last executing test programs: 1m14.359898656s ago: executing program 1 (id=5): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x3}, 0x18) sendmmsg$sock(r3, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)='~', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xb15}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) ppoll(&(0x7f0000000140), 0x0, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0xfffffffffffffffe]}, 0x8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003042000"/20, @ANYRES32=0x0, @ANYBLOB="b0080380000000002c00128008000100736974002000028008000100", @ANYRES32, @ANYBLOB="14000b"], 0x4c}}, 0x0) r8 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r8}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1a) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f0000000240)={0x11, 0xf6, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m13.546323426s ago: executing program 1 (id=13): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)={0x4b0, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0xd, 0x4, 0xfc40, 0xba26}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xf8, 0xfa, "78f3ad25b50a55e7f3a3741e73447387f33137a473b1c69cd3efb6215e6b42d6fa817a1d816bf44a1759327d650b2340e44683b1dc390ef28fb6fd028858dfa13ad0257d3b5ad1b016905eae8bc6859e574a2156e1649a9180c422084b833d5c86dd17badcac5a84523aaa3ca0363bd3022aceb9c0f1232f457c169bf1d284d5ad4791751118c5d7f5b30fd1a87bd7011298da9dcba92745bae302ce102d5c69e8b2c612c6a0c1d2569fa127bf5bd5a8abc507d7b8af9a6237237c78d9891d12a8f3c28eb965d66c66a7755f03c4649d798917159a818d1366b2db41887af62a2f0f117f21e2a17a751a73ed7b6c6437e4664c21"}], @NL80211_ATTR_IE={0xbd, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x9, @void, @val=0x1f, @val="b972be106dddd47313965732f3b61280"}}, @random_vendor={0xdd, 0x9f, "24444007dd77ae8ae9b40270815dc36d639cfee5482309ee34c9170bf7eaef8fbb68fb0024778d396b8aa5226ed7f6f2d393d09e7d5e111154df28a31bc4842908dbdece5163c8afe64a62e184dfdda035697adac909b6649a9ee772868c5bc5f07bad14f1e95c125ec9e0a5f0bc01efc0dc092dc7d8fe77a5a2efea4ae54a1e9f5ebf659d8a7889c5cf8a2f18b0d1e1a755c03ea75e5d0707403ecbe8239c"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x64}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xd1, 0xfa, "7da6337a933fcebbd83695f53f6e9e1dc4200ee4ffdf1ff067f38cb5dd083c4d38fafd2c13343113e481d63732e68aa504dbf2f87d6d05b7322288a1e6b918b00f8679ad2d561dfff2c5eb94aae7da6226d6184f18d8dcf42315083a1f83a968af3dc4f7dedb6afe5e7195544448bcb31d704bdcd33b92383d594e36417cbbda583f3da681b25f37cbd8782ddde67707ee12c2d199058617cc17cc8b20fdf791002dbda59ea968c48062efd328b88e9cf740d42cf649e122984fc09b4d55a678b09d4ac9fd4d2fee5de14a8db2"}], @NL80211_ATTR_IE={0x1f2, 0x2a, [@measure_req={0x26, 0xca, {0x1, 0x3, 0x8, "b121c7d40fa3e7450bc40a5634e1fffcdedd9a3009310ff88cd947cc915454e02489c17e7a8db7d52fea604da588549f26220b7ba5d8a859a3dfbd3bfa52a1ecd44e6a4ee791e5022d934e8834a8dd74f856d2d5bff938ea9c3170996a0a071edd64100a2561c845ec885f0d4d608e10134bdd4aa6df34148d4679a8119ab5a4af500e7a47e7ee7344f8aab4959d1d562baa292fc342b71f3d79313b03f46ca9a190a0190823e7e1f5f30cdd7c37d33b83ef2e782c8306f03d96899abbbaea1b8569f4c5501706"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @device_b}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x0, 0x3, 0x34, 0xfff9}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x54, 0x61}}, @perr={0x84, 0xe8, {0xb, 0xe, [{{0x0, 0x1}, @device_a, 0x200cee5c, @value=@broadcast, 0x22}, {{}, @device_a, 0x5, @void, 0x3}, {{}, @device_a, 