlink: Key type 30 is not supported [ 109.854344][ T40] audit: type=1400 audit(1756727921.115:1967): avc: denied { write } for pid=9348 comm="syz.1.1043" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 109.962305][ T9373] bond_slave_0: entered promiscuous mode [ 109.964100][ T9373] bond_slave_1: entered promiscuous mode [ 109.965956][ T9373] batadv0: entered promiscuous mode [ 109.967653][ T9373] mac80211_hwsim hwsim5 a: entered promiscuous mode [ 109.970887][ T9373] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 109.975619][ T9373] bond_slave_0: left promiscuous mode [ 109.977310][ T9373] bond_slave_1: left promiscuous mode [ 109.978395][ T9375] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 109.979037][ T9373] batadv0: left promiscuous mode [ 109.984073][ T9373] mac80211_hwsim hwsim5 a: left promiscuous mode [ 109.995756][ T9] IPVS: starting estimator thread 0... [ 109.997533][ T9377] tipc: Started in network mode [ 110.000016][ T9377] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.004200][ T9377] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.007224][ T9377] tipc: Enabled bearer , priority 10 [ 110.012526][ T9381] binder: 9372:9381 ioctl c0306201 0 returned -14 [ 110.014860][ T9381] binder: 9372:9381 ioctl 4018620d 0 returned -22 [ 110.092735][ T9378] IPVS: using max 52 ests per chain, 124800 per kthread [ 110.092826][ T9392] 0: renamed from hsr0 (while UP) [ 110.098540][ T9392] 0: entered allmulticast mode [ 110.100092][ T9392] hsr_slave_0: entered allmulticast mode [ 110.101818][ T9392] hsr_slave_1: entered allmulticast mode [ 110.103904][ T9392] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 110.134067][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 110.152496][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.166454][ T9404] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8210 sclass=netlink_tcpdiag_socket pid=9404 comm=syz.4.1062 [ 110.283789][ T9418] hugetlbfs: Bad value for 'uid' [ 110.285406][ T9418] hugetlbfs: Bad value for 'uid' [ 110.302714][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.393092][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 110.443058][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.545622][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.548407][ T29] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 110.551473][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.554306][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 110.557690][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 110.562053][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.565022][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.567546][ T29] usb 6-1: Product: syz [ 110.568877][ T29] usb 6-1: Manufacturer: syz [ 110.572615][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 110.574740][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 110.577134][ T29] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 110.579058][ T29] cdc_wdm 6-1:1.0: Unknown control protocol [ 110.593440][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.648718][ T9442] netlink: 'syz.6.1075': attribute type 1 has an invalid length. [ 110.708018][ T9450] 9pnet_fd: p9_fd_create_unix (9450): problem connecting socket: qY3aK: -91 [ 110.733740][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.776598][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.779317][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.781553][ T6008] usb 6-1: USB disconnect, device number 6 [ 110.781606][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 110.786013][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 110.787954][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 110.884148][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.024705][ T6008] tipc: Node number set to 2886997162 [ 111.164753][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.236715][ T9470] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 111.553513][ T9473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.560845][ T9473] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 111.902463][ T9482] tipc: MTU too low for tipc bearer [ 112.067997][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 112.068009][ T40] audit: type=1400 audit(1756727923.320:1976): avc: denied { setopt } for pid=9487 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.118503][ T9494] input: syz1 as /devices/virtual/input/input10 [ 112.131396][ T40] audit: type=1400 audit(1756727923.380:1977): avc: denied { ioctl } for pid=5360 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2932 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.571985][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 112.627936][ T9502] vim2m vim2m.0: vidioc_s_fmt queue busy [ 112.770266][ T9507] policy can only be matched on NF_INET_PRE_ROUTING [ 112.770276][ T9507] unable to load match [ 112.774173][ T9507] all: renamed from lo (while UP) [ 113.085735][ T40] audit: type=1400 audit(1756727924.338:1978): avc: denied { create } for pid=9516 comm="syz.1.