last executing test programs: 1m6.4713583s ago: executing program 0 (id=21): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}}) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000040), 0x183901, 0x0) pwrite64(r1, &(0x7f0000000000)="a5", 0x1, 0x2) 1m6.466509118s ago: executing program 0 (id=22): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) 1m6.281190608s ago: executing program 0 (id=23): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000003c0)={0x9, 0x7fff, {0x0}, {0xee00}, 0x7f, 0xda79}) r2 = syz_open_procfs(r1, &(0x7f0000000500)='clear_refs\x00') r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0xa3) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x5a, &(0x7f0000000480)={0x0, 0x92}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000804) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000026c0)={0x0, 0xd, 0x1, [0x81, 0x1ff, 0xecd9, 0x6, 0x9], [0xffffffff, 0x1, 0x2, 0x1, 0x2, 0x2, 0x8000000000000003, 0x7fffffffffffffff, 0x10041, 0x8, 0x627, 0x6, 0xfffffffffffffff1, 0x1000, 0x9, 0x1, 0x3be3, 0x4000006, 0xd, 0xda, 0x864, 0x3, 0x3, 0xfffffffffffffff7, 0x794a96a4, 0x5ce, 0x2, 0x7ca1, 0xf9e, 0x0, 0xfffffffffffffffe, 0x9, 0x3, 0xffffffffffffff79, 0x1, 0x3b, 0x1000, 0x8, 0x0, 0x8, 0x8, 0x4, 0x80000001, 0x200, 0x9, 0x101, 0x1, 0x7, 0x3, 0xf, 0x5, 0x5, 0x4, 0x40, 0x2, 0x10000, 0x7, 0x8e4, 0x80000001, 0x9, 0xb, 0xad48, 0x6, 0x9, 0x9, 0xff, 0x5, 0x6899e33f, 0x4, 0x100000000, 0x4, 0x7, 0xfffffffffffffffc, 0x100000000f, 0x9, 0x7, 0x0, 0x7fffffffffffffff, 0x1, 0x5, 0x80000001, 0x6, 0x1, 0xcf4, 0x9, 0x1, 0xc664, 0x4a6, 0x9, 0x3, 0x150, 0x9109, 0xeed4, 0x3, 0x5, 0x8000000000002, 0x4, 0x7c, 0x9, 0x844, 0xbc, 0xe09, 0x8, 0xb, 0x6, 0x2, 0x9a, 0xfffffffffffefffc, 0x8, 0x5, 0x7, 0xba, 0x5, 0x3, 0x11, 0x2, 0x80, 0x1, 0x7, 0x4, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002c40)={r9, "835f84b7abc9f633cc5b40cdb38059eb"}) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000002) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000f08000240000000000800044000000000080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r12 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$EXT4_IOC_SETFSUUID(r12, 0x4008662c, &(0x7f00000002c0)={0x0, 0x0, "9a0f2e298956bdb3e7b876ccdcd92f40"}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) sendto$packet(r4, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noac']) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_io_uring_setup(0x10024fe, &(0x7f0000000340)={0x0, 0x1a7b, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000200)) ppoll(&(0x7f0000000080)=[{r13, 0x4000}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x80000000]}, 0x8) 1m6.211229847s ago: executing program 0 (id=24): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = fanotify_init(0xf00, 0x2) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x61) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x8, r3, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) setpgid(r3, r4) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x805}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) (async) fanotify_init(0xf00, 0x2) (async) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) (async) mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x61) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x24, 0x8, r3, 0x1, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) (async) setpgid(r3, r4) (async) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x805}, 0xe) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) (async) 1m6.121149479s ago: executing program 0 (id=25): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x1, 0x54) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@fallback=r1, r1, 0x2f}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002042, 0x0) 1m4.824782566s ago: executing program 0 (id=49): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@fwd={0x9}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0xa}, @enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0x10, 0x8}, {0x4, 0xc}, {0xb, 0x9}, {0x7, 0x7}, {0x7, 0x101}, {0x4, 0xfffff60a}]}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/113, 0x9d, 0x71, 0x0, 0xd, 0x10000}, 0x28) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x500, 0x1c0, 0x0, 0x148, 0x1c0, 0x148, 0x468, 0x240, 0x240, 0x468, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x8}], 0x2, 0x2}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYBLOB="01060000000000000000090000002c00048bfd3c801300010062726f6164636173742d6c696e6b0000140007800800060000000000"], 0xac}}, 0x0) 1m4.77253229s ago: executing program 32 (id=49): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@fwd={0x9}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0xa}, @enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0x10, 0x8}, {0x4, 0xc}, {0xb, 0x9}, {0x7, 0x7}, {0x7, 0x101}, {0x4, 0xfffff60a}]}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/113, 0x9d, 0x71, 0x0, 0xd, 0x10000}, 0x28) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x500, 0x1c0, 0x0, 0x148, 0x1c0, 0x148, 0x468, 0x240, 0x240, 0x468, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x8}], 0x2, 0x2}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x2a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'veth0_virt_wifi\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYBLOB="01060000000000000000090000002c00048bfd3c801300010062726f6164636173742d6c696e6b0000140007800800060000000000"], 0xac}}, 0x0) 47.254629898s ago: executing program 1 (id=299): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) (async, rerun: 32) r1 = getpid() (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r0, 0x0, 0x70, &(0x7f0000000000)='/proc/s\xa4s/\xff\xff\x00l=c_\xa2\x96\x17@\x8c\x00\xd1lC\x00\x00\x00\x00\x00\x00\xdb\x05x\xc0\x92\x10\xd7t\xeb\b\x00\x00\x00\x00\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 47.236352087s ago: executing program 1 (id=300): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000740)=""/96, 0x60, 0x0, 0x1, 0x2}}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000a80)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000f00)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) (async) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000740)=""/96, 0x60, 0x0, 0x1, 0x2}}, 0x48) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000a80)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) (async) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000f00)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) (async) 47.050330174s ago: executing program 1 (id=301): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x5}, @TCA_MPLS_PROTO={0x0, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r11, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r9, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r12 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r12, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r12, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0xffe7, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000a400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 46.779987911s ago: executing program 1 (id=305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) r1 = socket$tipc(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f01000018000000000000000c0000000c00000004000000020000000000000c0200000000005f00"], 0x0, 0x28, 0x0, 0x0, 0x6}, 0x28) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x276}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mlock(&(0x7f000019e000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)="f9") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="3aae", 0x2}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x24044040) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002580)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRES16=r2, @ANYRES8=r4, @ANYRES16=r1, @ANYRES64=r2], 0x0, 0x27, 0x0, 0x1, 0x80}, 0x28) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) 46.521115785s ago: executing program 1 (id=311): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "d0c09ca8c9a044d18c1f59d1ed624a358f39cfc467329fec437c907e0ca7779ca8c0c2d26abf36f064770a70a88130dfa112562f1ad75b59c390ca9d280872fb", 0x40}, 0x48, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r3 = getuid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000180)='./file1\x00', r5, r6) setreuid(r3, r5) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="2fae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x24044040) 46.011081747s ago: executing program 1 (id=322): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000480)=@multiplanar_fd={0x4, 0x1, 0x4, 0x100004, 0x10000, {}, {0x4, 0x0, 0x52, 0x3, 0x6, 0xb, "e145c0f3"}, 0x5, 0x4, {0x0}, 0x5}) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='overlay\x00', 0x204001, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x2100, 0x114) 45.9448508s ago: executing program 33 (id=322): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000480)=@multiplanar_fd={0x4, 0x1, 0x4, 0x100004, 0x10000, {}, {0x4, 0x0, 0x52, 0x3, 0x6, 0xb, "e145c0f3"}, 0x5, 0x4, {0x0}, 0x5}) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='overlay\x00', 0x204001, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x2100, 0x114) 1.900879937s ago: executing program 5 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xa8, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x88, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0xff, 0x1}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x5, 0x0, {0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x4}}, @dsss={0x3, 0x1, 0xd4}, @gcr_ga={0xbd, 0x6, @device_b}, @fast_bss_trans={0x37, 0x52, {0x2, 0x0, "99b8dd4b3442e9450a997bb5b3cad534", "4d3b37630c4af32216223e8cb49217f28f87da907d15999b2807f59f67f2701e", "8c7986619c0effb27cdb2536aa151f9aab5118780d3f1d0f91d0450dccff1ed7"}}]}]}, 0xa8}}, 0x1) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @vbi={0x3e, 0x8, 0x9, 0x0, [0x7180, 0x81], [0x8, 0x58], 0x2}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000004206010800e6ffffffffffff0200000005000100070000000500010006000000050005000a0031000000000900020073797a300000000014000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xa8, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0x88, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2, 0xff, 0x1}}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x5, 0x0, {0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x4}}, @dsss={0x3, 0x1, 0xd4}, @gcr_ga={0xbd, 0x6, @device_b}, @fast_bss_trans={0x37, 0x52, {0x2, 0x0, "99b8dd4b3442e9450a997bb5b3cad534", "4d3b37630c4af32216223e8cb49217f28f87da907d15999b2807f59f67f2701e", "8c7986619c0effb27cdb2536aa151f9aab5118780d3f1d0f91d0450dccff1ed7"}}]}]}, 0xa8}}, 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @vbi={0x3e, 0x8, 0x9, 0x0, [0x7180, 0x81], [0x8, 0x58], 0x2}}) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000004206010800e6ffffffffffff0200000005000100070000000500010006000000050005000a0031000000000900020073797a300000000014000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) (async) 1.840375323s ago: executing program 2 (id=631): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffffc, 0x60, 0x0, 0x0, 0xc, 0x1, 0x0, 0x5, 0x5f8480, 0x0}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) (async) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) (async) syz_open_dev$usbfs(&(0x7f0000000200), 0x200, 0xa401) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffffc, 0x60, 0x0, 0x0, 0xc, 0x1, 0x0, 0x5, 0x5f8480, 0x0}) (async) 1.839899252s ago: executing program 5 (id=632): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) accept4(r2, 0x0, 0x0, 0x800) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r5}, 0x18) (async) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r5}) listen(r3, 0x1) (async) r6 = syz_io_uring_setup(0x3a, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x40000000, 0xc9}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) (async) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) (async) r9 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000000003118010040"]) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaae84c399054e32e417f1daaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000008000000000000000000000000000aa4e204e2100489078030000000200000088c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70e13808ca72381f41e5fff9080915b6f78670dfaf9a2038083179cf6b7931c9b400000000"], 0x0) 1.760740014s ago: executing program 5 (id=635): r0 = timerfd_create(0x1, 0x800) r1 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x52, 0x0, &(0x7f00000002c0)) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, 0x0) 1.760262097s ago: executing program 2 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000140)={0xd60}, 0x4) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000300)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.629283778s ago: executing program 5 (id=638): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="00989306", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25050000001800018014000200776c616e3100000000000000000000000500070006000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) r3 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r4 = getpid() r5 = getpgrp(0x0) tgkill(r4, r5, 0x34) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000000003108010040"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x98a, 0x1, "c2"}, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getaddr={0x20, 0x16, 0x200, 0x70bd28, 0x25dfdbff, {0x2, 0x40, 0x21, 0xfe, r10}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}}, 0x4000000) sendto$inet6(r8, &(0x7f0000000040)="e8", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0xd, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x1c}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000000)=0x7f, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1.477819411s ago: executing program 2 (id=642): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000000], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) 1.423329762s ago: executing program 2 (id=645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101502, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x1, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000480)=[@cpuid={0x14, 0x18, {0x4, 0x6}}, @rdmsr={0x32, 0x18, {0x953}}, @rdmsr={0x32, 0x18, {0xa38}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @uexit={0x0, 0x18, 0x8000000000000001}, @in_dx={0x82, 0x20, {0x5281, 0x5}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @uexit={0x0, 0x18, 0x2}, @wr_drn={0x6e, 0x20, {0x5, 0xf}}, @wrmsr={0x1e, 0x20, {0xa84d19916b12576e, 0xc080}}, @wr_drn={0x6e, 0x20, {0x3, 0x40}}, @in_dx={0x82, 0x20, {0x5c63, 0x2}}, @wr_crn={0x46, 0x20}, @cpuid={0x14, 0x18, {0xc0, 0x5}}, @in_dx={0x82, 0x20, {0xce04, 0x2}}, @wr_drn={0x6e, 0x20, {0x3, 0x100}}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @wr_crn={0x46, 0x20, {0x555fd3a67f1ddfe5, 0xfff}}, @wr_drn={0x6e, 0x20, {0x1, 0xd21}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @wrmsr={0x1e, 0x20, {0x641, 0x4}}, @code={0xa, 0x49, {"c401a9e05d000fc72d89c090ac45b2000fc7280f0766baf80cb812594f8fef66bafc0c66edc4c2d5076b2a420f011a0f01c236440f782478"}}], 0x2b9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="66b98d0400000f322280818ee067660f350f01d166b9940a000066b80048000066ba000000000f3066b8640000000f23c00f21f8663503000a000f23f866b9040100c00f320f5429660f73fc95670f234f", 0x51}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.360926589s ago: executing program 5 (id=647): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b00000003000000000000000000000006000000000000000a0000eb"], 0x2b) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 1.231122248s ago: executing program 2 (id=649): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x5, 0x2, 0x8, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3089737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770300000000000000930606f9000000000f000000000600", [0x0, 0x80000000]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889eea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff91597923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e854633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df00", 0x1000}}, 0x1006) 1.230867446s ago: executing program 5 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7b15}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9330}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0xc5}, 0x60008) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905841047316c33787c82b9f2d81826efe612fc3181192aed076c970aebbb68e98d2fb1de980e79fe8cf34781695025f76eb3a701c699627d55593e5fb0c15df0299cca22c8bd1372e9dc7047990fe702e3b95f7bab2c3fc9f50e433a7bd244769d14f9f189c4b11e78a1f8798d2db780306c006e15900e8da2ae43bd96f8c8d8496dc94c95f08148c5a63f38555042aa155acef69ce17850446d57ebd7f8cc9518b101469df20dc78830bef94c471e868afb4b81d664f7a69585ace5ced1671122e5fccb263588632c3d5a650658e58ebd650516994bb3586d75a5ac5f799d8d98407fe6c23020cc46f988de198536117405119975589b4539f06e425ba01c47c0d5ef1be84ef6ee5c66c5aae26b07196275b36695fee5f94b419281b3fa8a9a7326a1fba6c300e8f763aec66f8f"], 0x0) syz_usb_disconnect(r2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x6, 0xc200, 0x41, &(0x7f0000000080)="c207f37536eb5d2c8b7c7e0e3d728761285bdb539d9a8aede70c749fe20948acb2dae3b4034c18e1cfba3c8128c7282309994b3f01a6e0606fb7613dd15602cf1d"}], 0x1}) ioctl$I2C_RDWR(r4, 0x707, 0x0) 1.147785368s ago: executing program 2 (id=652): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x4, 0x0, 0xfffffffb, 0x2bb81c33, 0x9, "f1ac26c888520606a282e84c65613116048eee"}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x53, 0x8, 0xe, 0x4, 0x14, "4ffb96da674e0e0e"}) r1 = syz_open_pts(r0, 0x10f002) fgetxattr(r1, &(0x7f0000000080)=@random={'btrfs.', '+\x00'}, &(0x7f00000000c0)=""/210, 0xd2) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000001c0)) close_range(r0, r1, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000240)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x8, 0x7f, 0x6, 0x0, 0x3, 0x8000, 0x1b5, 0x40, 0x169, 0x2, 0x401, 0x38, 0x3, 0x92bb, 0x100, 0x7}, [{0x70000000, 0xef, 0x6bee5179, 0x80000001, 0x0, 0xac2, 0x375c, 0x7d40}, {0x5, 0x1, 0x7, 0x10001, 0x0, 0xca, 0x5, 0x3ff}, {0x5, 0xedfd, 0x4, 0x4, 0x7, 0x6, 0x6e7, 