0x6, @void, 0x23}, {{}, @device_a, 0x1, @void, 0x28}, {{0x0, 0x1}, @broadcast, 0x0, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x38}, {{}, @broadcast, 0x5, @void, 0x25}, {{}, @device_b, 0x7, @void, 0x33}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x5}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x39}, {{0x0, 0x1}, @device_b, 0xa35, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_b, 0xc, @value, 0x24}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x41}, {{}, @broadcast, 0x7, @void, 0x10}]}}, @mesh_chsw={0x76, 0x6, {0x6, 0x9, 0x25, 0x1}}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bind$can_raw(r2, &(0x7f0000000340)={0x1d, r3}, 0x10) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) (async) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040)) 1m13.469414292s ago: executing program 1 (id=14): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r2], 0x50) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x74, r2}) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0xc0045003, &(0x7f0000001140)) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m13.468746628s ago: executing program 1 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002580)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 1m13.399761049s ago: executing program 1 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x1, 0x7, 0x0, 0xbd5, {{0x27, 0x4, 0x1, 0x16, 0x9c, 0x67, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, {[@noop, @cipso={0x86, 0x26, 0x3, [{0x1, 0x4, '\f\t'}, {0x6, 0x2}, {0x2, 0xe, "3acc829ee2058b24ff5c5656"}, {0x6, 0xc, "e900ecff6409c30f1bb5"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x2, [{@multicast2, 0x8}]}, @timestamp={0x44, 0x8, 0x42, 0x0, 0xd, [0x1]}, @cipso={0x86, 0x41, 0x2, [{0x2, 0xa, "9bc6d47a513078d7"}, {0x6, 0xe, "be366f6ae890796b0d1d4204"}, {0x1, 0x3, "d4"}, {0x7, 0x12, "90e0cb563b6846d41980e26b7afd8240"}, {0xc, 0xe, "95d80778820f25c69a3fed01"}]}, @noop, @ssrr={0x89, 0x7, 0xb2, [@local]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x9, 0x8, 0x4, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x393a77b7, 0x80000000}}) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) setpgid(0x0, r9) lsetxattr$security_selinux(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x4, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x66, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @loopback, {[@ssrr={0x89, 0x13, 0x9e, [@local, @loopback, @multicast2, @remote]}, @timestamp_prespec={0x44, 0xc, 0xb4, 0x3, 0x0, [{@private=0xa010102, 0x7fff}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x168, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x11, 0x3, "b758fa9da78a89f2fb2b15eef9"}, @ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x7b, 0x3, "0fa858b73b4779a8d9dcdfe42085bf48a972b109cb9bb566356227bca646e3a7194e8b7e0549333103bf2cbf555ab11ad027a2d4bd1ea9b8aa5c2a3dfe493167b52d15c774f2e1d5a5dfb0fe24799e55fcd529dca1237cf3d56c39b5176e50f965efceec162041cbc809329c3d93204c73951ea8637338"}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x40844}, 0x24000040) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf254300000008000300", @ANYRES32=r1, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 1m13.39795732s ago: executing program 1 (id=18): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000000)={0x2a, 0x1}, 0xc) (async) bind$qrtr(r4, &(0x7f0000000100)={0x2a, 0x1}, 