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.092345][ T40] audit: type=1400 audit(1756727924.338:1979): avc: denied { ioctl } for pid=9516 comm="syz.1.1101" path="socket:[32515]" dev="sockfs" ino=32515 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.117217][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0455 [ 113.138493][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 113.198391][ T40] audit: type=1400 audit(1756727924.448:1980): avc: denied { setopt } for pid=9528 comm="syz.1.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 113.330326][ T9532] block nbd1: shutting down sockets [ 113.349347][ T54] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 113.425292][ T9536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=9536 comm=syz.4.1110 [ 113.500693][ T54] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.504766][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.508190][ T54] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.511497][ T54] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.515590][ T54] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.518457][ T54] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.522150][ T54] usb 11-1: config 0 descriptor?? [ 113.782860][ T40] audit: type=1400 audit(1756727925.037:1981): avc: denied { setattr } for pid=9540 comm="syz.5.1112" name="tun" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 113.935640][ T54] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 114.023405][ T9545] tmpfs: Unknown parameter 'mpolhq' [ 114.552861][ T9554] netlink: 'syz.5.1117': attribute type 10 has an invalid length. [ 114.593665][ T40] audit: type=1400 audit(1756727925.845:1982): avc: denied { setopt } for pid=9560 comm="syz.5.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.614077][ T40] audit: type=1400 audit(1756727925.865:1983): avc: denied { create } for pid=9518 comm="syz.6.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.623065][ T40] audit: type=1400 audit(1756727925.865:1984): avc: denied { ioctl } for pid=9518 comm="syz.6.1102" path="socket:[32623]" dev="sockfs" ino=32623 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.812207][ T53] usb 11-1: USB disconnect, device number 7 [ 114.906890][ T40] audit: type=1400 audit(1756727926.155:1985): avc: denied { remount } for pid=9582 comm="syz.5.1123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 114.914798][ T9583] debugfs: Bad value for 'mode' [ 115.008340][ T9593] __nla_validate_parse: 16 callbacks suppressed [ 115.008383][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'. [ 115.013442][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 115.014075][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 115.016690][ T9593] netlink: 'syz.1.1124': attribute type 11 has an invalid length. [ 115.061922][ T9602] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1129'. [ 115.072693][ C2] net_ratelimit: 6 callbacks suppressed [ 115.072708][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 115.112789][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 115.371627][ T9630] overlayfs: missing 'lowerdir' [ 115.376476][ T9629] cgroup: noprefix used incorrectly [ 115.433764][ T9637] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1140'. [ 115.623858][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 115.645730][ T9667] nbd: must specify a device to reconfigure [ 115.703109][ T9675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1152'. [ 115.708393][ T9677] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 115.712531][ T9677] openvswitch: netlink: Flow key attr not present in new flow. [ 115.741208][ T9680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.769942][ T9684] dvmrp1: entered allmulticast mode [ 115.775041][ T9684] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.781015][ T53] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.784898][ T53] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 115.789142][ T53] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.792964][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 115.797809][ T53] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 115.802367][ T53] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.805742][ T53] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.809083][ T53] usb 6-1: Product: syz [ 115.810746][ T53] usb 6-1: Manufacturer: syz [ 115.815809][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 115.818062][ T53] cdc_wdm 6-1:1.0: skipping garbage [ 115.820909][ T53] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 115.823346][ T53] cdc_wdm 6-1:1.0: Unknown control protocol [ 116.017089][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 116.019279][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 116.021635][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 116.023856][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 116.026173][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 116.028290][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 116.030344][ T6051] usb 6-1: USB disconnect, device number 7 [ 116.032493][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 116.032504][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 116.032511][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 116.039561][ T9] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 116.114499][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.195872][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 116.199050][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.203798][ T9] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 116.206882][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.209377][ T9] usb 11-1: Product: syz [ 116.210708][ T9] usb 11-1: Manufacturer: syz [ 116.212159][ T9] usb 11-1: SerialNumber: syz [ 116.214368][ T9] usb 11-1: config 0 descriptor?? [ 116.216819][ T9] hub 11-1:0.0: bad descriptor, ignoring hub [ 116.218708][ T9] hub 11-1:0.0: probe with driver hub failed with error -5 [ 116.221797][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input12 [ 116.272301][ T9692] netlink: 'syz.5.1157': attribute type 142 has an invalid length. [ 116.635988][ T29] usb 11-1: USB disconnect, device number 8 [ 116.766163][ T9721] vlan0: entered promiscuous mode [ 116.770201][ T9721] team0: Port device vlan0 added [ 116.791112][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 116.918802][ T9738] usb usb8: usbfs: process 9738 (syz.1.1172) did not claim interface 0 before use [ 117.068488][ T9745] program syz.5.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.125010][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1175'. [ 117.145489][ T9751] syz.5.1177: attempt to access beyond end of device [ 117.145489][ T9751] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 117.150470][ T9751] vxfs: unable to read disk superblock at 1 [ 117.152771][ T9751] syz.5.1177: attempt to access beyond end of device [ 117.152771][ T9751] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 117.156716][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 117.157683][ T9751] vxfs: unable to read disk superblock at 8 [ 117.161470][ T9751] vxfs: can't find superblock. [ 117.177032][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 117.304558][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 117.304570][ T40] audit: type=1400 audit(1756727928.541:1991): avc: denied { append } for pid=9760 comm="syz.6.1181" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.336605][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 117.339574][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.343085][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.346111][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 117.349334][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.356576][ T24] usb 6-1: config 0 descriptor?? [ 117.365263][ T9766] netlink: 1176 bytes leftover after parsing attributes in process `syz.4.1182'. [ 117.380306][ T9766] hsr_slave_1 (unregistering): left promiscuous mode [ 117.430788][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1183'. [ 117.533529][ T9775] 0: renamed from hsr0 (while UP) [ 117.536890][ T9775] 0: entered allmulticast mode [ 117.538519][ T9775] hsr_slave_0: entered allmulticast mode [ 117.540649][ T9775] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 117.637147][ T29] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 117.725370][ T9780] loop9: detected capacity change from 0 to 7 [ 117.727974][ T9780] Dev loop9: unable to read RDB block 7 [ 117.730255][ T9780] loop9: unable to read partition table [ 117.732698][ T9780] loop9: partition table beyond EOD, truncated [ 117.735338][ T9780] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 117.764786][ T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5012.0004/input/input13 [ 117.788893][ T29] usb 11-1: config 0 has no interfaces? [ 117.790749][ T29] usb 11-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 117.793643][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.798850][ T29] usb 11-1: config 0 descriptor?? [ 117.838823][ T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5012.0004/input/input14 [ 117.847556][ T24] kye 0003:0458:5012.0004: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 