0x3}], "d43c1291486f060cffd3602da493cf258c46d89bb99ca2e1d449fef30dbef89e014112ea061ab9986e2bbac66448dcbfde802bfc614c7219b0d39ad885aab148998abeedc18f85695e1cd8bdb6c016a231666991916eb8bd59a7c9c6bb7b16ec6a46f1b698ae36af72118955655eee53c048bdc74f81a3b8b6c4910835305b7ca5c1086b276594467700831b8eb5e2358db07d341e97a91384b4b847e58164a8820cbd56beb224722039cb348317f3f24cec4d553b58d8a5d34141b4ab262c79b6748602b21ef43577af15fae7c1778318d41927fb3b1813ac5635e829d65726ffc1818296bad379c78415146c9fc4327a22bc3de35a778e03fc5ab8e303532d43e35ef16cf48ae869f62b8e8404493af6d89acbbdb467560796aec87bb2a27cdbb6444003e5c015d81528ebb70a7c65ec4fc3d907f114d3e8e8444419999b79af2dc5567f331fbff86ba00d9ebf43d3c9e6fee6b12f6b3416427ee0c4ba948eeef1eb117b03599ee96355ce8489c0d48ec7455d5adb0d7d47e258fe9d3357b3e34f5379746c7024a74a7b6ac6fe475d42e7d6641e5c5292156f1f8c117fb56f5467b8923c767ed93a2a9799587bb377783c9472b7c5fe5e87b8422de9507a10a5bb2b68b917603880e4bacd254f56a4b4dfa162d3faeab3c0949a225034b2ed9b8ef11de11baeb1ba01567b156a4d6b94d5b9912c3ea81ea97aa6550d4359dcfaed76480fc3b459f7deb87119df6268936a1beb0b2fbebc494787b8046c1d1fcfdafe378cc8ccccdfc9f7fbcd9bacc17b760099b34a96409dfeb70d1e25507f5c4fff3e3957d349bc73880e16ded65a1bf7938856705255b0d21a44dc56b41810dc784655b83b6a087670237393e020d4c68ca5ad1de42ee8e757628d7d27c115a1b14b7814747ba801a8bd4779f335340f4cb5c5e78520f8412200157747e1e801d498f3a4c6b1aeed2dd64d2821e6d5bdf84900f534d88103f153146f671dbe69f22c21ee75706f100ea78bd8a33b5863827be95cd016fd12ecf0fe80ccfc65bd4ac9c7684162b443af28d7336a409e18c210b48b2e326673493bfd7912cf78522b784350b0c85875af296c0136a5c94742b1a0e769889a39936397465818dc196cce090065356c5f426f7a7bef36f3e901f972a4dc782314b221d125c2ac83fdf8965387c35ec5b31223ade358cba2188de298b1e6d645162c6b116a0b1a3d79e8ff7ce158bc4cdb619e482590aaf0aaa736fabd0e4300b63febd61510bcd61906908a6d33bc4310d30e6c09e21311d97bb93d8de85d64ed46c256e2f2a263f966cbe9e4a67d8c984ec1c0594b11c7e6e786c75ed8dcf42dcef190e1b60fd8c1ce734d5a941d3cd6d275dcd443f6e503c74d082e6bbd53c80eabdae38c878bacddf7e759807760787db2ef46de0ee33c2169261afa56d2d4d0c1a78da2bea757aaff863365695dfe0ca1b6b0f18a0c0cc5e23d41af38819aa3987ae611dc60f5b0fbc90120e96c5507b8b3eeea0df77e7b40c9f4b425c9068192a42c698bc5e506e3142156967a7990c78b1e9057813d8e25d4fca56dd96b08206707c052b818619da64d0adeb5fd87454b74d29f845964f42f3a9da203d493650a66456084eee133fec689ee0df8b10d8782d78c32d6b3badb21aed0bbfa1df134bd883e631017b51111d6a4d0edfb5da02d3c0e99f682bc3c3c3a574fa6dc2a1874715bed402c3d3e03c9e0536450418571028bd564667b9131887c05933960f203965997974f3f617daa14bffc855625ce19c097d762a2de6d7a78b98379922a3627c60fb8d5150deccba944ffaa1ee9c973777c9fa0abf5bb0ce66d4e5120111eceaff4ff38e6d1b3b21f488f422f711e226a40e370995799181efc584506397fea50ca424843a80a576869792e58c50f6d07a488f5bb6e4353bd09c3b48d419dee09a9adb5d17685c4fee3889575219eac8999fbca02840fd5a51749601f8ca38dafb8f1286ef494700a0246430ee0fa9c394986e854d8db3fac02c01983324a2f5a892b6d06419f807384ce1ecbd58c892b57f0f3b066f7e81bbafc590dc8ac477a8881f6ff9e94f88632b1442550a81f6206947627fb4c47ca97924f2757952ed8a4dcf5f1e9c4eecb8cd8a2a66ad517a83313508dcd49da0f0205bedb3818707cbafda34c8785eb0711084439eb7547efadf73e9d73e6c9c0d712f03bffa0d94b394a13ed0689d948bd40c42df55514b3b3bc4c41153d7005e8573b1d12fda6ad161ddb58f3d8117896790b354c178ece8debac6f5da361293c3a3bd6e568cd145f4f877cefd3acb1bb16656b3e3228fb156e90f31226bd46988621105c337a0d7e49f79403a5f941fa1e02140e77b0852e3431f263a8b9391083d8e83a4a86611e506afc752f72ba269388a5a2c3a1b09717504202e70d5adf8cee85d295de4144b88d9afd70d69d184242a4829b4bcbd4ec7525393b37fc5ac6164f8c9509a350e8c875ee843a54c2489fd7a92f2160af5797d1139895a9c6aacad763f3137ab94bc8619ea3edaafcfd635f08742609723cbadf88c2dd3badee335dae5dd1352fda357da03dc71c24275475ac012bafb09fc6a41f8e05dedcf7a0b7318cafac4a02fbaebec05130016dad60eb2bbe3e8479c0bac56e51cafc100b366b73de9d876300b95c294ca528e65825a059e04ab4fffb7c37fbba1aff0d3777890ce11dfa4e5461a6c44506d5dab5932e7e9dbbf1efe34f2d1bc3f59a40243b93f9c87ac77678dafcba1123b33fdc9ef7a7522be9140bd840c9ed7c7edb21c94391cc4a5e4de8c6c7c7e5f0e3740110237e1f783d0eba12aad315ede77962ce480f4a04bdfc5b6abaaa463a429ed4f64a29ce532a383ca1502d313d15dcccd121d989ab8c1c5ed871930c1a78e475a063ec1e6b6bacfb2e5987bea8a6550b2b0b50eeae8a693b587480480fecf1148305cdbfd7c9a50130c9e8075eaf744eac0bdbdad08ca690af690e5a92b77f9d0a8c4834e2bf9b90c8f898cf5435c049e6795ba8783b27c54840b17563d24149f7acb3628c95c600749f25e924b8182257c579a51994c7ed01061044785ac43b2ccc9ec094d9468f6a9e17ca2d5e11f7c790d52bb3d8cc47d7273f945a6fa675715321c8566673e5d57d5de34d5dee16c206c5bcb17a7190fbaced7aa992e3465ffc6c8ce1b8ee40fbed850e7d7704845e439e8c9dc234a2beb7a414100ce98e7045f8957839efefbf1373e456be1b860f41d08beda39435b1d1c2e758d19d826e95c28a21c2dc5e61bf7eeeeba6666a4735422e6223f947f89f2f24d7ebe8fa8dc6571cc39b008f7594ab7da3d60241a0190f7110c0921aefb5043dcaa74f4cf8db2c3c8a282377a348ffb8203c825601fda0c3ed2d88fc2f6ce642cc51991f525a9f641ab5f6064d0a1dec2251059ef8547de89266cb43a1b267420e4b0d8ecf59f02956b85a6c0d900bef216ffa7b6db87b4b0b97d5f54e2af047cb9b0c72e2f34f13af2d98860d457909916a7bdce1e432bf4fb9672d42feca030b34b513b61ce60f70b076eec8f667077ab6c95bd06bde89862f0d4fe7c0328be4582c97b3dce05a7d8ca583d0da7b9aaf50312521690e735defb1c9eb79249697959ab97eb693fb7501af6d767abe3e6533f267c5ff610de86eaba32629a46fd160a8778ec654ba6c71de0bf2cbb41d0c514db7429d115bd9c0f76a491fdae5c042abf98bcae8629b49fc336b1de74252a773216dd165d8c8a686fce83754193005b222baee1c0b2e9a28b655b62a8ee9215dc42ba2494eef84f04f7ace522dd8146589a4c51355b23767fc0d89bac5f1839ab999aa33c0b5fc490ad51bea9ea6a00c0507b5ec5d0ba6289eede7f9447d8ce4f2eb3e9bc84fd7f2e0c6bebadcdcd2b472889447be5515badccd67e8eebb24560cd930c100a3379e78f4d93adf623ef2f6276f2c7363ccbf77edfe8a60eaf550f4288907943249d47dab0f6fd50955c6a278433164dad1d58647495d71f486ab5dc043734476e692aa1964f467d1497a5263318b43c5d6afa690ab3722e6d6e506ba2d52f27da0139dc396e0c52af5dfbdfc3b328a94c8afb67dbd0331a3dbc8ba3a5b55d506307fad042d053f14f029e2b62f5b879aa405e8bb672640c0976ffa58fc1c7e2f27e1215685db0279d11bea8b82be0ceaf01366e3264cf603db5506a2b3362415445257b111c7846d40cf9395c6e6bde9d974ed52d4d30ada29f70d03a779da8b93a3570ad329c59617ab364d8aa2b67d45de3febe3abdd2ee270acc7067cd92421585b8e34a9f73ac8b22566ca5918b8fea3ab0800c95b4e5db95fafa2ba370a38c10ea2de4656fbf66732e8789cb7c2cbd0e2c2251900408432a787aa03811d41fe1785114d69a6a999627aa752e3f4ecd55ba1806c6f1e9aa44abe42ba1273d3259667c3371b7b136e99e39b87d07f2224e4773e3090155b1b01270baf8f7945929a30a2549bc73e954671cd57cad7b59df527c36c6b720657eee2173c43f646482c1160d6f7a0680efec0adb789ef0d33d4ed0ba2e753c7895e879cde98cce15b5c85be0c0c38aed4e1d08b16d16d1178bd759954192ce0613d65fa9eae646fd55d25a7ee04108d4bb1fb1fb3a874b44af80d356113e7f3dcd6d996d9923a6e95580e3e1183f2946b1572da5b2f118c1d65e548fa9b7bd5824bcf998b0f14020979c6f29e70fc5b62c0159c00c6dd32d6aff59b22c4e2e0e952718340ec8eb4ac96a17d02f6d2f5f6bb3bce695996d71dcc7f6e00098dfcb573923ca7f61b9365ca35db60cead1191ccbaeab51ddf324b1394f2242110cb079722eb30b91a54a0cff4e6143ae6dbfe9345586f89604fccd9e48d144821739c558ae411cdb16a60b65a1c2b3db5ec59bb206e5a021aa5ecd9d74983bccd866fc82b139f342903abf76aced0cddd32848699ba2773607b98d91989efb0e701690f3c25611c01ecbf7deb7ad8680955c3186dc18238536a5890c44be7ae9b8087a3ae189ee2d056d5a07ee837dbe503de675997a2c3834ed4787f5a34145f489a0ec9a8ff717363e3cf77accd67dc4a691712b55774e889ef5c4e9afd7999f46866688e768c59808ae0821f61b9db8e1736dd143abe326cf4977a4c5b30d843a1bec1b8a78d7bef33ac0028653bd140221b3dec5460f5bf3e6dcbfe37ae2b6670406f7521bf56a141edf1db48201878feef0fbfa2f285ea3662f40de655be1882853e48d98dcb5f6651eb31f7baf1bbd516fddcc806ba86c60137c68b4ad85a3717fdda80cdd63f3b549c0f64fecf3c1f5364b2e31e574de722369b5ee629f834ab914849a0b9f216c87b6e24b7ef7c48dbdc94f039d29fe2e74057e64a6f6144a52fa905787e9b966af19b438817a97e485065a28df0032ac3ac21d08ba26e616604382f6fa5deab59378c666cc333296b9adf7a6c83ec215968ccc5fa483e88ce12b064bce4bde614033c9e0d07e4a564851b36ea40a4799716e43249adb765f0ccb6a6742cc7c502d58bd04dc4445913981de7b81a985518f4fac4e011548cf1b5c8fb6962fe38045f6a6e34098e2786dd703bfff22d50368913a02b0001ca6f7350ab31a63181d7e0f603b94ab5d4be54a7a27065e82be5bfeb3a85b7a72e6852a4d3e39a1f50fbdd9794395b6926f101b2f85f002152d046c13175cad7d3423e956cfe72f71ddb094ad544c1278c790400d2aaf085cbfa568fb6452a8bd1d2bfee62a1a333563c046b949b37c81c64148aac1f1e6b756eb37458110e8772a95bf099cb91", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x16e8) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001980), 0x1, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000019c0)=0xf6e8) r4 = syz_usb_connect$uac1(0x3, 0xdd, &(0x7f0000001a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0xa, 0x0, 0xb1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x7, 0x24, 0x4, 0x6, 0x10, "6c9e"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x2, "1453fc9580"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0xb, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc8d2, 0x7, 0x6, "c8a2d88c1cfa1546"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf, 0xff, 0x4, {0x7, 0x25, 0x1, 0x82, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x2}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x1, 0x4, "1873"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x7, 0x7, "f2d385446acc6583"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x3, 0x2, 0x55, "", '@F'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x9, 0x80, "6285aef224f7"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x10, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc9, 0x5, 0x0, {0x7, 0x25, 0x1, 0x3, 0x16, 0xfffc}}}}}}}]}}, &(0x7f0000001c80)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x110, 0x7, 0x2, 0xd, 0x0, 0x3}, 0x23, &(0x7f0000001b40)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "4f1067c7daddec86694a4f4ec7528806"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe6, 0x3, 0xaf}]}, 0x4, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x3801}}, {0x7, &(0x7f0000001bc0)=@string={0x7, 0x3, "86343d97a2"}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0xc04}}]}) syz_usb_ep_read(r4, 0xcd, 0xd6, &(0x7f0000001d00)=""/214) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001e00)={0x81, 0x9, 0xb4, 0x1, 0x11, "14bdeb4ffc5dc2e9"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001f00)={'syztnl1\x00', &(0x7f0000001e80)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x8, 0x0, {{0x17, 0x4, 0x0, 0x4, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote, {[@rr={0x7, 0x27, 0x2a, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @empty, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x11}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "fa8361"}]}, @timestamp={0x44, 0x10, 0x6, 0x0, 0x5, [0x5, 0xf63, 0xfffffff8]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)=@newlink={0x30, 0x10, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x5000, 0x20010}, [@IFLA_TXQLEN={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9f95}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x20000840) r6 = inotify_init1(0x80000) inotify_rm_watch(r6, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000002100)={0x14, &(0x7f0000002000)={0x0, 0x11, 0x7d, {0x7d, 0x7, "cccc63f366447d3adb9b99c51fdc1dcbcf987f59aee49d738ca168bb487021a016ae0430cc6abdb15904514fdb754f985dea2c710be54ad8252ff978d54a53f95d53955c79be1f8d86dd15617af3a855000ea4f01c02093353e5fc4b3f7e4f93d5dc208124b9b3555e4199bc03b31a3f729cf6aeda55b79ffc9303"}}, &(0x7f00000020c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f00000022c0)={0x34, &(0x7f0000002140)={0xa0, 0x17, 0x4, "b96a25a4"}, &(0x7f0000002180)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000021c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002200)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000002240)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000002280)={0xc0, 0xa2, 0x2f, "e2c46cee719204073a51515ba98e7d0ee07c714fdebabb93b5c2a748251186dc3b67912e357050c174c6af9aad5a00"}}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000002340), r3) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002400)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002440)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002500)={'ip6_vti0\x00', &(0x7f0000002480)={'ip6gre0\x00', r5, 0x29, 0x3, 0x2, 0x1ff, 0x68, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x1ff, 0x314}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002bc0)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002540)={0x60c, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x230, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0x10, 0x3, 0x2}, {0x3, 0x7, 0xfd, 0x9}, {0x3, 0xc3, 0xc}, {0xd, 0xff, 0xd, 0x7ff}, {0x1, 0x3, 0x6, 0x4}, {0x2, 0x5, 0x6, 0x7fff}, {0x100, 0xfb, 0x9, 0x52ae4ff0}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x2, 0x0, 0x8001}, {0x4, 0xf4, 0x7, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff9, 0x93, 0x9, 0x5}, {0x63f, 0xed, 0xeb, 0x6}, {0x40, 0x4, 0xfc, 0x44e4}, {0x800, 0x4, 0xf}]}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8, 0x1, r5}, {0x1dc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3a800}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x60c}}, 0x20044005) socket$unix(0x1, 0x2, 0x0) 968.582744ms ago: executing program 4 (id=654): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/84, 0x54}, {&(0x7f00000000c0)=""/89, 0x59}], 0x4, 0xc, 0x9) 966.689237ms ago: executing program 4 (id=656): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000040)=0x8) r1 = signalfd4(r0, &(0x7f0000000080), 0x8, 0x80800) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x0, 0x5, 0xf43, 0x1, 0x0, 0xc, 0x0}) 908.966901ms ago: executing program 4 (id=658): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7fff, 0xad, &(0x7f0000000240)=""/173, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xd, 0x5, 0x26}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000000)='./cgroup\x00', r0, 0x4000, r1}, 0x18) 908.525105ms ago: executing program 4 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2480) ioctl$LOOP_SET_DIRECT_IO(r1, 0xc0401289, 0x6e) 630.306811ms ago: executing program 3 (id=662): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = gettid() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x4, 0x70bd25, 0x25dfdbfc, {0xd43dbfdc01aa0c53, 0x1, 0x2, r0, 0x9, 0x40, 0xfffffffc, 0xe49, 0x0, 0x2, 0x845}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, &(0x7f0000000500)) (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (rerun: 64) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) (async, rerun: 64) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000440)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1, 0x7fff, 0xa, 0x400, 0x5, 0x0, r2}) (async, rerun: 64) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)) chroot(&(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async, rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)={0x1, "60d72b"}, 0x6) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@access_any}, {@noxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x31, 0x30, 0x35, 0x35, 0x64, 0x38, 0x66], 0x2d, [0x64, 0x5a, 0x66, 0x64], 0x2d, [0x38, 0x33, 0x37, 0x19], 0x2d, [0x39, 0x39, 0x61, 0x36], 0x2d, [0x62, 0x30, 0x32, 0x33, 0x31, 0x35, 0x64, 0xe731a6e4408f0bf8]}}}, {@appraise}]}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 480.397125ms ago: executing program 3 (id=663): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,no\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 479.938889ms ago: executing program 3 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x34, r3, 0x801, 0x70bd2b, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1c5}]}, 0x34}}, 0x0) stat(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) creat(&(0x7f0000000240)='./file1\x00', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, &(0x7f0000000dc0)="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"/1452, 0x5ac, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) linkat(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1400) open(&(0x7f0000000180)='./file0\x00', 0x4f0602, 0x0) 260.494797ms ago: executing program 3 (id=665): unshare(0x6a040000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x7, 0x1, {{0x1, '*'}, 0x90d}}, 0xe) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x3444, 0x0, 0x7f}) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)) unshare(0x20020600) 168.121522ms ago: executing program 3 (id=666): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3, 0x0, 0x0, 0x18b}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000001c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r2, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x14, 0x2000, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0xffffffff, {0x0, 0x0, 0x7, 0x0, 0x0, 0x64001}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}]}}}]}, 0x50}}, 0x0) getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000f2000040"]) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 629.754µs ago: executing program 4 (id=667): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$sndseq(r0, &(0x7f0000000b40)=[{0x2, 0x9d, 0x0, 0x15, @time={0x8, 0x8}, {0xc2, 0xf9}, {0xb, 0xfb}, @time=@tick=0x8}, {0xc1, 0x2, 0x7, 0xfa, @time={0x0, 0x88b4}, {0x8, 0x7e}, {0x9, 0x9e}, @raw32={[0x6, 0x5, 0x5]}}, {0x0, 0x3, 0x0, 0x7f, @tick=0x2, {0x0, 0x7}, {0xd9, 0xd}, @ext={0x9f, &(0x7f0000000a40)="b750c759f032e27f661465dff001bb469f7a46b634e4fcfda82753e7daab3a2dd41387e979999b0c0eba5362142af7fc6fba74f03d2fad04980cf93232567ab3974005812a6844e410d98b3c34cbe354203dbe45df91af8ca26f367e784ce8283499cbd01cf0fb38a15468128e5bef2e53c8fa1b8c840629175548114c40c407a8107b25ce59367eded400e7dbe31cf8644fe78a22911d92778241f05d4bbc"}}, {0x2, 0x5, 0x3, 0x2, @tick=0xe, {0x6, 0x58}, {0x8, 0x1}, @ext={0x3, &(0x7f0000000b00)='CF-'}}], 0x70) r1 = socket$igmp(0x2, 0x3, 0x2) readv(r0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)=""/169, 0xa9}, {&(0x7f0000000c80)=""/97, 0x61}, {&(0x7f0000000d00)=""/183, 0xb7}], 0x3) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) write$sndseq(r0, &(0x7f0000000700)=[{0xe, 0x9, 0x2, 0x4, @tick=0x85d, {0xe0, 0x52}, {0x1, 0x2}, @queue={0x1, {0x3, 0xfd}}}, {0xe, 0x80, 0xa2, 0xbf, @time={0xfffffffd, 0x9}, {0x4, 0x3}, {0x4, 0x3}, @queue={0x0, {0xfffffff7, 0x5}}}], 0x38) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'gre0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="3563ea97026317ae3fc546a114deab520f90d6679c90e19361a6b1e7781eea8997925613b5571d0e13e9db6016717e0d0437e6741c1eeeec30b85016f5329769", 0x40}, {&(0x7f0000000180)="4514eb0758d10ab10cb9da301c1313fd5aa59ab9e50eb723a02793d38aa7dc877c6dbff9", 0x24}, {&(0x7f00000001c0)="e4291f2afe8891e7b2ff6cbbefb9a2d20d4194249f97b3c2fbb493d840528f20f02fd12f115cd706c12b880fd3ac0dc3d6bbb5d67202d40593dc695aec7970250538dc8d9d2719d92e71dce07ab0af398e31dc0839f42e059378805de4d4b70474bd273d783c683cc0c54773a050a8f40ae80f", 0x73}, {&(0x7f0000000240)="f8b88fb2bd2b39921beaafc84423dcd54bf176ca027f6839c958", 