0xc) (async) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000a92000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x80000002, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r13 = openat$cgroup_procs(r10, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000080)=r5, 0x12) 51.27083277s ago: executing program 32 (id=18): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, &(0x7f0000000000)={0x2a, 0x1}, 0xc) (async) bind$qrtr(r4, &(0x7f0000000100)={0x2a, 0x1}, 0xc) (async) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000a92000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="0000090000980500000000000800", 0x0, 0x80000002, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r13 = openat$cgroup_procs(r10, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000080)=r5, 0x12) 7.099100765s ago: executing program 0 (id=853): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendfile(r0, r1, 0x0, 0xf2) (async) openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000090300000000000000000000010500000008000000000000000000008300"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 64) write$cgroup_int(r1, &(0x7f0000000040)=0x5, 0x12) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x10140, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000d92c5f63cb4d847beceb4e51ef000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) socket$inet(0x2, 0x3, 0x9) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r4, 0x0, 0x0}, 0x20) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010003007f0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl_fd$Q_GETQUOTA(r2, 0x0, r7, &(0x7f00000001c0)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async, rerun: 32) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r8], 0x3c}}, 0x10) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000080)={0x1, 0x3}) 7.026343846s ago: executing program 0 (id=854): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) statx(r0, &(0x7f0000001380)='./file0\x00', 0x1000, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x27}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@version_u}]}}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = getpid() wait4(r6, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd2c, 0x40000) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000080)={0x8}) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2f5f, 0x103) 6.548570125s ago: executing program 0 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r3 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x9b, 0x4) bind$rds(r3, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 4.647122287s ago: executing program 0 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = getpgrp(0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) prctl$PR_SET_PTRACER(0x59616d61, r2) prctl$PR_SET_PTRACER(0x59616d61, 0x0) mknodat$loop(r3, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@mh={{0x28}, {"d4af", 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x34, "6f1a097263367c197c94207ab4036259c0b0ff35d4ecf0ea66a4bb579e55"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) getpgrp(0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') (async) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) (async) prctl$PR_SET_PTRACER(0x59616d61, r2) (async) prctl$PR_SET_PTRACER(0x59616d61, 0x0) (async) mknodat$loop(r3, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@mh={{0x28}, {"d4af", 