117.908288][ T9786] tmpfs: Bad value for 'mpol' [ 117.910900][ T9786] jfs: Unknown parameter 'discardefer' [ 117.914089][ T9786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.208025][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.397931][ T9799] IPVS: Error joining to the multicast group [ 118.524454][ T9808] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 118.539579][ T9808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.542442][ T9808] bond1: (slave bond2): making interface the new active one [ 118.545026][ T9808] bond1: (slave bond2): Enslaving as an active interface with an up link [ 118.553872][ T9809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.556782][ T9809] bond1: (slave bond3): Enslaving as a backup interface with an up link [ 118.563218][ T9808] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 118.567460][ T9808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.592243][ T9814] netlink: 'syz.4.1196': attribute type 4 has an invalid length. [ 118.595961][ T40] audit: type=1400 audit(1756727929.838:1992): avc: denied { watch_sb } for pid=9813 comm="syz.4.1196" path="/213/file0" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.836881][ T40] audit: type=1326 audit(1756727930.078:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9833 comm="syz.4.1204" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2eab8ebe9 code=0x10000 [ 118.879260][ C2] kye 0003:0458:5012.0004: usb_submit_urb(ctrl) failed: -1 [ 119.019217][ T842] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 119.160151][ T842] usb 6-1: device descriptor read/64, error -32 [ 119.239631][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.400697][ T842] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 119.540054][ T842] usb 6-1: device descriptor read/64, error -32 [ 119.580113][ T40] audit: type=1800 audit(1756727930.817:1994): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1214" name="nullb0" dev="tmpfs" ino=1067 res=0 errno=0 [ 119.619361][ T9867] overlayfs: unescaped trailing colons in lowerdir mount option. [ 119.620820][ T9865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9865 comm=syz.5.1189 [ 119.627078][ T9869] overlayfs: unescaped trailing colons in lowerdir mount option. [ 119.780415][ T842] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 119.800744][ T842] usb 6-1: device descriptor read/8, error -32 [ 119.979969][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.983008][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.986215][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.989315][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.060940][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 120.211072][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 120.214649][ T24] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 120.217770][ T24] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 120.222504][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.225404][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.227734][ T24] usb 10-1: Product: ꭙ愺몀细踨랩䂜ᨭ䍷얕Ѓ╩㕛躷䓶䉓倧䎖濆뾲ꁇ汖䆛쑈薎㾨Ȫ뻓璸鹹鈵욾ꍒ㠚૝ි凉ቹ뎕쯍儴畓윷㖃ↄ泑䙥洠䏏㓒깤䮯给뜄帞윟㎹늺嫡菙忻睹䌞漎Û꼮韡㏶ꭃڸ䓤戯⟞實ᑰ⅋呛®疤斃⤽Ꚍ縩댨ݑ콒募僢刏㍿ [ 120.237183][ T24] usb 10-1: Manufacturer: Џ [ 120.238611][ T24] usb 10-1: SerialNumber: ᠊ [ 120.262291][ T29] usb 11-1: USB disconnect, device number 9 [ 120.272546][ T9959] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 120.275307][ T9959] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 120.278845][ T9959] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 120.278851][ T40] audit: type=1400 audit(1756727931.516:1995): avc: denied { firmware_load } for pid=9958 comm="syz.6.1231" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.291187][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.660434][ T40] audit: type=1400 audit(1756727931.895:1996): avc: denied { ioctl } for pid=10001 comm="bond_slave_1" path="socket:[37123]" dev="sockfs" ino=37123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.683190][ T54] usb 6-1: USB disconnect, device number 8 [ 120.861626][T10028] __nla_validate_parse: 8 callbacks suppressed [ 120.861637][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1243'. [ 120.868897][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1243'. [ 120.898144][T10032] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 120.901847][T10032] vxcan1: tx address claim with dlc 0 [ 120.925113][ T40] audit: type=1400 audit(1756727932.165:1997): avc: denied { setopt } for pid=10035 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 121.033377][ T40] audit: type=1400 audit(1756727932.275:1998): avc: denied { name_bind } for pid=10050 comm="syz.1.1249" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 121.135049][T10070] kvm: Disabled LAPIC found during irq injection [ 121.200096][T10084] netlink: 'syz.6.1254': attribute type 23 has an invalid length. [ 121.332641][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.405576][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1256'. [ 121.409200][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1256'. [ 121.417557][ T1150] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.417598][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1256'. [ 121.420602][ T1150] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.430672][ T1150] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.431220][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1256'. [ 121.433765][ T1150] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.557944][T10121] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.560193][T10121] overlayfs: failed to set xattr on upper [ 121.562122][T10121] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.564516][T10121] overlayfs: ...falling back to index=off. [ 121.567081][T10121] overlayfs: ...falling back to uuid=null. [ 121.572766][T10121] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.578901][T10121] overlayfs: failed to set xattr on upper [ 121.582080][T10121] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.585068][T10121] overlayfs: ...falling back to index=off. [ 121.587505][T10121] overlayfs: ...falling back to uuid=null. [ 121.611543][T10121] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.617820][T10121] overlayfs: failed to set xattr on upper [ 121.620636][T10121] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.623903][T10121] overlayfs: ...falling back to index=off. [ 121.626441][T10121] overlayfs: ...falling back to uuid=null. [ 121.630886][T10121] ptrace attach of "/syz-executor exec"[10125] was attempted by "/syz-executor exec"[10121] [ 121.680142][T10130] tipc: Enabling of bearer rejected, failed to enable media [ 121.692980][ T24] cdc_ncm 10-1:1.0: bind() failure [ 121.696900][ T24] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 121.699813][ T24] cdc_ncm 10-1:1.1: bind() failure [ 121.703487][ T24] usb 10-1: USB disconnect, device number 2 [ 121.748838][T10135] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1261'. [ 121.752308][T10135] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1261'. [ 121.997789][T10145] netlink: 'syz.6.1265': attribute type 10 has an invalid length. [ 122.011857][T10145] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.019956][T10144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.132373][ T40] audit: type=1400 audit(1756727933.363:1999): avc: denied { map } for pid=10149 comm="syz.1.1267" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.177146][T10155] usb usb8: usbfs: process 10155 (syz.1.1269) did not claim interface 0 before use [ 122.364085][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.456887][T10172] fuse: Unknown parameter 'euid>00000000000000000000' [ 122.549310][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.574863][T10198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1277'. [ 122.609797][T10203] IPVS: Error connecting to the multicast addr [ 122.647168][T10208] netlink: 'syz.6.1282': attribute type 1 has an invalid length. [ 122.684325][ T40] audit: type=1400 audit(1756727933.913:2000): avc: denied { listen } for pid=10209 comm="syz.1.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.771539][ T5966] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 123.159330][T10249] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1292'. [ 123.353366][ T40] audit: type=1400 audit(1756727934.582:2001): avc: denied { execute } for pid=10264 comm="syz.1.1297" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 123.405390][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.525685][T10279] tmpfs: Unknown parameter './file0' [ 123.528574][T10279] tmpfs: Unknown parameter './file0' [ 123.530972][T10279] tmpfs: Unknown parameter './file0' [ 123.533362][T10279] tmpfs: Unknown parameter './file0' [ 123.636447][T10294] overlayfs: failed to clone upperpath [ 123.639531][T10294] overlayfs: failed to clone upperpath [ 123.642516][T10294] overlayfs: failed to clone upperpath [ 123.646835][T10294] overlayfs: failed to clone upperpath [ 123.649743][T10294] overlayfs: failed to clone upperpath [ 123.652168][T10294] overlayfs: failed to clone upperpath [ 123.655998][T10294] overlayfs: failed to clone upperpath [ 123.658230][T10294] overlayfs: failed to clone upperpath [ 123.660944][T10294] overlayfs: failed to clone upperpath [ 123.672176][T10294] overlayfs: failed to clone upperpath [ 123.677908][T10294] overlayfs: failed to clone upperpath [ 123.685236][T10303] bond0: (slave batadv0): Releasing backup interface [ 123.685299][T10294] overlayfs: failed to clone upperpath [ 123.691934][T10294] overlayfs: failed to clone upperpath [ 123.694803][T10294] overlayfs: failed to clone upperpath [ 123.698855][T10294] overlayfs: failed to clone upperpath [ 123.701648][T10294] overlayfs: failed to clone upperpath [ 123.704175][T10303] bridge_slave_0: left allmulticast mode [ 123.704206][T10294] overlayfs: failed to clone upperpath [ 123.706099][T10303] bridge_slave_0: left promiscuous mode [ 123.706183][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.717891][T10294] overlayfs: failed to clone upperpath [ 123.721068][T10294] overlayfs: failed to clone upperpath [ 123.721744][T10303] bridge_slave_1: left allmulticast mode [ 123.726744][T10303] bridge_slave_1: left promiscuous mode [ 123.729017][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.729870][T10294] overlayfs: failed to clone upperpath [ 123.734960][T10294] overlayfs: failed to clone upperpath [ 123.738021][T10294] overlayfs: failed to clone upperpath [ 123.740784][T10303] bond0: (slave bond_slave_0): Releasing backup interface [ 123.743692][T10294] overlayfs: failed to clone upperpath [ 123.746187][T10294] overlayfs: failed to clone upperpath [ 123.748228][T10303] bond0: (slave bond_slave_1): Releasing backup interface [ 123.748516][T10294] overlayfs: failed to clone upperpath [ 123.753585][T10294] overlayfs: failed to clone upperpath [ 123.757712][T10294] overlayfs: failed to clone upperpath [ 123.758768][T10303] team0: Port device team_slave_0 removed [ 123.762731][T10294] overlayfs: failed to clone upperpath [ 123.766351][T10303] team0: Port device team_slave_1 removed [ 123.768891][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.771898][T10303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.775261][T10303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.775543][T10294] overlayfs: failed to clone upperpath [ 123.777893][T10303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.786887][T10294] overlayfs: failed to clone upperpath [ 123.788808][T10303] team0: Port device vlan0 removed [ 123.789809][T10294] overlayfs: failed to clone upperpath [ 123.794121][T10303] bond0: (slave a): Releasing backup interface [ 123.794452][T10294] overlayfs: failed to clone upperpath [ 123.799364][T10294] overlayfs: failed to clone upperpath [ 123.805417][T10303] bond1: (slave geneve3): Releasing active interface [ 123.807651][T10303] geneve3: left promiscuous mode [ 123.812857][T10303] bond2: (slave ip6gretap1): Removing an active aggregator [ 123.815445][T10303] bond2: (slave ip6gretap1): Releasing backup interface [ 123.939038][T10335] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.987179][T10347] program syz.6.1321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.162345][T10366] veth1_to_bridge: entered promiscuous mode [ 124.165804][T10366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.403315][T10339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.405792][T10339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.408299][T10339] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.412216][T10339] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.416428][T10339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.419058][T10339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.423525][T10339] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.427638][T10339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.429925][T10339] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.434899][T10339] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 124.439488][T10339] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 124.443818][T10339] CPU: 1 UID: 0 PID: 10339 Comm: syz.1.1319 Not tainted syzkaller #0 PREEMPT(full) [ 124.446714][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.447689][T10339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.447700][T10339] RIP: 0010:klist_put+0x4d/0x1b0 [ 124.447735][T10339] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 124.447747][T10339] RSP: 0018:ffffc90004e6f310 EFLAGS: 00010202 [ 124.447758][T10339] RAX: dffffc0000000000 RBX: ffff8880542da460 RCX: ffffc90005869000 [ 124.447766][T10339] RDX: 000000000000000b RSI: ffffffff8b890035 RDI: 0000000000000058 [ 124.470900][T10339] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c67c [ 124.474209][T10339] R10: ffffffff908e33e3 R11: 0000000000000001 R12: 0000000000000000 [ 124.477425][T10339] R13: 0000000000000001 R14: 1ffff920009cde6a R15: ffffffff908e33a0 [ 124.480484][T10339] FS: 00007f9c452d96c0(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 124.484050][T10339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.486857][T10339] CR2: 00007f9c44411e19 CR3: 000000006155c000 CR4: 0000000000352ef0 [ 124.489518][T10339] DR0: 