0x1a}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000280)="bd4e43ff062f98bc0ac3f03d5775131bc4e65390fc386321fcc3b0431577fdbed5b329a8fc0c7b8bd33cdb921e330d45d7af277130f2e6", 0x37}, {&(0x7f00000002c0)="9532afa356b27d8d7bc00b834c1bf6e4c1ff8d27cce8a8074987067d6c0eb5e4aa8b5ca9edf7409f5837b40178898dd9b544c95d94d186f23efb6f19800b4397be0fe58b292b57ff0e0aea0f743aa8a82d73235a7a636f640b6ee1ba6ac4735eca5969cebbaae0fe731fa365ac8965cf0d79005a6ac15a16e1c6e20b9254e6b8d1967a0710aa", 0x86}, {&(0x7f0000000380)="6db59dc33886eb6a39f73dc68d631bf996a711f89ead0f99ad23d5e927f021360e660345fb14e7bc3e225da411054982260c5146435def29e45d604d1d8ccaecf288bbef346b134cc350381e8753dd46d01ba7e1b657c1bd10c288862592c1520d23e10cd6b735bfe1e521667d6ee26615b67d5153b8dc5b57442bc4d3ecd99ac5b0115de3bd1c5ec3a8e1e2465d943568fb8449e7fa7387d55d885fb7d063ec74131f5f459076715ceb0c5ca4107a3363c76c687f40d61939910005e0445da26cd5083a85f18a88314903f2428932584665e3f58ea96e7a20", 0xd9}, {&(0x7f0000000480)="6052327957f4adbb915a1c4413fee556969f8d024a4652d4270b9d7e1bea", 0x1e}], 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="a000000000f9ce0b700000000700000044349813e00000020000000900000000fffffff8e0000001000027faac1414aa0000e9c8ffffffff000000067f0000010000fbfd83134aac1414bb7f000001ac1e0001e0000001070b91ffffffffac1414aa881098e650ab6a6c882f240fb989159d94083170d3f4c055890be0e00000017f000001890bace000000264010100890f88ffffffffac1414aa0a010100001100000000000000000000000100000009000000000000002c000000000000000000000007000000441c1133e00000020000ff15ad1414aa00000006ac1414210000000a00000000"], 0xe8}, 0xc800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newchain={0x24, 0x64, 0x0, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x3, 0xc}, {0x2, 0x2}}}, 0x24}}, 0x40) 265.826µs ago: executing program 3 (id=668): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 4 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 0s ago: executing program 2 (id=670): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000040)) r1 = syz_io_uring_setup(0xe7a, &(0x7f00000001c0)={0x0, 0xef7c, 0x1, 0x1, 0x30e}, &(0x7f0000000100), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000180)={0x1}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}]}}]}, 0x98}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010000000000000000000200000002000009002200000c0016800600060000480000060015000400000060c2bcc601a83ca4b85987ae69b01a398338ee1c67864f"], 0x30}, 0x1, 0x0, 0x0, 0x10001}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[{0x6, 0x0, 0x20}, {0x80, 0x9, 0x2, 0x8}, {0x1, 0x2, 0x9, 0x81}, {0x7, 0x75, 0x80, 0xff}, {0x9, 0x0, 0x8, 0x80000001}, {0xfff9, 0x7, 0x1}, {0x6, 0xfd, 0x3, 0xf}]}) kernel console output (not intermixed with test programs): [ 53.062528][ T41] audit: type=1400 audit(1759943992.493:61): avc: denied { siginh } for pid=5882 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.867553][ T1331] cfg80211: failed to load regulatory.db [ 363.489692][ T41] audit: type=1400 audit(1759944302.953:62): avc: denied { write } for pid=5984 comm="sftp-server" path="pipe:[5542]" dev="pipefs" ino=5542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Warning: Permanently added '[localhost]:45584' (ED25519) to the list of known hosts. [ 365.048036][ T41] audit: type=1400 audit(1759944304.513:63): avc: denied { name_bind } for pid=5987 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 365.101061][ T41] audit: type=1400 audit(1759944304.563:64): avc: denied { execute } for pid=5988 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 365.111644][ T41] audit: type=1400 audit(1759944304.573:65): avc: denied { execute_no_trans } for pid=5988 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 367.583226][ T41] audit: type=1400 audit(1759944307.043:66): avc: denied { mounton } for pid=5988 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 367.594280][ T41] audit: type=1400 audit(1759944307.053:67): avc: denied { mount } for pid=5988 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 367.596622][ T5988] cgroup: Unknown subsys name 'net' [ 367.606355][ T41] audit: type=1400 audit(1759944307.073:68): avc: denied { unmount } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 367.778386][ T5988] cgroup: Unknown subsys name 'cpuset' [ 367.782887][ T5988] cgroup: Unknown subsys name 'rlimit' [ 367.926411][ T41] audit: type=1400 audit(1759944307.393:69): avc: denied { setattr } for pid=5988 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.933729][ T41] audit: type=1400 audit(1759944307.393:70): avc: denied { create } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.943462][ T41] audit: type=1400 audit(1759944307.393:71): avc: denied { write } for pid=5988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 367.981520][ T5990] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 368.855350][ T5988] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 373.001730][ T41] kauditd_printk_skb: 8 callbacks suppressed [ 373.001746][ T41] audit: type=1400 audit(1759944312.463:80): avc: denied { execmem } for pid=5993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 373.337770][ T41] audit: type=1400 audit(1759944312.803:81): avc: denied { create } for pid=5997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.359574][ T41] audit: type=1400 audit(1759944312.803:82): avc: denied { read write } for pid=5997 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.374568][ T41] audit: type=1400 audit(1759944312.803:83): avc: denied { open } for pid=5997 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.385690][ T41] audit: type=1400 audit(1759944312.823:84): avc: denied { ioctl } for pid=5997 comm="syz-executor" path="socket:[6797]" dev="sockfs" ino=6797 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.398775][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.403006][ T6003] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.407511][ T6003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.412197][ T6004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.414741][ T6004] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.425717][ T6004] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.428457][ T6004] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.437786][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.441325][ T41] audit: type=1400 audit(1759944312.903:85): avc: denied { read } for pid=6001 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.443494][ T6013] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.449616][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.449779][ T41] audit: type=1400 audit(1759944312.903:86): avc: denied { open } for pid=6001 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 373.449812][ T41] audit: type=1400 audit(1759944312.903:87): avc: denied { mounton } for pid=6001 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 373.451315][ T6010] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.453286][ T6010] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.455713][ T6013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.456943][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.457291][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.464975][ T6010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.479524][ T6013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.482342][ T6010] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.486417][ T6013] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.489512][ T6010] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.708226][ T41] audit: type=1400 audit(1759944313.173:88): avc: denied { module_request } for pid=6001 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 373.758454][ T6001] chnl_net:caif_netlink_parms(): no params data found [ 373.855979][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 373.872369][ T6005] chnl_net:caif_netlink_parms(): no params data found [ 373.985494][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.988193][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.990659][ T6001] bridge_slave_0: entered allmulticast mode [ 373.993904][ T6001] bridge_slave_0: entered promiscuous mode [ 374.002907][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.005795][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.008093][ T6001] bridge_slave_1: entered allmulticast mode [ 374.010781][ T6001] bridge_slave_1: entered promiscuous mode [ 374.052206][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 374.162107][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.165797][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.169097][ T5997] bridge_slave_0: entered allmulticast mode [ 374.173295][ T5997] bridge_slave_0: entered promiscuous mode [ 374.188997][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.201860][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.206033][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.209046][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.212145][ T5997] bridge_slave_1: entered allmulticast mode [ 374.216859][ T5997] bridge_slave_1: entered promiscuous mode [ 374.314650][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.373144][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.399388][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.402407][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.406029][ T6005] bridge_slave_0: entered allmulticast mode [ 374.410626][ T6005] bridge_slave_0: entered promiscuous mode [ 374.423147][ T6001] team0: Port device team_slave_0 added [ 374.430161][ T6001] team0: Port device team_slave_1 added [ 374.459200][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.462209][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.465826][ T6005] bridge_slave_1: entered allmulticast mode [ 374.470859][ T6005] bridge_slave_1: entered promiscuous mode [ 374.572066][ T5997] team0: Port device team_slave_0 added [ 374.603479][ T6005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.635432][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.637873][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.640497][ T6006] bridge_slave_0: entered allmulticast mode [ 374.643733][ T6006] bridge_slave_0: entered promiscuous mode [ 374.648664][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.650840][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.660041][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.666645][ T5997] team0: Port device team_slave_1 added [ 374.671181][ T6005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.675304][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.678635][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.681770][ T6006] bridge_slave_1: entered allmulticast mode [ 374.684914][ T6006] bridge_slave_1: entered promiscuous mode [ 374.714396][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.717197][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.727404][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.859713][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.883831][ T6005] team0: Port device team_slave_0 added [ 374.891146][ T6005] team0: Port device team_slave_1 added [ 374.896665][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.901311][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.903702][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.913403][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.918233][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.921092][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.933507][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.058023][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.061538][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.071019][ T6005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.077281][ T6006] team0: Port device team_slave_0 added [ 375.103840][ T6001] hsr_slave_0: entered promiscuous mode [ 375.107769][ T6001] hsr_slave_1: entered promiscuous mode [ 375.111882][ T6005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.114331][ T6005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.122616][ T6005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.127811][ T6006] team0: Port device team_slave_1 added [ 375.186587][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.189524][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.201553][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.297809][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.300152][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.310212][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.318158][ T5997] hsr_slave_0: entered promiscuous mode [ 375.322764][ T5997] hsr_slave_1: entered promiscuous mode [ 375.326196][ T5997] debugfs: 'hsr0' already exists in 'hsr' [ 375.329485][ T5997] Cannot create hsr debugfs directory [ 375.459393][ T6005] hsr_slave_0: entered promiscuous mode [ 375.461726][ T6005] hsr_slave_1: entered promiscuous mode [ 375.463807][ T6005] debugfs: 'hsr0' already exists in 'hsr' [ 375.465780][ T6005] Cannot create hsr debugfs directory [ 375.505628][ T6006] hsr_slave_0: entered promiscuous mode [ 375.505944][ T6003] Bluetooth: hci0: command tx timeout [ 375.505952][ T6013] Bluetooth: hci2: command tx timeout [ 375.506218][ T6013] Bluetooth: hci1: command tx timeout [ 375.508628][ T6006] hsr_slave_1: entered promiscuous mode [ 375.510405][ T6008] Bluetooth: hci3: command tx timeout [ 375.512394][ T6006] debugfs: 'hsr0' already exists in 'hsr' [ 375.519159][ T6006] Cannot create hsr debugfs directory [ 375.869668][ T5997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.879393][ T5997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.891653][ T5997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.897081][ T5997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.973634][ T6001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.996091][ T6001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.003379][ T6001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.010684][ T6001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 376.077160][ T6005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.083301][ T6005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.089581][ T6005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.094812][ T6005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.187743][ T6006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.198072][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.204159][ T6006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.211821][ T6006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.220314][ T6006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.270571][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.291844][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.294802][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.311225][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.314305][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.327862][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.371877][ T6001] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.387834][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.390338][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.400717][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.403346][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.409308][ T6005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.446887][ T6005] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.460690][ T41] audit: type=1400 audit(1759944315.923:89): avc: denied { sys_module } for pid=5997 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 376.461559][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.472993][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.485911][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.488753][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.500002][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.525349][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.543099][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.546097][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.578995][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.582159][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.612423][ T6005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.637416][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.671923][ T5997] veth0_vlan: entered promiscuous mode [ 376.681669][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.686922][ T5997] veth1_vlan: entered promiscuous mode [ 376.719329][ T5997] veth0_macvtap: entered promiscuous mode [ 376.734873][ T6001] veth0_vlan: entered promiscuous mode [ 376.737914][ T5997] veth1_macvtap: entered promiscuous mode [ 376.760767][ T6001] veth1_vlan: entered promiscuous mode [ 376.766628][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.783239][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.789043][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.813026][ T6005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.815986][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.819765][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.831980][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.835500][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.860293][ T6001] veth0_macvtap: entered promiscuous mode [ 376.872535][ T6001] veth1_macvtap: entered promiscuous mode [ 376.904571][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.908922][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.930650][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.934069][ T6006] veth0_vlan: entered promiscuous mode [ 376.944680][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.951193][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.953943][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.956625][ T6006] veth1_vlan: entered promiscuous mode [ 376.970770][ T6041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.977887][ T6041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.981267][ T6041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.992458][ T6041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.001169][ T6005] veth0_vlan: entered promiscuous mode [ 377.013559][ T6005] veth1_vlan: entered promiscuous mode [ 377.028945][ T5997] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 377.041011][ T6006] veth0_macvtap: entered promiscuous mode [ 377.047712][ T6006] veth1_macvtap: entered promiscuous