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x34, "6f1a097263367c197c94207ab4036259c0b0ff35d4ecf0ea66a4bb579e55"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="02"], 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) 4.4886171s ago: executing program 0 (id=865): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000000)={"fe080800", 0x5, 0x6, 0x2, 0x0, 0x200, "33777877c734c4f928875ab8db00", '\x00', "020100", '\x00\x00\t\x00', ["a51c00a60100", "00000000fa66ee4000000200", "2c09000000ffd8ffff0000ff", "000500"]}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000004300)) socket$qrtr(0x2a, 0x2, 0x0) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) 4.176113345s ago: executing program 0 (id=868): socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x4) r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000980)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000010c0)='./file0/../file0/../file0\x00') r1 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$unix(r0, &(0x7f00000028c0), 0x0, 0x100, &(0x7f0000002900)=@file={0x1, './file0/../file0/../file0\x00'}, 0x6e) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}}, 0x24}}, 0x44080) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000057c0)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r7, @ANYBLOB="021000000a000200", @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xf7, 0x7, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x8000, 0x20, 0x8, 0x61}}) sendmmsg$inet(r1, &(0x7f0000002700)=[{{&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000580)=[{&(0x7f00000000c0)="14416b26d1822cce57767175920e754d0c45c4937f7327b3f24219297ec2d8d5e4d142c6871654309340440a9122ba5af76ec27606bc76023a5601286445073a324fa469e5c1d54072bd2e7464d981f8ccfe1c9325b1c3823b5e", 0x5a}, {&(0x7f0000000340)="234ba80a2792abe72f02476340f9aa7ba4f07f6a1dc016aa71d5374612f8d66ebf05681ba49bdd75b76931d6ca6ee8e9fef3025f31f6811cf6f4bee4e8792dc73f3b413a0d1bc59e6c5c1005d1f7738697a95faf370d0b6ca2377b8e60d89b77c9df22e43a37698eacf2863aaf3d40682e8ff73c2c475e64212a1e80fba68cf8f82ce10de5ad0a7f1ef4b318f92c30533f3ff26d0222930b7454a9a17d13b9d6d41ece9c3b9625f5dd2200aae8046e268744a57b3d6dfa60f73747ce9b0e696ef9929e21a18fc02b465827f75eba8f817091f3583fe0f3b39cb5d38f397f891b1fdd750cc8dd055857940dedb4bfe1d48b96ea6a5708", 0xf6}, {&(0x7f0000000440)="6efc60ad8d51129f79ee2cd86ec9b7ea3bbe6bc611011c267a9da6873fe72e22ac0ffc10ea80b8d1000092f6c5626c6a82f1743a3b492944499c157b0ef3a95e7990976e8636a78ad42243f72e0fb60203d33435e1120a21617e4adc07702cc133603cb16d2d7e586085b90a10cd7bf95a5de40f27455eead91de92107ffda141b27b2a8e9", 0x85}, {&(0x7f0000000140)="d619163e5fe4d2e827c1b1b381f2e452cb96fb5eb5760146743aa65a5eb7dbf86f898388aed15329f07493fa6532dad4dd9bb6f50a", 0x35}, {&(0x7f0000000500)="c5df4f0de0c95b2e64fa429f009c4ce8d2759e12383a10416c35ff446b75c2686f6958d05faa7b8429a05d520e86d9724d68aae5bc6b58013f7f9abace53e5a342c095fd37058bfce5ab2bd57dd9a17653c573d222205f88ec8534f16cee3ddf9e2e0085ef90c3f4fc5f6ee94dc6fd82534050401b7ba3", 0x77}], 0x5, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdf2c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="2883a1215f8a54c07a853f32af56d736", 0x10}, {&(0x7f0000000680)="a6dd88efa02f0996a1365be8d16ed8cba37affcc79d5125b2d1f8817a86461650d500f36e422f29a08b57f5f98a937354a0dc07bdbc7a70ca92be04832209406a3162353e25d577a0b9dcde44f85581fc190931a738ba47fd46c96dcfcb9f6c1d5ee5e98fad5fd008e8c4e", 