0000000100000000 DR1: 0000000000001000 DR2: 0000000000000009 [ 124.492701][T10339] DR3: 0000000000000800 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.495219][T10339] Call Trace: [ 124.496352][T10339] [ 124.497308][T10339] klist_remove+0x13f/0x2e0 [ 124.498766][T10339] ? kobject_move+0x15d/0x260 [ 124.500284][T10339] ? __pfx_klist_remove+0x10/0x10 [ 124.501932][T10339] ? __pfx_kobject_move+0x10/0x10 [ 124.503521][T10339] ? get_device_parent+0x1ed/0x4e0 [ 124.505146][T10339] device_move+0x12d/0x10d0 [ 124.506618][T10339] hci_conn_del_sysfs+0x81/0x180 [ 124.508196][T10339] hci_conn_del+0x566/0xdc0 [ 124.509677][T10339] hci_abort_conn_sync+0x76a/0xb20 [ 124.511610][T10339] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 124.513932][T10339] ? rcu_is_watching+0x12/0xc0 [ 124.516011][T10339] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 124.518794][T10339] ? rcu_is_watching+0x12/0xc0 [ 124.520820][T10339] ? lock_release+0x201/0x2f0 [ 124.522804][T10339] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 124.525558][T10339] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 124.528240][T10339] hci_suspend_sync+0x7ba/0xaa0 [ 124.530310][T10339] ? __pfx_enable_work+0x10/0x10 [ 124.532386][T10339] ? __pfx_hci_suspend_sync+0x10/0x10 [ 124.534675][T10339] hci_suspend_dev+0x308/0x500 [ 124.536634][T10339] ? __pfx_hci_suspend_dev+0x10/0x10 [ 124.538317][T10339] ? rcu_barrier+0x341/0x6e0 [ 124.539765][T10339] ? kobject_get+0xbb/0x150 [ 124.541389][T10339] hci_suspend_notifier+0x28d/0x2f0 [ 124.543332][T10339] notifier_call_chain+0xb9/0x410 [ 124.544862][T10339] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 124.546748][T10339] blocking_notifier_call_chain_robust+0xc8/0x160 [ 124.548719][T10339] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 124.551194][T10339] pm_notifier_call_chain_robust+0x27/0x60 [ 124.553236][T10339] snapshot_open+0x189/0x2b0 [ 124.554739][T10339] ? __pfx_snapshot_open+0x10/0x10 [ 124.556388][T10339] misc_open+0x35a/0x420 [ 124.557724][T10339] ? __pfx_misc_open+0x10/0x10 [ 124.559224][T10339] chrdev_open+0x231/0x6a0 [ 124.560663][T10339] ? __pfx_chrdev_open+0x10/0x10 [ 124.562230][T10339] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 124.564229][T10339] do_dentry_open+0x982/0x1530 [ 124.565781][T10339] ? __pfx_chrdev_open+0x10/0x10 [ 124.567347][T10339] vfs_open+0x82/0x3f0 [ 124.568660][T10339] path_openat+0x1de4/0x2cb0 [ 124.570129][T10339] ? __pfx_path_openat+0x10/0x10 [ 124.572077][T10339] do_filp_open+0x20b/0x470 [ 124.574011][T10339] ? __pfx_do_filp_open+0x10/0x10 [ 124.576212][T10339] ? alloc_fd+0x471/0x7d0 [ 124.578060][T10339] do_sys_openat2+0x11b/0x1d0 [ 124.580048][T10339] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.582220][T10339] __x64_sys_openat+0x174/0x210 [ 124.584293][T10339] ? __pfx___x64_sys_openat+0x10/0x10 [ 124.586546][T10339] do_syscall_64+0xcd/0x4c0 [ 124.588455][T10339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.590327][T10339] RIP: 0033:0x7f9c4438ebe9 [ 124.591764][T10339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.597787][T10339] RSP: 002b:00007f9c452d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.600314][T10339] RAX: ffffffffffffffda RBX: 00007f9c445b5fa0 RCX: 00007f9c4438ebe9 [ 124.602744][T10339] RDX: 0000000000007e00 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 124.605158][T10339] RBP: 00007f9c44411e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.607652][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.610097][T10339] R13: 00007f9c445b6038 R14: 00007f9c445b5fa0 R15: 00007ffff687d458 [ 124.612590][T10339] [ 124.613611][T10339] Modules linked in: [ 124.615807][T10339] ---[ end trace 0000000000000000 ]--- [ 124.618500][T10339] RIP: 0010:klist_put+0x4d/0x1b0 [ 124.619959][T10339] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 124.626440][T10339] RSP: 0018:ffffc90004e6f310 EFLAGS: 00010202 [ 124.628790][T10339] RAX: dffffc0000000000 RBX: ffff8880542da460 RCX: ffffc90005869000 [ 124.631654][T10339] RDX: 000000000000000b RSI: ffffffff8b890035 RDI: 0000000000000058 [ 124.634470][T10339] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c67c [ 124.637530][T10339] R10: ffffffff908e33e3 R11: 0000000000000001 R12: 0000000000000000 [ 124.640064][T10339] R13: 0000000000000001 R14: 1ffff920009cde6a R15: ffffffff908e33a0 [ 124.643108][T10339] FS: 00007f9c452d96c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 124.646771][T10339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.649143][T10339] CR2: 0000000000000008 CR3: 000000006155c000 CR4: 0000000000352ef0 [ 124.652128][T10339] Kernel panic - not syncing: Fatal exception [ 124.655550][T10339] Kernel Offset: disabled [ 124.656955][T10339] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:42:40 Registers: info registers vcpu 0 CPU#0 RAX=ffffed100d487470 RBX=ffffed100d487471 RCX=ffffffff818f66b2 RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88806a43a384 RBP=ffffed100d487470 RSP=ffffffff8e207dd0 R8 =0000000000000001 R9 =ffffed100d487470 R10=ffff88806a43a387 R11=0000000000000000 R12=0000000000000000 R13=ffffffff93d7e300 R14=ffffffff8df5de60 R15=0000000000013c70 RIP=ffffffff8221e166 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000008 CR3=000000004ddaf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbca7f840 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbca7f9c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbca7f9c6 00007ffdbca7f9cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85643880 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90004e6ecb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3621c56 R15=dffffc0000000000 RIP=ffffffff856438a7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9c452d96c0 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9c44411e19 CR3=000000006155c000 CR4=00352ef0 DR0=0000000100000000 DR1=0000000000001000 DR2=0000000000000009 DR3=0000000000000800 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200000000000000 0000000000000120 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff687d966 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff687d966 00007ffff687d96c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c44412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c44412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c44412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c44412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c44412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c44412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c445874a8 00007f9c445874a0 00007f9c44587498 00007f9c44587470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c450ed100 00007f9c44587460 00007f9c44580004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9c445874b8 00007f9c445874b0 00007f9c445874a8 00007f9c445874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000bcd7c RBX=0000000000000002 RCX=ffffffff8b939c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162800 RDI=ffffffff81913321 RBP=ffffed1003c54910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801e2a4880 R14=ffffffff90ab4090 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000008 CR3=0000000031ece000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006567646972625f 6f745f3168746576 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbca7f9c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdbca7f9c6 00007ffdbca7f9cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267d874a8 00007f0267d874a0 00007f0267d87498 00007f0267d87470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02688ed100 00007f0267d87460 00007f0267d80004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0267d874b8 00007f0267d874b0 00007f0267d874a8 00007f0267d874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 967e316347d60fb3 d69e66c9b02a51dd 57fbbc1326029ac8 b567a6d303e38231 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bc2c5fceb7f51cd 75c26c58c068c73b 279397273ceb6080 fcf6e05266b0656d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 168d4c67c8c2e95b eedd9778572a453a a51ade77c8b086dc 31ca944260bd32b6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66f30b78e96bb614 18d27147f40ee274 f2bcace600000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a541ec0 RCX=ffffffff81af8c61 RDX=ffff888027dc4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000479f670 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000012 R12=dffffc0000000000 R13=ffffed100d4a83d9 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81bb8b02 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0267c11e19 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000048000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ef4e5069b64f0f8 c82973dea06e69f9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cf882da4cff636c 7b7d5170f81938f8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f85e13dffa5b61df 41bdd5b9049677d2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d732f63c96092125 3221a52d27ebe1e2 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7579e86f4cf0622b dc90b5dc9c2626ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 42ed7b5499d9f335 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c598113d27072b38 d7b616aa4ba9f386 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c89660800000000 ea30692b6c474b28 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e6e23f667eb4e057 cc3439bea5577404 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9acd4cd003f1129f ac15d2479ee9a342 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000