mode [ 377.076988][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.078508][ T6005] veth0_macvtap: entered promiscuous mode [ 377.079859][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.089671][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.096827][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.103184][ T6005] veth1_macvtap: entered promiscuous mode [ 377.121082][ T6072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.125539][ T6072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.143183][ T6072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.147214][ T6072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.153845][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.167788][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.170923][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.182956][ T6005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.194519][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.198634][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.204718][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.208729][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.215321][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.218244][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.267471][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.281411][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.304037][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.307401][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.331310][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.334142][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.427927][ T6103] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 377.433374][ T6103] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 377.468833][ T5928] IPVS: starting estimator thread 0... [ 377.471742][ T6110] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 377.558709][ T6112] IPVS: using max 44 ests per chain, 105600 per kthread [ 377.586541][ T6008] Bluetooth: hci3: command tx timeout [ 377.588690][ T6008] Bluetooth: hci0: command tx timeout [ 377.595379][ T6003] Bluetooth: hci1: command tx timeout [ 377.598015][ T6003] Bluetooth: hci2: command tx timeout [ 377.655214][ T6131] tmpfs: Bad value for 'mpol' [ 377.827225][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'. [ 377.836227][ T6139] geneve2: entered promiscuous mode [ 377.838020][ T6139] geneve2: entered allmulticast mode [ 377.846158][ T29] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 377.969846][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 377.999080][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 378.002840][ T29] usb 6-1: config 0 has no interface number 0 [ 378.005459][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.009036][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 378.012947][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 378.017041][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 378.018924][ T41] kauditd_printk_skb: 424 callbacks suppressed [ 378.018934][ T41] audit: type=1400 audit(1759944317.483:514): avc: denied { create } for pid=6142 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.020729][ T6143] overlay: ./bus is not a directory [ 378.020897][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 378.020914][ T29] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 378.020943][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 378.020955][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.026257][ T29] usb 6-1: config 0 descriptor?? [ 378.034032][ T41] audit: type=1400 audit(1759944317.483:515): avc: denied { watch } for pid=6142 comm="syz.0.24" path="/9/bus" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 378.039819][ T6124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.042275][ T41] audit: type=1400 audit(1759944317.483:516): avc: denied { watch_sb watch_reads } for pid=6142 comm="syz.0.24" path="/9/bus" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 378.053824][ T29] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 378.057416][ T6145] overlay: ./bus is not a directory [ 378.060772][ T41] audit: type=1400 audit(1759944317.513:517): avc: denied { ioctl } for pid=6142 comm="syz.0.24" path="socket:[11388]" dev="sockfs" ino=11388 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.089516][ T41] audit: type=1400 audit(1759944317.513:518): avc: denied { connect } for pid=6142 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.097817][ T41] audit: type=1400 audit(1759944317.513:519): avc: denied { getopt } for pid=6142 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.106491][ T41] audit: type=1400 audit(1759944317.563:520): avc: denied { unmount } for pid=5997 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 378.252380][ T6124] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 378.258915][ T41] audit: type=1400 audit(1759944317.723:521): avc: denied { shutdown } for pid=6122 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.312848][ T41] audit: type=1400 audit(1759944317.773:522): avc: denied { create } for pid=6122 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.321626][ T41] audit: type=1400 audit(1759944317.773:523): avc: denied { setopt } for pid=6122 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 378.330174][ T6150] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 378.341589][ T5928] usb 6-1: USB disconnect, device number 2 [ 378.350952][ T5928] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 378.451632][ T6152] process 'syz.2.26' launched './file2' with NULL argv: empty string added [ 378.497703][ T6157] Illegal XDP return value 4294967274 on prog (id 4) dev N/A, expect packet loss! [ 378.504680][ T6157] autofs: Unknown parameter '4㠹QI{Rr ꀰH' [ 378.579700][ T6008] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 378.615986][ T6159] IPVS: length: 4096 != 24 [ 378.791682][ T6172] usb usb9: usbfs: process 6172 (syz.2.32) did not claim interface 1 before use [ 378.848765][ T6175] dvmrp17: entered allmulticast mode [ 378.852521][ T6175] dvmrp17: left allmulticast mode [ 378.939504][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 379.035507][ T6191] program syz.1.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.242687][ T6211] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 379.437088][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.519464][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 379.665335][ T6008] Bluetooth: hci2: command tx timeout [ 379.665416][ T6003] Bluetooth: hci1: command tx timeout [ 379.668233][ T6008] Bluetooth: hci3: command tx timeout [ 379.672228][ T6013] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.674152][ T6013] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.681193][ T6013] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.685936][ T6013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.689608][ T6013] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.818169][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 379.942269][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.945393][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.948477][ T6234] bridge_slave_0: entered allmulticast mode [ 379.960407][ T6234] bridge_slave_0: entered promiscuous mode [ 379.966857][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.969102][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.971295][ T6234] bridge_slave_1: entered allmulticast mode [ 379.981301][ T6234] bridge_slave_1: entered promiscuous mode [ 379.991865][ T6253] sctp: [Deprecated]: syz.2.56 (pid 6253) Use of int in max_burst socket option deprecated. [ 379.991865][ T6253] Use struct sctp_assoc_value instead [ 380.063305][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.069395][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.104367][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.59'. [ 380.106686][ T6262] binder: BINDER_SET_CONTEXT_MGR already set [ 380.110719][ T6262] binder: 6261:6262 ioctl 4018620d 200000004a80 returned -16 [ 380.117134][ T6262] binder: 6261:6262 ioctl c018620c 200000000240 returned -1 [ 380.130813][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 380.131663][ T6234] team0: Port device team_slave_0 added [ 380.139052][ T6262] binder: 6261:6262 ioctl c02864c3 200000000280 returned -22 [ 380.144571][ T6234] team0: Port device team_slave_1 added [ 380.181413][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.183745][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.194692][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.200586][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.203646][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.213772][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.286660][ T6234] hsr_slave_0: entered promiscuous mode [ 380.289117][ T6234] hsr_slave_1: entered promiscuous mode [ 380.291546][ T6234] debugfs: 'hsr0' already exists in 'hsr' [ 380.293358][ T6234] Cannot create hsr debugfs directory [ 380.336719][ T6271] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 380.349703][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.363146][ T6273] program syz.3.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.413604][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.523336][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.593186][ T6234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 380.600232][ T6234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 380.607105][ T6234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 380.612066][ T6234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 380.651213][ T6297] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=6297 comm=syz.1.70 [ 380.690587][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.714828][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.71'. [ 380.754205][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.758859][ T40] bridge_slave_1: left allmulticast mode [ 380.761302][ T40] bridge_slave_1: left promiscuous mode [ 380.764673][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.773350][ T40] bridge_slave_0: left allmulticast mode [ 380.776215][ T40] bridge_slave_0: left promiscuous mode [ 380.778869][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.937338][ T841] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 381.066549][ T6314] SELinux: Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped). [ 381.069485][ T5973] hid (null): global environment stack underflow [ 381.087918][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.088544][ T5973] hid-generic 0005:0000:136D.0002: unexpected long global item [ 381.094889][ T5973] hid-generic 0005:0000:136D.0002: probe with driver hid-generic failed with error -22 [ 381.100962][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.106779][ T40] bond0 (unregistering): Released all slaves [ 381.136278][ T6319] netlink: 304 bytes leftover after parsing attributes in process `syz.1.77'. [ 381.153085][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.155500][ T6254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.167247][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.170020][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.228458][ T841] usb 8-1: unable to get BOS descriptor or descriptor too short [ 381.232582][ T841] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 381.238893][ T841] usb 8-1: can't read configurations, error -71 [ 381.298125][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 381.431617][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.593041][ T40] hsr_slave_0: left promiscuous mode [ 381.600738][ T40] hsr_slave_1: left promiscuous mode [ 381.603093][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.607240][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.611421][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.613758][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.641327][ T40] veth1_macvtap: left promiscuous mode [ 381.643491][ T40] veth0_macvtap: left promiscuous mode [ 381.648079][ T40] veth1_vlan: left promiscuous mode [ 381.650858][ T40] veth0_vlan: left promiscuous mode [ 381.746345][ T6003] Bluetooth: hci0: command tx timeout [ 381.747515][ T6008] Bluetooth: hci2: command tx timeout [ 381.747849][ T6013] Bluetooth: hci1: command tx timeout [ 381.755612][ T6008] Bluetooth: hci3: command tx timeout [ 381.995655][ T6007] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 382.155404][ T6007] usb 6-1: Using ep0 maxpacket: 8 [ 382.164277][ T6007] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.171590][ T6007] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.177701][ T6007] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.181799][ T6007] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.187338][ T6007] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.191461][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.292297][ T40] team0 (unregistering): Port device team_slave_1 removed [ 382.348363][ T40] team0 (unregistering): Port device team_slave_0 removed [ 382.402675][ T6007] usb 6-1: usb_control_msg returned -32 [ 382.403028][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.405968][ T6007] usbtmc 6-1:16.0: can't read capabilities [ 382.410793][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.885148][ T6007] usb 6-1: USB disconnect, device number 3 [ 382.971143][ T6380] bond1 (unregistering): Released all slaves [ 383.011290][ T6381] bond1 (unregistering): Released all slaves [ 383.033059][ T6234] veth0_vlan: entered promiscuous mode [ 383.048447][ T6234] veth1_vlan: entered promiscuous mode [ 383.084798][ T6234] veth0_macvtap: entered promiscuous mode [ 383.093992][ T6234] veth1_macvtap: entered promiscuous mode [ 383.113273][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.136046][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.140940][ T41] kauditd_printk_skb: 93 callbacks suppressed [ 383.140954][ T41] audit: type=1400 audit(1759944322.603:617): avc: denied { write } for pid=6395 comm="syz.2.88" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 383.148117][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.157196][ T6396] sg_write: data in/out 10438218/1 bytes for SCSI command 0x6b-- guessing data in; [ 383.157196][ T6396] program syz.2.88 not setting count and/or reply_len properly [ 383.161930][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.168781][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.176831][ T41] audit: type=1400 audit(1759944322.633:618): avc: denied { mounton } for pid=6397 comm="syz.3.89" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 383.194921][ T41] audit: type=1400 audit(1759944322.653:619): avc: denied { ioctl } for pid=6383 comm="syz.1.86" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.215463][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.250775][ T41] audit: type=1400 audit(1759944322.713:620): avc: denied { read } for pid=6402 comm="syz.3.90" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.260075][ T41] audit: type=1400 audit(1759944322.713:621): avc: denied { open } for pid=6402 comm="syz.3.90" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.268643][ T41] audit: type=1400 audit(1759944322.713:622): avc: denied { write } for pid=6402 comm="syz.3.90" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 383.277684][ T41] audit: type=1400 audit(1759944322.713:623): avc: denied { open } for pid=6402 comm="syz.3.90" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 383.285578][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.288224][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.320565][ T6254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.323968][ T6254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.326753][ T6007] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 383.334855][ T41] audit: type=1400 audit(1759944322.793:624): avc: denied { mount } for pid=6234 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 383.350968][ T41] audit: type=1400 audit(1759944322.803:625): avc: denied { mounton } for pid=6234 comm="syz-executor" path="/syzkaller.QA27SB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 383.384929][ T40] IPVS: stop unused estimator thread 0... [ 383.424472][ T6412] qnx4: unable to read the superblock [ 383.431977][ T6415] netlink: 88 bytes leftover after parsing attributes in process `syz.3.92'. [ 383.437566][ T41] audit: type=1400 audit(1759944322.903:626): avc: denied { execute } for pid=6414 comm="syz.3.92" path="/20/cpuacct.usage_percpu" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 383.487013][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12297, setting to 1024 [ 383.492844][ T6007] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 383.501691][ T6007] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 383.509971][ T6007] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.514155][ T6007] usb 6-1: Product: syz [ 383.515782][ T6007] usb 6-1: Manufacturer: syz [ 383.517969][ T6007] usb 6-1: SerialNumber: syz [ 383.528545][ T6007] usb 6-1: config 0 descriptor?? [ 383.532830][ T6384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.650558][ T6432] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 383.654037][ T6432] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 383.658543][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 383.708471][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 383.717257][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.96'. [ 383.727478][ T6434] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 383.760091][ T6384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.786170][ T6437] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 383.839725][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.841571][ T6003] Bluetooth: hci0: command tx timeout [ 383.842321][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.867709][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.98'. [ 383.967532][ T6075] usb 6-1: USB disconnect, device number 4 [ 384.077952][ T6448] 9pnet: Unknown protocol version 9p2000.uI [ 384.077952][ T6448] ޑ.bKPD9 [ 384.168163][ T6452] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 384.253215][ T6461] bridge1: entered promiscuous mode [ 384.288389][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 384.288466][ T6468] capability: warning: `syz.2.103' uses deprecated v2 capabilities in a way that may be insecure [ 384.291239][ T6467] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 384.291289][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 384.303346][ T6466] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 384.341029][ T54] hid (null): bogus close delimiter [ 384.342767][ T54] hid (null): global environment stack underflow [ 384.344946][ T54] hid (null): unknown global tag 0xc [ 384.353300][ T6003] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 384.359203][ T6003] CPU: 2 UID: 0 PID: 6003 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 384.359225][ T6003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 384.359236][ T6003] Workqueue: hci2 hci_rx_work [ 384.359264][ T6003] Call Trace: [ 384.359268][ T6003] [ 384.359275][ T6003] dump_stack_lvl+0x16c/0x1f0 [ 384.359299][ T6003] sysfs_warn_dup+0x7f/0xa0 [ 384.359318][ T6003] sysfs_create_dir_ns+0x24b/0x2b0 [ 384.359335][ T6003] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 384.359353][ T6003] ? find_held_lock+0x2b/0x80 [ 384.359374][ T6003] ? do_raw_spin_unlock+0x172/0x230 [ 384.359391][ T6003] kobject_add_internal+0x2c4/0x9b0 [ 384.359407][ T6003] kobject_add+0x16e/0x240 [ 384.359421][ T6003] ? __pfx_kobject_add+0x10/0x10 [ 384.359464][ T6003] ? do_raw_spin_unlock+0x172/0x230 [ 384.359480][ T6003] ? kobject_put+0xab/0x5a0 [ 384.359507][ T6003] device_add+0x288/0x1aa0 [ 384.359531][ T6003] ? __pfx_dev_set_name+0x10/0x10 [ 384.359546][ T6003] ? __pfx_device_add+0x10/0x10 [ 384.359570][ T6003] ? mgmt_send_event_skb+0x2fb/0x460 [ 384.359595][ T6003] hci_conn_add_sysfs+0x17e/0x230 [ 384.359695][ T6003] le_conn_complete_evt+0x1260/0x2150 [ 384.359721][ T6003] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 384.359741][ T6003] ? hci_event_packet+0x459/0x11c0 [ 384.359769][ T6003] hci_le_conn_complete_evt+0x23c/0x370 [ 384.359795][ T6003] hci_le_meta_evt+0x354/0x5e0 [ 384.359817][ T6003] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 384.359840][ T6003] hci_event_packet+0x685/0x11c0 [ 384.359859][ T6003] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 384.359880][ T6003] ? __pfx_hci_event_packet+0x10/0x10 [ 384.359900][ T6003] ? kcov_remote_start+0x3c9/0x6d0 [ 384.359918][ T6003] ? lockdep_hardirqs_on+0x7c/0x110 [ 384.359942][ T6003] hci_rx_work+0x2c5/0x16b0 [ 384.359963][ T6003] ? rcu_is_watching+0x12/0xc0 [ 384.359983][ T6003] process_one_work+0x9cf/0x1b70 [ 384.360006][ T6003] ? __pfx_process_one_work+0x10/0x10 [ 384.360025][ T6003] ? assign_work+0x1a0/0x250 [ 384.360037][ T6003] worker_thread+0x6c8/0xf10 [ 384.360055][ T6003] ? __pfx_worker_thread+0x10/0x10 [ 384.360066][ T6003] kthread+0x3c2/0x780 [ 384.360077][ T6003] ? __pfx_kthread+0x10/0x10 [ 384.360089][ T6003] ? rcu_is_watching+0x12/0xc0 [ 384.360102][ T6003] ? __pfx_kthread+0x10/0x10 [ 384.360114][ T6003] ret_from_fork+0x672/0x7d0 [ 384.360125][ T6003] ? __pfx_kthread+0x10/0x10 [ 384.360142][ T6003] ret_from_fork_asm+0x1a/0x30 [ 384.360162][ T6003] [ 384.360239][ T6003] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 384.470462][ T6003] Bluetooth: hci2: failed to register connection device [ 384.471816][ T54] hid-generic 0009:0007:0003.0003: bogus close delimiter [ 384.477949][ T54] hid-generic 0009:0007:0003.0003: item 0 0 2 10 parsing failed [ 384.482242][ T54] hid-generic 0009:0007:0003.0003: probe with driver hid-generic failed with error -22 [ 384.564234][ T6484] capability: warning: `syz.1.107' uses 32-bit capabilities (legacy support in use) [ 384.843441][ T6493] gre1: entered promiscuous mode [ 385.417991][ T6510] ipvlan2: entered promiscuous mode [ 385.422111][ T6510] bridge0: port 3(ipvlan2) entered blocking state [ 385.425598][ T6510] bridge0: port 3(ipvlan2) entered disabled state [ 385.429126][ T6510] ipvlan2: entered allmulticast mode [ 385.432106][ T6510] bridge0: entered allmulticast mode [ 385.437620][ T6510] ipvlan2: left allmulticast mode [ 385.439928][ T6510] bridge0: left allmulticast mode [ 385.492564][ T6513] FAT-fs (nullb0): bogus number of reserved sectors [ 385.496907][ T6513] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 385.555967][ T6516] warning: `syz.2.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 385.645546][ T6521] XFS (nullb0): Invalid superblock magic number [ 385.664456][ T6522] bond1: Unable to set up delay as MII monitoring is disabled [ 385.673549][ T6522] bond1 (unregistering): Released all slaves [ 385.702504][ T6531] bond1: Unable to set up delay as MII monitoring is disabled [ 385.708174][ T6531] bond1 (unregistering): Released all slaves [ 385.740580][ T6521] kvm: emulating exchange as write [ 385.915425][ T6003] Bluetooth: hci0: command 0x040f tx timeout [ 386.244001][ T6564] syz.3.127 (6564): /proc/6563/oom_adj is deprecated, please use /proc/6563/oom_score_adj instead. [ 386.259066][ T6566] netlink: 536 bytes leftover after parsing attributes in process `syz.2.128'. [ 386.278286][ T6564] bond1: entered allmulticast mode [ 386.280844][ T6566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.128'. [ 386.539412][ T6576] Bluetooth: MGMT ver 1.23 [ 386.623115][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 386.652786][ T6578] sp0: Synchronizing with TNC [ 386.666477][ T6577] [U] [ 386.992671][ T6592] qnx4: no qnx4 filesystem (no root dir). [ 387.750217][ T6611] unsupported nlmsg_type 40 [ 387.974992][ T6625] overlayfs: missing 'lowerdir' [ 387.986365][ T6008] Bluetooth: hci0: command 0x040f tx timeout [ 388.214729][ T6644] Zero length message leads to an empty skb [ 388.314484][ T6657] program syz.1.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.328462][ T6653] could not allocate digest TFM handle cryptd(blake2b-160) [ 388.373145][ T41] kauditd_printk_skb: 30 callbacks suppressed [ 388.373161][ T41] audit: type=1400 audit(1759944327.833:657): avc: denied { write } for pid=6656 comm="syz.1.158" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 388.386037][ T41] audit: type=1400 audit(1759944327.833:658): avc: denied { open } for pid=6656 comm="syz.1.158" path="/46/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 388.418345][ T6673] mmap: syz.2.160 (6673) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 388.439759][ T41] audit: type=1400 audit(1759944327.903:659): avc: denied { create } for pid=6656 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.448377][ T41] audit: type=1400 audit(1759944327.903:660): avc: denied { connect } for pid=6656 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.462498][ T41] audit: type=1400 audit(1759944327.923:661): avc: denied { unmount } for pid=6001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 388.543769][ T41] audit: type=1400 audit(1759944328.003:662): avc: denied { write } for pid=6680 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 388.637597][ T6667] __nla_validate_parse: 6 callbacks suppressed [ 388.637615][ T6667] netlink: 5 bytes leftover after parsing attributes in process `syz.3.159'. [ 388.691674][ T6695] Bluetooth: MGMT ver 1.23 [ 388.714564][ T41] audit: type=1400 audit(1759944328.173:663): avc: denied { connect } for pid=6698 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 388.724352][ T41] audit: type=1400 audit(1759944328.183:664): avc: denied { ioctl } for pid=6698 comm="syz.1.166" path="socket:[14572]" dev="sockfs" ino=14572 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 388.784286][ T41] audit: type=1400 audit(1759944328.243:665): avc: denied { map } for pid=6702 comm="syz.1.168" path="/proc/sys/net/ipv4/vs/drop_entry" dev="proc" ino=12218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 388.793991][ T41] audit: type=1400 audit(1759944328.253:666): avc: denied { setopt } for pid=6704 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 388.796859][ T6705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.169'. [ 389.515934][ T6715] netlink: 256 bytes leftover after parsing attributes in process `syz.2.172'. [ 389.604937][ T6717] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 389.634822][ T6717] kvm: pic: level sensitive irq not supported [ 389.637605][ T6717] kvm: pic: non byte read [ 389.646313][ T6717] kvm: pic: level sensitive irq not supported [ 389.647181][ T6717] kvm: pic: non byte read [ 389.654734][ T6717] kvm: pic: level sensitive irq not supported [ 389.657215][ T6717] kvm: pic: non byte read [ 389.666799][ T6717] kvm: pic: level sensitive irq not supported [ 389.667534][ T6717] kvm: pic: non byte read [ 389.687141][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 389.689828][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 389.693301][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 389.697244][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 389.719011][ T6729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'. [ 389.819511][ T6735] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 389.915842][ T6735] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 389.925975][ T6743] bridge2: entered promiscuous mode [ 389.927926][ T6743] bridge2: entered allmulticast mode [ 389.956912][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 389.959058][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 390.029781][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 390.075865][ T6008] Bluetooth: hci0: command 0x040f tx timeout [ 390.155458][ T6749] overlayfs: missing 'lowerdir' [ 390.198565][ T6753] veth0_virt_wifi: mtu less than device minimum [ 390.381885][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'. [ 390.465455][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 390.468350][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 390.489629][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.513698][ T6717] ceph: No mds server is up or the cluster is laggy [ 390.739298][ T6780] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 390.795782][ T6780] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 390.834301][ T6780] veth3: entered promiscuous mode [ 390.838574][ T6780] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 390.841543][ T6783] macsec0: entered promiscuous mode [ 390.844320][ T6783] macsec0: entered allmulticast mode [ 390.847749][ T6783] veth1_macvtap: entered allmulticast mode [ 391.326502][ T6837] 9pnet_fd: Insufficient options for proto=fd [ 391.442553][ T6843] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 391.459929][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 391.511412][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 391.814909][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.219'. [ 392.090849][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 392.153215][ T6871] 9pnet_virtio: no channels available for device syz [ 392.166116][ T6869] "syz.2.221" (6869) uses obsolete ecb(arc4) skcipher [ 392.184979][ T6876] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6876 comm=syz.3.222 [ 392.370323][ T6890] PKCS8: Unsupported PKCS#8 version [ 392.491687][ T6904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.572875][ T6904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.640142][ T6904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.711541][ T6904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.974730][ T6072] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.987821][ T6072] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.999707][ T6337] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.007689][ T6337] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.163377][ T6947] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 393.253563][ T6902] overlayfs: statfs failed on './file0' [ 393.389647][ T6967] ucma_write: process 40 (syz.4.249) changed security contexts after opening file descriptor, this is not allowed. [ 393.516146][ T6985] syz.4.254 uses obsolete (PF_INET,SOCK_PACKET) [ 393.623561][ T41] kauditd_printk_skb: 41 callbacks suppressed [ 393.623581][ T41] audit: type=1400 audit(1759944333.083:708): avc: denied { block_suspend } for pid=6984 comm="syz.4.254" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 393.652489][ T6991] __nla_validate_parse: 51 callbacks suppressed [ 393.652507][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 393.928016][ T41] audit: type=1400 audit(1759944333.393:709): avc: denied { accept } for pid=6995 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.807084][ T41] audit: type=1400 audit(1759944334.273:710): avc: denied { read } for pid=6984 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 394.818596][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 394.839862][ T41] audit: type=1400 audit(1759944334.303:711): avc: denied { connect } for pid=7007 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.053188][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.266'. [ 395.059824][ T41] audit: type=1326 audit(1759944334.513:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz.3.266" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa451b8eec9 code=0x0 [ 395.089511][ T7032] netlink: 'syz.4.265': attribute type 9 has an invalid length. [ 395.263488][ T7045] bridge_slave_0: left allmulticast mode [ 395.268013][ T7045] bridge_slave_0: left promiscuous mode [ 395.271614][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.284492][ T7045] bridge_slave_1: left allmulticast mode [ 395.291019][ T7045] bridge_slave_1: left promiscuous mode [ 395.295470][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.327562][ T7045] bond0: (slave bond_slave_0): Releasing backup interface [ 395.349046][ T7054] ======================================================= [ 395.349046][ T7054] WARNING: The mand mount option has been deprecated and [ 395.349046][ T7054] and is ignored by this kernel. Remove the mand [ 395.349046][ T7054] option from the mount to silence this warning. [ 395.349046][ T7054] ======================================================= [ 395.372483][ T7045] bond0: (slave bond_slave_1): Releasing backup interface [ 395.373779][ T41] audit: type=1400 audit(1759944334.833:713): avc: denied { setattr } for pid=7053 comm="syz.1.271" name="/" dev="9p" ino=71827761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.427453][ T7045] team0: Port device team_slave_0 removed [ 395.434356][ T7045] team0: Port device team_slave_1 removed [ 395.438529][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.442424][ T7045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.448527][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.450927][ T7045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.454558][ T7045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.468920][ T7049] team0: Mode changed to "loadbalance" [ 395.501150][ T7038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7038 comm=syz.4.267 [ 395.508224][ T41] audit: type=1400 audit(1759944334.973:714): avc: denied { read } for pid=7036 comm="syz.4.267" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 395.519009][ T41] audit: type=1400 audit(1759944334.973:715): avc: denied { open } for pid=7036 comm="syz.4.267" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 395.537927][ T41] audit: type=1400 audit(1759944335.003:716): avc: denied { getopt } for pid=7066 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.574373][ T41] audit: type=1400 audit(1759944335.033:717): avc: denied { read } for pid=7066 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.803144][ T7091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7091 comm=syz.1.278 [ 395.810331][ T7091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7091 comm=syz.1.278 [ 395.850509][ T7098] netlink: 'syz.1.279': attribute type 2 has an invalid length. [ 395.853538][ T7098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.901420][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 395.905504][ T7100] bridge_slave_0: default FDB implementation only supports local addresses [ 395.913098][ T7100] overlayfs: failed to resolve '/dqʓZH 1 [ 398.491410][ T6003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.494990][ T6003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.499360][ T6003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.503027][ T6003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.547472][ T7249] ip6t_srh: unknown srh match flags 4000 [ 398.569456][ T5928] usb 9-1: USB disconnect, device number 2 [ 398.704535][ T7249] __nla_validate_parse: 4 callbacks suppressed [ 398.704548][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 398.707513][ T73] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.710068][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 398.713809][ T73] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.713841][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.713863][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.747667][ T6337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.841993][ T6337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.921218][ T6337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.935338][ T7245] chnl_net:caif_netlink_parms(): no params data found [ 399.004489][ T6337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.052550][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.055443][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.058688][ T7245] bridge_slave_0: entered allmulticast mode [ 399.062357][ T7245] bridge_slave_0: entered promiscuous mode [ 399.065907][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.068304][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.072433][ T7245] bridge_slave_1: entered allmulticast mode [ 399.075670][ T6252] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 399.084141][ T7245] bridge_slave_1: entered promiscuous mode [ 399.089557][ T41] kauditd_printk_skb: 39 callbacks suppressed [ 399.089568][ T41] audit: type=1400 audit(1759944338.553:757): avc: denied { unmount } for pid=6234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 399.123213][ T41] audit: type=1400 audit(1759944338.583:758): avc: denied { write } for pid=7265 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.150581][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.156259][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.201751][ T7245] team0: Port device team_slave_0 added [ 399.207086][ T7245] team0: Port device team_slave_1 added [ 399.227979][ T6252] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 399.234324][ T6252] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 399.239291][ T6252] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.243404][ T6252] usb 7-1: Product: syz [ 399.246219][ T6252] usb 7-1: Manufacturer: syz [ 399.248844][ T6252] usb 7-1: SerialNumber: syz [ 399.253536][ T6252] usb 7-1: config 0 descriptor?? [ 399.256471][ T7270] netlink: 92 bytes leftover after parsing attributes in process `syz.4.331'. [ 399.281591][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.284577][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.295946][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.311254][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.317057][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.328223][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.349585][ T41] audit: type=1400 audit(1759944338.813:759): avc: denied { getopt } for pid=7273 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 399.418856][ T7245] hsr_slave_0: entered promiscuous mode [ 399.421717][ T7245] hsr_slave_1: entered promiscuous mode [ 399.424814][ T7245] debugfs: 'hsr0' already exists in 'hsr' [ 399.428007][ T7245] Cannot create hsr debugfs directory [ 399.430552][ T7276] tmpfs: Bad value for 'mpol' [ 399.430948][ T6337] bridge_slave_1: left allmulticast mode [ 399.435978][ T6337] bridge_slave_1: left promiscuous mode [ 399.439189][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.448126][ T6337] bridge_slave_0: left allmulticast mode [ 399.450806][ T6337] bridge_slave_0: left promiscuous mode [ 399.454037][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.585203][ T6008] Bluetooth: hci2: command 0x0406 tx timeout [ 399.634388][ T41] audit: type=1400 audit(1759944339.093:760): avc: denied { map } for pid=7283 comm="syz.3.335" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 399.671453][ T55] usb 7-1: USB disconnect, device number 2 [ 399.747521][ T7287] binder: 7285:7287 ioctl c0306201 200000000640 returned -22 [ 399.771619][ T7287] binder: 7285:7287 ioctl 227c 200000000040 returned -22 [ 399.793111][ T6337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.830096][ T6337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.877275][ T6337] bond0 (unregistering): Released all slaves [ 399.903485][ T41] audit: type=1400 audit(1759944339.363:761): avc: denied { bind } for pid=7289 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 399.906866][ T7290] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 399.914263][ T7290] netlink: 'syz.4.337': attribute type 3 has an invalid length. [ 399.917366][ T7290] netlink: 224 bytes leftover after parsing attributes in process `syz.4.337'. [ 399.920834][ T7290] NCSI netlink: No device for ifindex 0 [ 400.007771][ T6337] IPVS: stopping master sync thread 6150 ... [ 400.054229][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 400.064749][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.069046][ T7298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.074312][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.077664][ T7298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.268690][ T7309] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.271669][ T41] audit: type=1400 audit(1759944339.733:762): avc: denied { write } for pid=7306 comm="syz.2.342" path="socket:[18681]" dev="sockfs" ino=18681 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.288666][ T7308] pim6reg1: entered promiscuous mode [ 400.291714][ T7308] pim6reg1: entered allmulticast mode [ 400.296194][ T7245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.347522][ T7245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.355120][ T5928] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 400.361307][ T7245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.367000][ T7245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.511403][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.517875][ T5928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.522113][ T5928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.523786][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.525801][ T5928] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 400.532198][ T5928] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 400.535595][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.539674][ T5928] usb 9-1: config 0 descriptor?? [ 400.555283][ T6013] Bluetooth: hci1: command tx timeout [ 400.567842][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.570521][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.580157][ T6337] hsr_slave_0: left promiscuous mode [ 400.582487][ T6337] hsr_slave_1: left promiscuous mode [ 400.584993][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.588012][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.591265][ T6337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.593780][ T6337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.620243][ T6337] veth1_macvtap: left promiscuous mode [ 400.622474][ T6337] veth0_macvtap: left promiscuous mode [ 400.624460][ T6337] veth1_vlan: left promiscuous mode [ 400.626659][ T6337] veth0_vlan: left promiscuous mode [ 401.045637][ T5928] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 401.367871][ T6337] team0 (unregistering): Port device team_slave_1 removed [ 401.464892][ T6337] team0 (unregistering): Port device team_slave_0 removed [ 401.985971][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.988914][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.162287][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 402.179820][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.220700][ T41] audit: type=1400 audit(1759944341.683:763): avc: denied { mount } for pid=7344 comm="syz.2.344" name="/" dev="ramfs" ino=16651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 402.235771][ T41] audit: type=1400 audit(1759944341.683:764): avc: denied { execute } for pid=7344 comm="syz.2.344" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=17590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 402.281995][ T6252] usb 9-1: USB disconnect, device number 3 [ 402.393022][ T7245] veth0_vlan: entered promiscuous mode [ 402.398190][ T7245] veth1_vlan: entered promiscuous mode [ 402.416964][ T7245] veth0_macvtap: entered promiscuous mode [ 402.421499][ T7245] veth1_macvtap: entered promiscuous mode [ 402.434208][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.442767][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.451056][ T6072] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.454081][ T6072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.468330][ T6072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.471570][ T6072] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.510889][ T6254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.514671][ T6254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.533419][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.537714][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.635192][ T6013] Bluetooth: hci1: command tx timeout [ 402.673574][ T7375] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 402.676669][ T7375] overlayfs: missing 'lowerdir' [ 402.716925][ T41] audit: type=1400 audit(1759944342.183:765): avc: denied { getopt } for pid=7376 comm="syz.5.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 402.861734][ T41] audit: type=1400 audit(1759944342.323:766): avc: denied { setopt } for pid=7378 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.185195][ T7386] netlink: 'syz.5.350': attribute type 10 has an invalid length. [ 403.185292][ T6252] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 403.192183][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.196949][ T7386] bond0: (slave team0): Enslaving as an active interface with an up link [ 403.335875][ T6252] usb 9-1: Using ep0 maxpacket: 8 [ 403.339683][ T6252] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.343806][ T6252] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.347103][ T6252] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.350436][ T6252] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.356533][ T6252] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.359763][ T6252] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.568849][ T6252] usb 9-1: GET_CAPABILITIES returned 0 [ 403.571414][ T6252] usbtmc 9-1:16.0: can't read capabilities [ 403.629440][ T7389] ip6gretap1: entered promiscuous mode [ 403.631938][ T7389] ip6gretap1: entered allmulticast mode [ 403.774407][ C2] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.779345][ T5928] usb 9-1: USB disconnect, device number 4 [ 403.971734][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 404.137415][ T7410] syz.3.358 uses old SIOCAX25GETINFO [ 404.137448][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 404.137463][ T41] audit: type=1400 audit(1759944343.603:772): avc: denied { ioctl } for pid=7409 comm="syz.3.358" path="socket:[17726]" dev="sockfs" ino=17726 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 404.145018][ T7410] vlan0: entered promiscuous mode [ 404.167144][ T7410] tipc: Started in network mode [ 404.168922][ T7410] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 404.171322][ T7410] tipc: Enabled bearer , priority 0 [ 404.220292][ T41] audit: type=1400 audit(1759944343.683:773): avc: denied { write } for pid=7411 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 404.220518][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 404.410903][ T41] audit: type=1400 audit(1759944343.873:774): avc: denied { ioctl } for pid=7421 comm="syz.3.362" path="socket:[18934]" dev="sockfs" ino=18934 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.422125][ T41] audit: type=1400 audit(1759944343.873:775): avc: denied { connect } for pid=7421 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 404.504763][ T41] audit: type=1400 audit(1759944343.963:776): avc: denied { map } for pid=7430 comm="syz.3.365" path="/97/file0/memory.events" dev="9p" ino=71827981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 404.532475][ T7367] netlink: 'syz.2.346': attribute type 10 has an invalid length. [ 404.685154][ T41] audit: type=1400 audit(1759944344.143:777): avc: denied { ioctl } for pid=7428 comm="syz.4.364" path="socket:[18945]" dev="sockfs" ino=18945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.699167][ T41] audit: type=1400 audit(1759944344.143:778): avc: denied { setopt } for pid=7428 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 404.713794][ T1331] IPVS: starting estimator thread 0... [ 404.715224][ T6013] Bluetooth: hci1: command tx timeout [ 404.815251][ T7438] IPVS: using max 42 ests per chain, 100800 per kthread [ 405.025894][ T41] audit: type=1400 audit(1759944344.493:779): avc: denied { write } for pid=7458 comm="syz.4.373" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 405.169403][ T5973] tipc: Node number set to 11578026 [ 405.290332][ T7485] gfs2: error -5 reading superblock [ 405.294716][ T7485] nfsd: Unknown parameter 'gfs2' [ 405.377415][ T41] audit: type=1400 audit(1759944344.843:780): avc: denied { listen } for pid=7491 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.454520][ T7496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.485204][ T6252] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 405.585153][ T41] audit: type=1400 audit(1759944345.043:781): avc: denied { map } for pid=7503 comm="syz.4.385" path="socket:[19063]" dev="sockfs" ino=19063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 405.635875][ T6252] usb 10-1: device descriptor read/64, error -71 [ 405.742191][ T7515] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 405.875820][ T6252] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 406.005156][ T6252] usb 10-1: device descriptor read/64, error -71 [ 406.044432][ T7522] kvm: kvm [7521]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 406.047684][ T7522] kvm: kvm [7521]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 406.115615][ T6252] usb usb10-port1: attempt power cycle [ 406.121701][ T7522] kvm: kvm [7521]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 406.127067][ T7522] kvm: kvm [7521]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 406.133541][ T7531] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 406.137833][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 406.178776][ T7533] netlink: 'syz.3.395': attribute type 6 has an invalid length. [ 406.210229][ T7533] netlink: 'syz.3.395': attribute type 11 has an invalid length. [ 406.256046][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 406.268841][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 406.427724][ T7549] vcan1: entered allmulticast mode [ 406.457776][ T6252] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 406.476567][ T6252] usb 10-1: device descriptor read/8, error -71 [ 406.715242][ T6252] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 406.728636][ T7567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 406.733778][ T7567] veth1_to_bridge: mtu less than device minimum [ 406.736926][ T6252] usb 10-1: device descriptor read/8, error -71 [ 406.744579][ T7562] input: syz1 as /devices/virtual/input/input8 [ 406.794805][ T6013] Bluetooth: hci1: command tx timeout [ 406.846311][ T6252] usb usb10-port1: unable to enumerate USB device [ 407.039066][ T7584] input: syz1 as /devices/virtual/input/input9 [ 407.057010][ T7585] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 407.059548][ T7585] syzkaller0: owner set to 803 [ 407.061881][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.2.414'. [ 407.451276][ T7608] netdevsim netdevsim2: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 407.527855][ T7612] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 407.531001][ T7612] overlayfs: missing 'lowerdir' [ 407.640202][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 407.647141][ T7621] usb 2-1: USB disconnect, device number 2 [ 407.801747][ T7630] hugetlbfs: Unknown parameter 'size-e' [ 407.804469][ T7630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.425'. [ 407.878248][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 407.881644][ T7633] netlink: 'syz.3.426': attribute type 30 has an invalid length. [ 407.891175][ T6254] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.894308][ T6254] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.908015][ T6254] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.911113][ T6254] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.215714][ T5973] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 408.327139][ T7643] trusted_key: syz.5.429 sent an empty control message without MSG_MORE. [ 408.366880][ T5973] usb 8-1: Using ep0 maxpacket: 32 [ 408.371654][ T5973] usb 8-1: config 6 has an invalid interface number: 60 but max is 0 [ 408.374684][ T5973] usb 8-1: config 6 has an invalid interface number: 222 but max is 0 [ 408.378586][ T5973] usb 8-1: config 6 has an invalid interface number: 185 but max is 0 [ 408.382926][ T5973] usb 8-1: config 6 has 3 interfaces, different from the descriptor's value: 1 [ 408.387659][ T5973] usb 8-1: config 6 has no interface number 0 [ 408.390243][ T5973] usb 8-1: config 6 has no interface number 1 [ 408.392610][ T5973] usb 8-1: config 6 has no interface number 2 [ 408.395503][ T5973] usb 8-1: config 6 interface 60 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 408.400947][ T5973] usb 8-1: config 6 interface 60 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 408.406271][ T5973] usb 8-1: config 6 interface 60 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 408.410805][ T5973] usb 8-1: config 6 interface 60 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 408.415413][ T5973] usb 8-1: config 6 interface 60 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 408.419448][ T5973] usb 8-1: config 6 interface 60 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 408.424227][ T5973] usb 8-1: config 6 interface 60 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 408.430441][ T5973] usb 8-1: too many endpoints for config 6 interface 222 altsetting 241: 171, using maximum allowed: 30 [ 408.436544][ T5973] usb 8-1: config 6 interface 222 altsetting 241 has an endpoint descriptor with address 0x3E, changing to 0xE [ 408.442446][ T5973] usb 8-1: config 6 interface 222 altsetting 241 endpoint 0xE has invalid maxpacket 10577, setting to 64 [ 408.449127][ T5973] usb 8-1: config 6 interface 222 altsetting 241 has a duplicate endpoint with address 0x6, skipping [ 408.453897][ T5973] usb 8-1: config 6 interface 222 altsetting 241 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 408.459352][ T5973] usb 8-1: too many endpoints for config 6 interface 185 altsetting 152: 133, using maximum allowed: 30 [ 408.475146][ T5973] usb 8-1: config 6 interface 185 altsetting 152 has a duplicate endpoint with address 0x8, skipping [ 408.479947][ T5973] usb 8-1: config 6 interface 185 altsetting 152 bulk endpoint 0xC has invalid maxpacket 16 [ 408.484700][ T5973] usb 8-1: config 6 interface 185 altsetting 152 has a duplicate endpoint with address 0x1, skipping [ 408.489771][ T5973] usb 8-1: config 6 interface 185 altsetting 152 has a duplicate endpoint with address 0x8, skipping [ 408.496399][ T5973] usb 8-1: config 6 interface 185 altsetting 152 has an invalid descriptor for endpoint zero, skipping [ 408.501232][ T5973] usb 8-1: config 6 interface 185 altsetting 152 has 7 endpoint descriptors, different from the interface descriptor's value: 133 [ 408.507299][ T5973] usb 8-1: config 6 interface 60 has no altsetting 0 [ 408.510558][ T5973] usb 8-1: config 6 interface 222 has no altsetting 0 [ 408.514323][ T5973] usb 8-1: config 6 interface 185 has no altsetting 0 [ 408.520411][ T5973] usb 8-1: Dual-Role OTG device on HNP port [ 408.523273][ T5973] usb 8-1: New USB device found, idVendor=1fb9, idProduct=0303, bcdDevice=dd.b4 [ 408.527504][ T5973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.530615][ T5973] usb 8-1: Product: syz [ 408.532741][ T5973] usb 8-1: Manufacturer: syz [ 408.534994][ T5973] usb 8-1: SerialNumber: syz [ 408.582348][ T7653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.352175][ T41] kauditd_printk_skb: 10 callbacks suppressed [ 409.352194][ T41] audit: type=1400 audit(1759944348.813:792): avc: denied { write } for pid=7662 comm="syz.5.435" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 409.352615][ T7663] random: crng reseeded on system resumption [ 409.357426][ T41] audit: type=1400 audit(1759944348.813:793): avc: denied { open } for pid=7662 comm="syz.5.435" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 409.413196][ T7671] 9pnet: Unknown protocol version 9p20\++} [ 409.414254][ T7672] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 409.418080][ T41] audit: type=1400 audit(1759944348.883:794): avc: denied { map } for pid=7664 comm="syz.2.436" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.428993][ T41] audit: type=1400 audit(1759944348.883:795): avc: denied { execute } for pid=7664 comm="syz.2.436" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.439540][ T7665] could not allocate digest TFM handle sha1-ce [ 409.491204][ T41] audit: type=1400 audit(1759944348.953:796): avc: denied { bind } for pid=7678 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 409.585790][ T41] audit: type=1400 audit(1759944349.043:797): avc: denied { name_bind } for pid=7693 comm="syz.4.443" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 409.600625][ T7697] binder: 7684:7697 ioctl c0306201 200000000640 returned -22 [ 409.604138][ T41] audit: type=1400 audit(1759944349.063:798): avc: denied { getopt } for pid=7684 comm="syz.5.