0x6b}, {&(0x7f0000000840)="25a1278afd64be76075271449f30333c23791bac4fea94b71c88638500b3e9bb7696a280e61afa2d1beee6be9f933f77cfdbbb30dfc43007a3eca8996b5e8cd0a261e898d0ded0d9bd2261813b911af2260e27c4b297349606958cba15710154e7559f4edd0163b255e279cfca369b80e839d4315ac523b3f05b710758372b261ae9d4f4d82e79237bff9adc17f5898a17b0798f29423ffc38f00644b173feb1f370f3e5c5b6114c3f06a78bb713bae6546bc169dd6c37fbc787956969b15cf20076e11b44b9955eb389098fec27ea6dcb7a2c791d767edf9bdc428b3dea69939edfe3ab87501516be932b", 0xeb}], 0x3, &(0x7f0000002ac0)=ANY=[@ANYBLOB="24000000000000800000000007000000440c2f91ffffffff000003ff8307f500001c8086528a12ca7d09be32a3000000000000001c000000000000000000000022000000", @ANYRES32=r7, @ANYBLOB="e00000017f00000100000000110000000000000000000000010000000a000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002ac1e000100000000110000000000000000000000010000000900000000000000140000000000000000000000010000000000240000000000400000000000000000000000070000000705aad6ca892ba2ac1e0101ac14142ee000000164010102e0000001ac1e0101e0000001e00000017f000001ac1e0101"], 0xf0}}, {{&(0x7f0000000700)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000a40)="35e2925c2e28ec2da98be62f88bcf672c661b186f92c0a8c273862ff9dafe1a9dc7b10b973307a65fbfbd71f5ccdb4a8ce58fa7b36f500ec5b17ba765129c95e4abc38c3e6adcb9323d0cc1d1a1a4f9e0be0d1f33cca50cbbb822e7af49662d4b5fdebb95f4d53d15a2f49532fbc8c4922e7425b5964b24e3514a64b594d7ba952116cc8b46362d0d482d1864e532d2a8109018ad057b22b6006b3a79785b425d45dc1ba334983dc3d86786cc24f6d81b2969c77d36c5f5137b34765e0ed15b318c0f4470abba26cbe3ca3da3b", 0xcd}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x30}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)="b04b7581af8d7fcff1dac0a5599ad4ceb6e47b8a0716bf306d149938b4d76ff72fb38184a8e66f4cc473dafb7881f2554006e297320015c5d08311f5703853e6e67dac8e38ea709b0085eb7375ed7b1fc736c0e886f6230346deee8713c68abfe6c2ca6d67d30ca75178828bc62b7df566b40c90e91e50b5ee7e4793fa935ac66ff4c386", 0x84}], 0x1}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000d80)="1b048379916e7e627e2c9d65da4b4af930afd1f4e67afe294d7f3c61254a9f0701397cea587e7f7c09655b9c63e389abdd9401f3daed215e10b1cf30f10867e8154352ea92", 0x45}, {&(0x7f0000000e00)="b99b0eb13f09487e5d0a99c7e26fc7804fded0865ac47df4e04d22cf05179ca82226938d3059132ae1e86efd208fd7b9a006c7ddc0775379679ea41fbc36710069073813656d8b7739cf88007857dadff140563ba2c21dcdcae037010ae0ae296c39e446bb6c7425cbced7c426f8e8c28afd9434afb2bdcde13ae133b018f8852cb3199535438244a0255d8f0050fa303acf3ea52b17ac5b05b25d26d3f1", 0x9e}, {&(0x7f0000000ec0)="e1f90a6fcc5d92f876509da0011492fc525a95a6852ac112ca87b8c7830c74c9e232f5eabca02b9644cde2c34ea642482cf73189ab1767144afe6f00c64cf26617cf071da77819fc979c", 0x4a}], 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r9, @ANYRESDEC=r3, @ANYRES32=r10, @ANYBLOB="00000000ac14142600000000"], 0x178}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000011c0)="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", 0xfc}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002640)=[{&(0x7f0000001340)="5dd02f9f37bca87eea2d676d0152fa5caa88e9ee20a70f73d7d84f4453d67b93567bd5680fdb6b78b7d48f274e8668158f2af989453736c51c1499fb25249356f26f9a1d44df801eeecc64d366dacf2653d03a364f52f48b91967976d823891c34c4c67bd932b6a84294bf61304059791f8de8a40256a8adfd4e7601616c6044380753e6a839d6b703605f361410268714b105693b2c5121f74b8bbb43c70c8486a3a6ad", 0xa4}, {&(0x7f0000001400)="49fe88523a2fd5c8697650a2bc71d7b76485951b9f5e1c40ac3bcaf3e3a580a9", 0x20}, {&(0x7f00000009c0)="7a3cc5d09bbfa10d04583b1fc0f237f95f9210f92119c2ad4e0598ad0c67c5fc8a1b60350497d660fd27546b1cb06a8fbb74c73ab8e299eaa9e328de829648452aff8fb76e7ec0a89ae765130d133af04c0f5d842c252d6693678cc6c54dbaed9620d15c8cc118bff433705f36309b97b74c5e5794", 0x75}, {&(0x7f00000014c0)="da0e776967139732529a58637cb5d24f4397ca84250c0908b1b8ed3dc37d41733faa82793e5c898543bef685198ccc116ea09ead87b1e18d769c597a18b1f2bba1caea18bb90f86c67357ca3ea1125fcf57e0e8eab7863cba1906169c2e65c999e4f668f4c8a34bdfd13062c1308bf0177898146f4f751fbfceb9443842359453bb40dab208e23d292c9c7150ac0749dac774d21bc31195d493e1002d7994b97f58ac8252e4c37ff8e7c6577d3bbbed3da0e3188d78d5a8a5d6df54e0335f71a5bb2ffe265401a776b99e669e2818cf4469e1ccc3a5100ca632ae145a73422078aaa6c0db3ac25394098ae8091b1676436", 0xf1}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="9d92fa3003bda0cc46ef7392b03bc588e1f6fa0429ee7a8a7d8666252f534aa18d0a28b40f0f3359a72681620a59bb87c33f8a9e45f4439665ea4616765e694ea85ecf7703c495ccfb29116f8abf29594c8c9e10dc7bb6e917d8710d3b74c6fc356339", 0x63}], 0x6, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}], 0x7, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) 3.857656351s ago: executing program 4 (id=872): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x1ff, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000001140)={0xa, 0x4e20, 0x4, @remote, 0xf}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x1, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r2, 0x4, 0xb3, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x1ff, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000001140)={0xa, 0x4e20, 0x4, @remote, 0xf}, 0x1c) (async) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x1, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448e0, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) getsockopt(r2, 0x4, 0xb3, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) (async) 3.688756321s ago: executing program 4 (id=874): r0 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f00005a5000/0x12000)=nil, 0x12000, 0x8, 0x13, r0, 0xb44f2000) 3.578440093s ago: executing program 4 (id=875): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 3.209161039s ago: executing program 4 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/240, 0xf0}], 0x1, 0x47, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x40}}, 0x0) (async) close(0x3) 3.086630716s ago: executing program 2 (id=880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x19b4, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffa56}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x1964, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x52}, @TCA_ROUTE4_POLICE={0x58, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x41b9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0xc, 0xea74, 0x7, 0xffffffff, {0x5, 0x2, 0x7f, 0x8001, 0x7, 0x29}, {0x2, 0x2, 0x6049, 0x22, 0x0, 0x1c65f9f0}, 0x8, 0x3, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_ROUTE4_POLICE={0x107c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0x0, 0x4, 0x8000, 0x1, 0x900, 0x0, 0x8, 0x9, 0x6, 0x5, 0x81, 0x5, 0x7, 0xe, 0x6, 0x8, 0x10, 0x4, 0x0, 0x4, 0xa54, 0x1ff, 0x3, 0x7, 0xcb, 0xb0, 0x7, 0xb, 0x7, 0x5, 0x5, 0x8, 0xfffff5e9, 0xf29, 0xf7e5, 0x120, 0x8, 0x3, 0xfffffffa, 0x48d8, 0x9, 0x35, 0xffff, 0x8, 0x8, 0x8, 0xc87, 0x3, 0x2, 0x8, 0xe, 0x2, 0x7, 0x8e0f, 0xf234, 0x9, 0x0, 0x80, 0x9, 0x0, 0x8, 0x7, 0x5, 0x773f53a0, 0x80000001, 0x7ff, 0x7, 0x100, 0x1ff, 0x9, 0x77, 0xaad, 0x729a, 0x0, 0x6, 0x800, 0x453, 0x8001, 0x5, 0x5, 0x0, 0x1, 0xc, 0x29cd, 0x52e, 0x8, 0x0, 0x9, 0xcd3c, 0x7, 0x2, 0x7fff, 0x3, 0x200, 0xf, 