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 409.696878][ T7700] __nla_validate_parse: 2 callbacks suppressed [ 409.696892][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 409.698608][ T41] audit: type=1400 audit(1759944349.163:799): avc: denied { connect } for pid=7702 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 409.699402][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 409.709149][ T7704] 9pnet_virtio: no channels available for device syz [ 409.734962][ T7703] ip6t_srh: unknown srh match flags 4000 [ 409.738289][ T41] audit: type=1400 audit(1759944349.203:800): avc: denied { ioctl } for pid=7702 comm="syz.2.445" path="socket:[19790]" dev="sockfs" ino=19790 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 409.963769][ T7720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.449'. [ 410.014043][ T7722] tipc: Started in network mode [ 410.016572][ T7722] tipc: Node identity 8eb1600eb7ca, cluster identity 4711 [ 410.020949][ T7722] tipc: Enabled bearer , priority 0 [ 410.024581][ T7722] syzkaller0: entered promiscuous mode [ 410.029418][ T7722] syzkaller0: entered allmulticast mode [ 410.043619][ T7722] tipc: Resetting bearer [ 410.048167][ T7721] tipc: Resetting bearer [ 410.056947][ T7721] tipc: Disabling bearer [ 410.122345][ T7716] kvm: kvm [7715]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 410.140511][ T7716] kvm: kvm [7715]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 410.157456][ T7737] program syz.5.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.199210][ T7741] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 410.254266][ T7743] netlink: 'syz.2.454': attribute type 3 has an invalid length. [ 410.258459][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 410.308797][ T7745] veth0: entered promiscuous mode [ 410.317246][ T7745] pim6reg13: entered allmulticast mode [ 410.321413][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 410.377164][ T7745] veth0 (unregistering): left promiscuous mode [ 410.697377][ T7755] 9pnet_virtio: no channels available for device 127.0.0.1 [ 410.701737][ T7756] misc userio: Begin command sent, but we're already running [ 410.934409][ T5973] cp210x 8-1:6.60: cp210x converter detected [ 410.937667][ T5973] cp210x 8-1:6.60: failed to get vendor val 0x370b size 1: -71 [ 410.940256][ T5973] cp210x 8-1:6.60: querying part number failed [ 410.952934][ T5973] usb 8-1: cp210x converter now attached to ttyUSB0 [ 410.961781][ T5973] cp210x 8-1:6.222: cp210x converter detected [ 410.964466][ T5973] cp210x 8-1:6.222: failed to get vendor val 0x370b size 1: -71 [ 410.970073][ T5973] cp210x 8-1:6.222: querying part number failed [ 410.974701][ T5973] usb 8-1: cp210x converter now attached to ttyUSB1 [ 410.980276][ T5973] cp210x 8-1:6.185: cp210x converter detected [ 410.982828][ T5973] cp210x 8-1:6.185: failed to get vendor val 0x370b size 1: -71 [ 410.986294][ T5973] cp210x 8-1:6.185: querying part number failed [ 410.991139][ T5973] usb 8-1: cp210x converter now attached to ttyUSB2 [ 410.997222][ T5973] usb 8-1: USB disconnect, device number 4 [ 411.005480][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 411.022456][ T5973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 411.028395][ T5973] cp210x 8-1:6.60: device disconnected [ 411.034193][ T5973] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 411.038988][ T5973] cp210x 8-1:6.222: device disconnected [ 411.043498][ T5973] cp210x ttyUSB2: cp210x converter now disconnected from ttyUSB2 [ 411.046360][ T5973] cp210x 8-1:6.185: device disconnected [ 411.254894][ T41] audit: type=1400 audit(1759944350.713:801): avc: denied { name_connect } for pid=7766 comm="syz.4.462" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 411.419092][ T6148] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 411.428710][ T6148] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.478007][ T7786] fido_id[7786]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 411.512746][ T7794] tipc: Started in network mode [ 411.514945][ T7794] tipc: Node identity d6a587a0e3bb, cluster identity 4711 [ 411.518657][ T7794] tipc: Enabled bearer , priority 0 [ 411.522093][ T7793] syzkaller0: entered promiscuous mode [ 411.524518][ T7793] syzkaller0: entered allmulticast mode [ 411.550985][ T7793] tipc: Resetting bearer [ 411.627744][ T7798] netlink: 292 bytes leftover after parsing attributes in process `syz.4.469'. [ 411.931160][ T7820] netlink: 84 bytes leftover after parsing attributes in process `syz.5.476'. [ 411.989652][ T7827] input: syz0 as /devices/virtual/input/input12 [ 412.172564][ T7842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 412.495699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 412.535435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 412.566681][ T6070] tipc: Node number set to 891193248 [ 412.622127][ T6013] Bluetooth: hci0: unexpected event for opcode 0x204e [ 412.724200][ T7878] tmpfs: Unknown parameter 'mpond:0-1:3/5N' [ 413.693082][ T7932] ipip1: entered promiscuous mode [ 413.884400][ T7946] netlink: 56 bytes leftover after parsing attributes in process `syz.4.503'. [ 413.917462][ T7949] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 413.953612][ T7951] binder_alloc: 7943: binder_alloc_buf size 4294967360 failed, no address space [ 413.958370][ T7951] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 414.226797][ T6013] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 414.230740][ T6013] Bluetooth: hci1: Injecting HCI hardware error event [ 414.234486][ T6008] Bluetooth: hci1: hardware error 0x00 [ 414.284747][ T7976] 9pnet_fd: p9_fd_create_unix (7976): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 414.286280][ T7976] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 414.339608][ T7976] veth0_vlan: left promiscuous mode [ 414.343383][ T7976] veth0_vlan: entered promiscuous mode [ 414.348145][ T7976] team0: Device veth0_vlan failed to register rx_handler [ 414.508285][ T7989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 414.509350][ T41] kauditd_printk_skb: 12 callbacks suppressed [ 414.509367][ T41] audit: type=1400 audit(1759944353.973:814): avc: denied { ioctl } for pid=7987 comm="syz.5.515" path="socket:[21926]" dev="sockfs" ino=21926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 414.676537][ T41] audit: type=1400 audit(1759944354.143:815): avc: denied { read } for pid=7998 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.746434][ T41] audit: type=1400 audit(1759944354.213:816): avc: denied { map } for pid=8000 comm="syz.5.519" path="socket:[20047]" dev="sockfs" ino=20047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.930724][ T8011] bond1: Unable to set down delay as MII monitoring is disabled [ 414.939390][ T8011] bond1 (unregistering): Released all slaves [ 415.093671][ T8022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8022 comm=syz.5.527 [ 415.093671][ T8023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8023 comm=syz.5.527 [ 415.093698][ T8023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8023 comm=syz.5.527 [ 415.098030][ T8022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8022 comm=syz.5.527 [ 415.174929][ T41] audit: type=1400 audit(1759944354.633:817): avc: denied { mount } for pid=8026 comm="syz.5.528" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 415.214865][ T41] audit: type=1400 audit(1759944354.673:818): avc: denied { bind } for pid=8029 comm="syz.5.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.236601][ T41] audit: type=1400 audit(1759944354.703:819): avc: denied { read } for pid=8029 comm="syz.5.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 415.543007][ T41] audit: type=1400 audit(1759944355.003:820): avc: denied { remount } for pid=8037 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 415.543159][ T8038] devtmpfs: Cannot change global quota limit on remount [ 415.558375][ T8038] __nla_validate_parse: 3 callbacks suppressed [ 415.558389][ T8038] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.532'. [ 415.763750][ T41] audit: type=1400 audit(1759944355.223:821): avc: denied { ioctl } for pid=8040 comm="syz.5.533" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 415.933907][ T8044] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 416.466085][ T6008] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 417.650986][ T8038] vlan2: entered allmulticast mode [ 417.653442][ T8038] bond0: entered allmulticast mode [ 417.655466][ T8038] bond_slave_0: entered allmulticast mode [ 417.657425][ T8038] bond_slave_1: entered allmulticast mode [ 417.673032][ T41] audit: type=1400 audit(1759944357.133:822): avc: denied { unmount } for pid=6234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 417.770700][ T8062] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 417.773772][ T8062] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 417.782463][ T8062] vhci_hcd vhci_hcd.0: Device attached [ 417.789384][ T41] audit: type=1400 audit(1759944357.253:823): avc: denied { setopt } for pid=8061 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 417.789523][ T8064] vhci_hcd: connection closed [ 417.800705][ T6254] vhci_hcd: stop threads [ 417.806488][ T6254] vhci_hcd: release socket [ 417.808388][ T6254] vhci_hcd: disconnect device [ 417.866438][ T8072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 417.883386][ T8070] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 417.890056][ T8070] block device autoloading is deprecated and will be removed. [ 417.896142][ T8069] md: md2 stopped. [ 417.942847][ T8076] 9pnet: Could not find request transport: virti5x o [ 418.014575][ T8083] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 418.019425][ T8083] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 418.045891][ T8083] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 418.050231][ T8083] overlayfs: failed to look up (tracing) for ino (-66) [ 418.308820][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.5.551'. [ 418.401650][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 418.407020][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 418.410594][ T8099] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 418.413646][ T8099] UDF-fs: Scanning with blocksize 512 failed [ 418.419892][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 418.423096][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 418.428597][ T8099] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 418.431753][ T8099] UDF-fs: Scanning with blocksize 1024 failed [ 418.434517][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 418.439909][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 418.443097][ T8099] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 418.446060][ T8099] UDF-fs: Scanning with blocksize 2048 failed [ 418.448641][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 418.453011][ T8099] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 418.457235][ T8099] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 418.460259][ T8099] UDF-fs: Scanning with blocksize 4096 failed [ 418.462613][ T8099] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 418.617003][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 418.767765][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.772703][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.777088][ T29] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 418.780745][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.786970][ T29] usb 8-1: config 0 descriptor?? [ 419.090595][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 419.093023][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 419.096770][ T29] usb 8-1: USB disconnect, device number 5 [ 437.490976][ T8116] overlayfs: failed to resolve './file1': -2 [ 437.509439][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 437.509454][ T41] audit: type=1400 audit(1759944376.973:831): avc: denied { listen } for pid=8119 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 437.526872][ T8128] overlayfs: failed to clone lowerpath [ 437.553803][ T8131] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 437.623072][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 437.624523][ T41] audit: type=1400 audit(1759944377.083:832): avc: denied { execmem } for pid=8137 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 437.633288][ T8136] xfrm1: entered promiscuous mode [ 437.640259][ T8136] xfrm1: entered allmulticast mode [ 437.735583][ T1331] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 437.755341][ T8153] 9pnet_fd: Insufficient options for proto=fd [ 437.887925][ T1331] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 437.891612][ T1331] usb 10-1: config 0 has no interface number 0 [ 437.894675][ T1331] usb 10-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 437.899898][ T1331] usb 10-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 437.903902][ T1331] usb 10-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 437.908376][ T1331] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 437.912197][ T1331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.922670][ T1331] usb 10-1: config 0 descriptor?? [ 437.929008][ T1331] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.120/input/input14 [ 437.997640][ C1] usbtouchscreen 10-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 438.129988][ T41] audit: type=1400 audit(1759944377.593:833): avc: denied { read append } for pid=8117 comm="syz.5.556" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 438.140175][ T41] audit: type=1400 audit(1759944377.593:834): avc: denied { open } for pid=8117 comm="syz.5.556" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 438.277615][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.572'. [ 438.373010][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 438.393884][ T29] usb 10-1: USB disconnect, device number 6 [ 438.394036][ C3] usbtouchscreen 10-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 438.990798][ T8190] netlink: 48 bytes leftover after parsing attributes in process `syz.5.578'. [ 438.994005][ T8190] netlink: 48 bytes leftover after parsing attributes in process `syz.5.578'. [ 439.009366][ T8192] netlink: 32 bytes leftover after parsing attributes in process `syz.4.579'. [ 439.135488][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 439.220423][ T8214] fuse: Bad value for 'fd' [ 439.290347][ T29] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 439.294472][ T29] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.299567][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.304293][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.310859][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.316806][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.320116][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.323901][ T29] usb 8-1: config 0 descriptor?? [ 439.326515][ T8184] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.385349][ T8208] xt_l2tp: wrong L2TP version: 0 [ 439.439943][ T41] audit: type=1800 audit(1759944378.903:835): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.591" name="nullb0" dev="tmpfs" ino=714 res=0 errno=0 [ 439.524089][ T41] audit: type=1400 audit(1759944378.983:836): avc: denied { name_bind } for pid=8227 comm="syz.4.592" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 439.973758][ T41] audit: type=1400 audit(1759944379.433:837): avc: denied { map } for pid=8183 comm="syz.3.575" path="socket:[23233]" dev="sockfs" ino=23233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.974615][ T8184] afs: Unexpected value for 'dyn' [ 439.982675][ T41] audit: type=1400 audit(1759944379.433:838): avc: denied { accept } for pid=8183 comm="syz.3.575" path="socket:[23233]" dev="sockfs" ino=23233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.992122][ T29] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 440.002085][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 440.195356][ T41] audit: type=1400 audit(1759944379.653:839): avc: denied { setattr } for pid=8183 comm="syz.3.575" path="/dev/mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 440.257349][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.260688][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.267357][ T29] usb 8-1: USB disconnect, device number 6 [ 440.483243][ T41] audit: type=1400 audit(1759944379.943:840): avc: denied { checkpoint_restore } for pid=8239 comm="syz.5.597" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.858999][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 440.918198][ T8267] gfs2: error -5 reading superblock [ 440.983274][ T8270] netlink: 'syz.3.604': attribute type 39 has an invalid length. [ 440.983759][ T8272] netlink: 'syz.3.604': attribute type 39 has an invalid length. [ 441.131563][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.607'. [ 441.480988][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.614'. [ 441.510363][ T8298] syz_tun: entered allmulticast mode [ 441.666729][ T8298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 441.672086][ T8298] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 441.688487][ T8298] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 441.695016][ T8298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 441.697629][ T8298] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 441.701425][ T8298] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 441.705365][ T8298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.707915][ T8298] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 441.714515][ T8298] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 