0x6, 0x5, 0x4, 0xb7c, 0x7ff, 0x3, 0x401, 0xffffffff, 0x99bd, 0x2, 0x2, 0xf, 0x401, 0x7f, 0x9, 0x0, 0x9, 0x5, 0x0, 0x4, 0x200, 0x1, 0x7, 0x0, 0x6, 0x6, 0x2, 0x1f7, 0x35a012b0, 0x1, 0x7, 0x1, 0x85a1, 0x7, 0xfffffffa, 0x80, 0x5, 0x8000, 0x3c3a, 0x8, 0xfffffc00, 0x5, 0x5, 0x14000000, 0x49e, 0x0, 0xc, 0x5, 0x8, 0x8, 0x7, 0x0, 0x49, 0x5, 0x8, 0xffffffff, 0xc19, 0x9, 0x8, 0xc, 0xffffe48a, 0x0, 0xfff, 0x10, 0x6, 0x40, 0x7, 0x5, 0x2, 0x4, 0x10001, 0x8, 0x9, 0x9, 0xb, 0xf3a, 0x4f, 0xa8, 0x8001, 0x1, 0x1, 0x6, 0x7, 0xd, 0x4, 0x1, 0xffffffff, 0xfffff847, 0xb, 0x9, 0x2, 0x5, 0x10, 0x4, 0x3, 0x4, 0xf8ab, 0x8b4, 0x8, 0x200, 0x4, 0x3, 0x0, 0x1, 0x8, 0xb7e, 0x6, 0xf, 0x1, 0x5cf, 0x4, 0xffff, 0x82, 0x4d8c, 0x5, 0x4, 0x3, 0x1, 0x6, 0x2, 0x400, 0x1, 0x1ff, 0x2, 0xe4, 0x7, 0x3, 0x4, 0x0, 0x0, 0x7f, 0x2, 0x3, 0x0, 0x80000000, 0x9, 0x400, 0x7fffffff, 0x52d, 0xf0, 0x3, 0x2, 0x6, 0x2, 0x401, 0x2, 0x5, 0x5d, 0x8, 0xc4, 0x0, 0x3c8d, 0x1, 0x9, 0x5a79c4df, 0x3, 0x0, 0x1, 0x7fffffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x5, 0x0, 0x8, {0xb, 0x2, 0x7, 0x2, 0x5, 0x8}, {0x5, 0x0, 0x2, 0x5, 0x6, 0x8}, 0x2, 0x8, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff7}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0xfe54, 0x1, 0xecf4, 0x7, 0x80, 0x1, 0x74, 0xffffffff, 0xd, 0x6, 0x3, 0x0, 0x7f, 0x4, 0x3, 0x20, 0x0, 0x3, 0x3, 0x1, 0x9f, 0x4, 0xd4da, 0x9, 0x4, 0xfffeffff, 0x40000000, 0xfa, 0x5, 0x5, 0x8000, 0x9, 0x101, 0x4896, 0x3ff, 0x0, 0x10, 0x7, 0x7f, 0x6a89, 0xe, 0x5, 0x10001, 0x2, 0x0, 0xeb, 0x4, 0x5, 0xc, 0xa, 0x9, 0x5faf, 0x6baf, 0x8000000, 0x5, 0x0, 0x0, 0x3, 0xfffffff1, 0xfffff801, 0x10001, 0x4, 0x4, 0x3, 0x0, 0xae, 0x7, 0x1ff, 0x9, 0x2, 0x8, 0x116c, 0x9, 0x1, 0x0, 0x3, 0x6, 0x549e, 0x4, 0x8, 0x1, 0xfff, 0x7, 0x4, 0x1c5d, 0x7, 0x5, 0x5, 0x5d, 0x7, 0x8001, 0x8, 0x9, 0x0, 0x4, 0x1, 0x2, 0x1, 0x5, 0x1, 0x1, 0xf14, 0xffffffff, 0xfe5e, 0x9, 0x6, 0x7, 0x6, 0x3, 0x7, 0x200, 0x3, 0x8, 0x8, 0xd, 0xd68, 0xffe, 0x1, 0x6, 0x80000000, 0x8, 0x7, 0x200, 0x5, 0x2, 0x766, 0x5, 0x8, 0x5, 0x18, 0x0, 0xa, 0x5, 0x4, 0x8000, 0x3a, 0x8, 0x0, 0x8, 0x8, 0x0, 0x6, 0x10000, 0xcc, 0x9, 0x233, 0x50ce, 0x3, 0x6, 0x2, 0x5, 0x8, 0x6, 0x6, 0x5, 0x7, 0xa8, 0xebd2, 0x1, 0x7, 0x3, 0x5, 0x0, 0x77dc, 0xffffffff, 0x3, 0x1, 0x401, 0x1, 0x4, 0x8, 0x9591, 0xfffffff9, 0x100, 0xe, 0x1, 0x80000000, 0x3, 0x7, 0x2, 0x5, 0x2, 0x8, 0x6, 0xa81, 0x7, 0x4, 0x0, 0x22c, 0x7ff, 0x3, 0x1, 0x0, 0x5, 0x1, 0x8001, 0x2, 0xbf33, 0x6fd, 0x1, 0xb, 0x101, 0xd, 0x2, 0x6, 0x8, 0x1, 0x10001, 0x1, 0x7f, 0x3, 0x3, 0x5bb, 0x0, 0xfff, 0x5, 0x200, 0xffffffff, 0x80000001, 0x8, 0x800, 0x7, 0x9, 0x0, 0x7f, 0xed, 0x401, 0x2, 0x9bb3, 0x3, 0x7, 0x0, 0x22bc95f5, 0x4, 0x6, 0xd4e8, 0x3ff, 0x10, 0x5, 0x8, 0x800, 0x1, 0x0, 0x8116fd04, 0x10000, 0x3, 0x2, 0x5, 0x1, 0xffffff80, 0x9, 0x4, 0x3, 0x314, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x104c, 0x8000, 0x0, 0xc, 0xcaf, 0x7, 0x6, 0x9ee, 0x7fff, 0x6, 0x7, 0xfffff08d, 0x9, 0x5, 0x8, 0x1000, 0x2, 0x0, 0x4, 0x4, 0x8, 0xffffff09, 0x8, 0x9531, 0x10, 0x8, 0x9, 0xffffffff, 0xe, 0x68496f2e, 0x3, 0x2, 0x31a, 0x6, 0x4, 0x400, 0x7, 0x4, 0x3, 0x10001, 0xc0f, 0x4, 0x3, 0x2000, 0x6, 0xe, 0xffff, 0x3f3, 0xe, 0xe6e, 0x9, 0xf, 0x7, 0x8, 0x7, 0x5, 0x8, 0x30f, 0x9, 0x7, 0x0, 0x6, 0xfffffffc, 0x7, 0xf6f, 0x7, 0x8001, 0x101, 0x9, 0x80000000, 0x3658, 0x1, 0xff, 0x20000, 0x4, 0x9f, 0x4, 0xf, 0x8, 0x3, 0x7, 0x400, 0x4, 0x6, 0x4, 0x2, 0x5, 0x2, 0x7, 0x8, 0x6043, 0x400, 0x9, 0x6, 0x80, 0xd9ee, 0x7fff, 0x6, 0x0, 0x6, 0x2, 0x6fc7, 0xfffffffd, 0xc1, 0x3, 0x6, 0x8, 