441.728478][ T8297] syz_tun: left allmulticast mode [ 442.251995][ T8344] overlay: Unknown parameter './file0' [ 442.294071][ T8353] random: crng reseeded on system resumption [ 442.543459][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 442.696823][ T41] kauditd_printk_skb: 19 callbacks suppressed [ 442.696839][ T41] audit: type=1400 audit(1759944382.163:860): avc: denied { create } for pid=8401 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 442.769154][ T8408] netlink: 'syz.4.643': attribute type 9 has an invalid length. [ 442.778377][ T8405] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.783306][ T8405] block device autoloading is deprecated and will be removed. [ 442.866079][ T8410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.900290][ T8410] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 442.937667][ T8415] syzkaller1: entered promiscuous mode [ 442.939695][ T8415] syzkaller1: entered allmulticast mode [ 442.965777][ T8417] XFS (nbd5): SB validate failed with error -5. [ 443.027144][ T41] audit: type=1400 audit(1759944382.493:861): avc: denied { read write } for pid=8425 comm="syz.2.649" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.035554][ T41] audit: type=1400 audit(1759944382.493:862): avc: denied { open } for pid=8425 comm="syz.2.649" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.050113][ T41] audit: type=1400 audit(1759944382.513:863): avc: denied { append } for pid=8425 comm="syz.2.649" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.277485][ T41] audit: type=1400 audit(1759944382.743:864): avc: denied { write } for pid=8470 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.287387][ T41] audit: type=1400 audit(1759944382.743:865): avc: denied { nlmsg_read } for pid=8470 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 443.296316][ T41] audit: type=1400 audit(1759944382.763:866): avc: denied { setattr } for pid=8474 comm="syz.3.655" name="file5" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 443.305155][ T1338] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 443.308663][ T41] audit: type=1400 audit(1759944382.763:867): avc: denied { rename } for pid=8474 comm="syz.3.655" name="file5" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 443.325129][ T6070] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 443.455366][ T1338] usb 10-1: Using ep0 maxpacket: 16 [ 443.459800][ T1338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12615, setting to 64 [ 443.465516][ T1338] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.469597][ T1338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.473289][ T1338] usb 10-1: Product: syz [ 443.475486][ T1338] usb 10-1: Manufacturer: syz [ 443.477978][ T1338] usb 10-1: SerialNumber: syz [ 443.482458][ T1338] usb 10-1: config 0 descriptor?? [ 443.487435][ T1338] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 443.488221][ T6070] usb 7-1: config 1 has an invalid interface number: 6 but max is 2 [ 443.490880][ T1338] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 443.494780][ T6070] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 443.495269][ T8517] macsec0: entered promiscuous mode [ 443.495378][ T8517] macsec0: entered allmulticast mode [ 443.495387][ T8517] veth1_macvtap: entered allmulticast mode [ 443.506329][ T6070] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 443.509399][ T6070] usb 7-1: config 1 has no interface number 1 [ 443.511989][ T6070] usb 7-1: too many endpoints for config 1 interface 6 altsetting 16: 108, using maximum allowed: 30 [ 443.516145][ T6070] usb 7-1: config 1 interface 6 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 108 [ 443.521985][ T6070] usb 7-1: config 1 interface 6 has no altsetting 0 [ 443.526774][ T6070] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.530030][ T6070] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.533195][ T6070] usb 7-1: Product: 㐁 [ 443.534920][ T6070] usb 7-1: Manufacturer: 㒆霽 [ 443.536809][ T6070] usb 7-1: SerialNumber: ఄ [ 443.585219][ T6008] Bluetooth: hci3: command 0x0c1a tx timeout [ 443.615153][ T41] audit: type=1107 audit(1759944383.073:868): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='acgJuZiC/g' [ 443.619745][ T41] audit: type=1107 audit(1759944383.083:869): pid=8518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='acgJuZiC/g' [ 443.651919][ T8524] vlan2: entered promiscuous mode [ 443.653595][ T8524] bridge0: entered promiscuous mode [ 443.745268][ T6008] Bluetooth: hci0: command 0x040f tx timeout [ 443.748315][ T6013] Bluetooth: hci2: command 0x0406 tx timeout [ 443.755193][ T1338] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 443.824083][ T1338] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 443.829477][ T1338] em28xx 10-1:0.0: board has no eeprom [ 443.885185][ T1338] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 443.888354][ T1338] em28xx 10-1:0.0: dvb set to bulk mode. [ 443.890814][ T6007] em28xx 10-1:0.0: Binding DVB extension [ 443.899457][ T1338] usb 10-1: USB disconnect, device number 7 [ 443.905197][ T1338] em28xx 10-1:0.0: Disconnecting em28xx [ 443.928874][ T6007] em28xx 10-1:0.0: Registering input extension [ 443.931435][ T1338] em28xx 10-1:0.0: Closing input extension [ 443.943835][ T1338] em28xx 10-1:0.0: Freeing device [ 444.033817][ T8535] overlayfs: missing 'lowerdir' [ 444.245770][ T8545] netlink: 'syz.3.668': attribute type 10 has an invalid length. [ 444.249286][ T8545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.668'. [ 444.252622][ T8545] dummy0: entered promiscuous mode [ 444.257630][ T8545] bridge0: port 1(dummy0) entered blocking state [ 444.261148][ T8545] bridge0: port 1(dummy0) entered disabled state [ 444.264260][ T8545] dummy0: entered allmulticast mode [ 444.270940][ T8545] bridge0: port 1(dummy0) entered blocking state [ 444.272766][ T6070] usb 7-1: 0:2 : does not exist [ 444.274370][ T8545] bridge0: port 1(dummy0) entered forwarding state [ 444.305565][ T6070] usb 7-1: USB disconnect, device number 3 [ 444.311538][ T8549] ================================================================== [ 444.311549][ T8549] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 444.311586][ T8549] Write of size 8 at addr ffffc900052c9000 by task syz.2.670/8549 [ 444.311597][ T8549] [ 444.311603][ T8549] CPU: 1 UID: 0 PID: 8549 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(full) [ 444.311618][ T8549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.311626][ T8549] Call Trace: [ 444.311631][ T8549] [ 444.311636][ T8549] dump_stack_lvl+0x116/0x1f0 [ 444.311657][ T8549] print_report+0xcd/0x630 [ 444.311670][ T8549] ? __virt_addr_valid+0x81/0x610 [ 444.311688][ T8549] ? sys_imageblit+0x1a6f/0x1e60 [ 444.311701][ T8549] kasan_report+0xe0/0x110 [ 444.311713][ T8549] ? sys_imageblit+0x1a6f/0x1e60 [ 444.311727][ T8549] sys_imageblit+0x1a6f/0x1e60 [ 444.311742][ T8549] ? __pfx_sys_imageblit+0x10/0x10 [ 444.311757][ T8549] ? do_raw_spin_lock+0x12c/0x2b0 [ 444.311771][ T8549] ? find_held_lock+0x2b/0x80 [ 444.311786][ T8549] ? queue_work_on+0x12a/0x1f0 [ 444.311798][ T8549] ? lockdep_hardirqs_on+0x7c/0x110 [ 444.311814][ T8549] ? queue_work_on+0x8b/0x1f0 [ 444.311826][ T8549] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 444.311840][ T8549] bit_putcs+0x912/0xde0 [ 444.311860][ T8549] ? __pfx_bit_putcs+0x10/0x10 [ 444.311875][ T8549] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 444.311890][ T8549] ? fb_get_color_depth+0x120/0x250 [ 444.311905][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.311921][ T8549] ? __pfx_bit_putcs+0x10/0x10 [ 444.311937][ T8549] fbcon_putcs+0x384/0x450 [ 444.311953][ T8549] do_update_region+0x2e6/0x3f0 [ 444.311969][ T8549] invert_screen+0x1e4/0x590 [ 444.311981][ T8549] ? __pfx_invert_screen+0x10/0x10 [ 444.311992][ T8549] ? __pfx_complement_pos+0x10/0x10 [ 444.312003][ T8549] ? vc_do_resize+0x24d/0x10e0 [ 444.312013][ T8549] ? __vmalloc_node_noprof+0xad/0xf0 [ 444.312026][ T8549] clear_selection+0x59/0x70 [ 444.312043][ T8549] vc_do_resize+0xd9b/0x10e0 [ 444.312056][ T8549] ? __pfx_vc_do_resize+0x10/0x10 [ 444.312069][ T8549] fbcon_set_disp+0x7ad/0xe50 [ 444.312084][ T8549] set_con2fb_map+0x703/0x1080 [ 444.312101][ T8549] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 444.312118][ T8549] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 444.312135][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.312149][ T8549] do_fb_ioctl+0x328/0x7e0 [ 444.312183][ T8549] ? __pfx_do_fb_ioctl+0x10/0x10 [ 444.312200][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.312222][ T8549] ? selinux_file_ioctl+0x180/0x270 [ 444.312235][ T8549] fb_ioctl+0xe5/0x150 [ 444.312246][ T8549] ? __pfx_fb_ioctl+0x10/0x10 [ 444.312258][ T8549] __x64_sys_ioctl+0x18e/0x210 [ 444.312274][ T8549] do_syscall_64+0xcd/0xfa0 [ 444.312291][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.312303][ T8549] RIP: 0033:0x7f962518eec9 [ 444.312313][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.312324][ T8549] RSP: 002b:00007f9625ff0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.312335][ T8549] RAX: ffffffffffffffda RBX: 00007f96253e5fa0 RCX: 00007f962518eec9 [ 444.312342][ T8549] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 444.312349][ T8549] RBP: 00007f9625211f91 R08: 0000000000000000 R09: 0000000000000000 [ 444.312355][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.312362][ T8549] R13: 00007f96253e6038 R14: 00007f96253e5fa0 R15: 00007fff7511c138 [ 444.312373][ T8549] [ 444.312377][ T8549] [ 444.312381][ T8549] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90004fc9000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 444.312404][ T8549] Memory state around the buggy address: [ 444.312410][ T8549] ffffc900052c8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.312418][ T8549] ffffc900052c8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 444.312426][ T8549] >ffffc900052c9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 444.312432][ T8549] ^ [ 444.312438][ T8549] ffffc900052c9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 444.312445][ T8549] ffffc900052c9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 444.312452][ T8549] ================================================================== [ 444.312458][ T8549] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 444.312466][ T8549] CPU: 1 UID: 0 PID: 8549 Comm: syz.2.670 Not tainted syzkaller #0 PREEMPT(full) [ 444.312479][ T8549] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 444.312486][ T8549] Call Trace: [ 444.312490][ T8549] [ 444.312494][ T8549] dump_stack_lvl+0x3d/0x1f0 [ 444.312510][ T8549] vpanic+0x640/0x6f0 [ 444.312527][ T8549] panic+0xca/0xd0 [ 444.312543][ T8549] ? __pfx_panic+0x10/0x10 [ 444.312570][ T8549] check_panic_on_warn+0xab/0xb0 [ 444.312581][ T8549] end_report+0x107/0x170 [ 444.312593][ T8549] kasan_report+0xee/0x110 [ 444.312605][ T8549] ? sys_imageblit+0x1a6f/0x1e60 [ 444.312620][ T8549] sys_imageblit+0x1a6f/0x1e60 [ 444.312635][ T8549] ? __pfx_sys_imageblit+0x10/0x10 [ 444.312648][ T8549] ? do_raw_spin_lock+0x12c/0x2b0 [ 444.312663][ T8549] ? find_held_lock+0x2b/0x80 [ 444.312680][ T8549] ? queue_work_on+0x12a/0x1f0 [ 444.312692][ T8549] ? lockdep_hardirqs_on+0x7c/0x110 [ 444.312707][ T8549] ? queue_work_on+0x8b/0x1f0 [ 444.312721][ T8549] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 444.312734][ T8549] bit_putcs+0x912/0xde0 [ 444.312755][ T8549] ? __pfx_bit_putcs+0x10/0x10 [ 444.312771][ T8549] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 444.312785][ T8549] ? fb_get_color_depth+0x120/0x250 [ 444.312800][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.312815][ T8549] ? __pfx_bit_putcs+0x10/0x10 [ 444.312832][ T8549] fbcon_putcs+0x384/0x450 [ 444.312847][ T8549] do_update_region+0x2e6/0x3f0 [ 444.312864][ T8549] invert_screen+0x1e4/0x590 [ 444.312875][ T8549] ? __pfx_invert_screen+0x10/0x10 [ 444.312886][ T8549] ? __pfx_complement_pos+0x10/0x10 [ 444.312897][ T8549] ? vc_do_resize+0x24d/0x10e0 [ 444.312907][ T8549] ? __vmalloc_node_noprof+0xad/0xf0 [ 444.312921][ T8549] clear_selection+0x59/0x70 [ 444.312937][ T8549] vc_do_resize+0xd9b/0x10e0 [ 444.312951][ T8549] ? __pfx_vc_do_resize+0x10/0x10 [ 444.312964][ T8549] fbcon_set_disp+0x7ad/0xe50 [ 444.312979][ T8549] set_con2fb_map+0x703/0x1080 [ 444.312997][ T8549] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 444.313014][ T8549] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 444.313033][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.313048][ T8549] do_fb_ioctl+0x328/0x7e0 [ 444.313059][ T8549] ? __pfx_do_fb_ioctl+0x10/0x10 [ 444.313072][ T8549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 444.313093][ T8549] ? selinux_file_ioctl+0x180/0x270 [ 444.313105][ T8549] fb_ioctl+0xe5/0x150 [ 444.313115][ T8549] ? __pfx_fb_ioctl+0x10/0x10 [ 444.313126][ T8549] __x64_sys_ioctl+0x18e/0x210 [ 444.313141][ T8549] do_syscall_64+0xcd/0xfa0 [ 444.313158][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.313169][ T8549] RIP: 0033:0x7f962518eec9 [ 444.313177][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.313188][ T8549] RSP: 002b:00007f9625ff0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.313199][ T8549] RAX: ffffffffffffffda RBX: 00007f96253e5fa0 RCX: 00007f962518eec9 [ 444.313206][ T8549] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 444.313213][ T8549] RBP: 00007f9625211f91 R08: 0000000000000000 R09: 0000000000000000 [ 444.313220][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.313227][ T8549] R13: 00007f96253e6038 R14: 00007f96253e5fa0 R15: 00007fff7511c138 [ 444.313238][ T8549] [ 444.314104][ T8549] Kernel Offset: disabled VM DIAGNOSIS: 17:26:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff8160e843 RDX=ffff88802a282480 RSI=ffffffff8160e88b RDI=ffffffff93a92fe0 RBP=ffff88806a420000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27525fc R10=ffffffff93a92fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8160e88c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c0fbb12f8 CR3=0000000024778000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000029 Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff730cae28 00007fff730cae28 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff730cb000 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0bd503d20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b9ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b9ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732693ce3e2483 7373269690517859 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f387bc6dc9837b59 737373762d78a793 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317570632f302f71 6d2f33706f6f6c2f 6b636f6c622f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000000000000000 0000000000003175 70632f302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 376273752f322e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80f4cf1ebaf0082a 000055e5e346f3a5 0000000000000081 0000003077617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a0049000a0000 0a000a00645f205f 646d5f000a00004d 544e472000004600 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f8a55 RDI=ffffffff9ae017e0 RBP=ffffffff9ae017a0 RSP=ffffc90007f9ef90 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000034353854 R12=0000000000000000 R13=000000000000005d R14=ffffffff9ae017a0 R15=ffffffff852f89f0 RIP=ffffffff852f8a7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9625ff06c0 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f50ba548df4 CR3=000000004925c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000009 Opmask02=00000000ffffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff730cae68 00007fff730cae68 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff730cb040 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e0bd4ef7b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b9ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50b9ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732693ce3e2483 7373269690517859 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f387bc6dc9837b59 737373762d78a793 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f716d2f33706f 6f6c2f6b636f6c62 2f6c617574726976 2f73656369766564 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80f4cf1ebaf0082a 000055e5e3467f35 0000000000000171 000000302f716d2f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 376273752f322e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80f4cf1ebaf0082a 000055e5e346f3a5 0000000000000081 0000003077617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a0049000a0000 0a000a00645f205f 646d5f000a00004d 544e472000004600 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010002 RBX=0000000000000000 RCX=ffffffff8160e843 RDX=ffff888024398000 RSI=ffffffff8160e88b RDI=ffffffff93a92fe0 RBP=ffff88806a620000 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27525fc R10=ffffffff93a92fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8160e88c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555574000500 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c107156c0 CR3=0000000059983000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffda27a6a00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c0fa12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c0fa12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c0fa12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c0fa12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c0fa1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7c0fa1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010003 RBX=0000000000000000 RCX=ffffffff8160e843 RDX=ffff8880265c2480 RSI=ffffffff8160e88b RDI=ffffffff93a92fe0 RBP=ffff88806a720000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27525fc R10=ffffffff93a92fe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8160e88c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557d21a500 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa4529156c0 CR3=000000005094f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff6f9977a0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa451c12fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa451c12fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa451c12fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa451c12fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa451c1305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa451c1313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000d4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000