0x518, 0x80000001, 0x101, 0x298, 0x7fffffff, 0x1000, 0x7, 0x7, 0x3, 0x6, 0x0, 0x5, 0x6, 0xc4ac, 0x4, 0x4, 0x8, 0x3, 0xb7, 0x80, 0x6, 0x8, 0x2d8, 0x8, 0xdaf, 0x2, 0x1, 0x4, 0x6, 0x2, 0x2, 0x6, 0x800, 0x101, 0x6, 0x4, 0x10, 0x3, 0x3, 0x9, 0xc90, 0x2, 0x9, 0x3, 0x40100000, 0x8ac8, 0x8, 0x5, 0x9, 0x4, 0x7, 0xfffff801, 0x7, 0x7f, 0x1, 0x0, 0x7, 0x0, 0x59, 0x8000, 0x5, 0x7, 0x2, 0x7, 0x8, 0x1, 0x7, 0x8, 0x7, 0x4, 0xe4, 0x7, 0x6, 0x9, 0xff, 0x7, 0x1, 0xff, 0x5, 0x9, 0x200, 0xc, 0x10000, 0x100, 0x1000, 0x1, 0x9, 0x8, 0xd, 0x8, 0x4, 0x0, 0x1, 0xe, 0x9, 0x3, 0x7f, 0x8, 0x7, 0x7ff, 0x0, 0xffffff7e, 0x6, 0x9, 0x6, 0x4, 0xefd, 0x5, 0x3, 0x4, 0x401, 0x7, 0x1, 0xc72, 0x8, 0x7ff, 0x10, 0x2, 0xb8, 0x5, 0x6, 0x2, 0x7, 0x2, 0x2, 0x103, 0xff, 0x8000, 0x4, 0xff80, 0x3, 0xfffffffe, 0x7f, 0x4, 0x5, 0x2, 0x800, 0x10, 0x0, 0x1, 0x5, 0x6, 0x5, 0x7, 0x23, 0x1, 0x4, 0x2, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x8545, 0x9, 0x81, 0xdd, 0x8, 0x0, 0xfffffff7, 0x5, 0x8001, 0x1, 0x7, 0x80000001, 0x6, 0x5, 0x87ad, 0x4, 0x7, 0x5, 0x4, 0x3, 0x5, 0x1ff, 0x5, 0x2, 0x8, 0x3, 0x9, 0x2, 0x0, 0x7, 0x101, 0x16, 0xfffffff9, 0x3, 0x2, 0x8000, 0x0, 0x96, 0x401, 0x3, 0x3, 0x5, 0x8, 0x6, 0x1ff, 0x2, 0x80, 0x0, 0x8, 0x9, 0x10001, 0xc382, 0x80000001, 0x1, 0x2, 0x23, 0xed02, 0xffffff98, 0x1, 0x129, 0x58000000, 0xff, 0xfff, 0x6659, 0x80000000, 0x2, 0x5, 0x0, 0x0, 0x62b, 0x0, 0x80000000, 0x6, 0x1000, 0x6, 0x6, 0xfffffc01, 0x1000, 0x4, 0x9, 0x3ff, 0x7f, 0x9, 0x8, 0x4, 0x9, 0x200, 0x0, 0x80000001, 0x0, 0x3, 0x2, 0x80000000, 0xf9, 0xa, 0x0, 0xfff, 0x4, 0x1, 0xebe2, 0x1, 0xb2c, 0x40, 0x6, 0x6, 0x6, 0x14b, 0x3, 0xf, 0x7, 0x1, 0x0, 0x1, 0x6, 0x9, 0x5cd, 0x0, 0x10001, 0xa, 0xb32, 0x8000, 0x4, 0x5, 0x2, 0x10, 0x3, 0x40, 0x5, 0x7, 0x4ab13074, 0x1000, 0x8, 0x1, 0xffffffbd, 0x942, 0xff, 0x8000, 0x6, 0xfffffffd, 0x7ff, 0x6ef9, 0x6, 0x6, 0xad56, 0x81, 0x4, 0xf, 0x10001, 0x10001, 0xbea7, 0x56b, 0xb, 0xfffffffb, 0x6, 0xc6c7, 0x200, 0x200, 0x4, 0x80000001, 0x200, 0x9, 0x9b1, 0x4, 0xc, 0x1, 0x0, 0xc, 0x8, 0xffff0000, 0xfffffa3d, 0x4, 0x8, 0x3, 0x6, 0x1, 0x2, 0x5, 0x4, 0x3, 0xf7, 0x2fe2, 0xf5c, 0x9, 0x3, 0x0, 0x800, 0x4, 0x1, 0x7fffffff, 0x81, 0x2, 0x1, 0x0, 0x1, 0x6, 0x10, 0x8, 0x3ff, 0x3, 0xf5, 0x0, 0x7, 0x4, 0x8, 0x8, 0x3, 0x8, 0xc9, 0x5, 0x80000000, 0x3c8, 0x6, 0x10a, 0x5, 0x0, 0x200, 0x2, 0x911c, 0x1, 0x6, 0x0, 0x5, 0x3, 0x4, 0x5, 0x5, 0x0, 0x8, 0x99ec, 0x6, 0x5, 0x9, 0x4, 0xabde, 0x3, 0x0, 0x5, 0x6, 0x2, 0x5, 0x1, 0x3, 0x4, 0x10000000, 0xffffffa4, 0xb, 0x7, 0xbac, 0x10001, 0xbc4, 0xffffffd2, 0x9, 0x1, 0xa59a, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}]}, @TCA_ROUTE4_POLICE={0x874, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x40, 0x40, 0x1, 0x10, 0x10, 0x7, 0xe, 0x5, 0x9, 0xa, 0x8, 0x909, 0x100, 0x7, 0x80000001, 0x7, 0x5, 0xfea, 0xffffffff, 0x2, 0x80, 0x2, 0x2, 0x10, 0x4, 0x400, 0x5, 0x87, 0xfffffff2, 0x0, 0x7e57, 0xd5c4, 0xa30, 0x5, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x1000, 0x200, 0x9, 0xf, 0x80000001, 0x5, 0xbc, 0x9, 0x3, 0xf, 0x100, 0xc249, 0x1, 0x6, 0x1, 0x7fff, 0x10000, 0x6, 0xb, 0x5, 0x1, 0x7f, 0x707, 0x8, 0x7, 0x74b662b0, 0x1ff, 0x0, 0x2, 0x6, 0xffff, 0x73f7, 0x3, 0x81, 0xfa63, 0x5, 0x3, 0x34c6, 0x3, 0x7, 0x7, 0x1, 0xe8a, 0x4, 0x10, 0x9, 0xa41, 0x7, 0x6, 0x7fffffff, 0x401, 0x81, 0x4, 0x7ff, 0x1, 0x7, 0x200, 0x0, 0x7, 0xfffffff9, 0x7, 0x1, 0x2, 0x5, 0x5c7, 0x7, 0xc, 0x5, 0x3496, 0x1ff, 0x200, 0x1, 0x1, 0x5, 0x9, 0x9, 0x5, 0xfffffffe, 0x4, 0xfffffff8, 0x3f, 0x0, 0x7fff, 0x100, 0x0, 0x0, 0x8, 0x40, 0xffff8000, 0x3, 0x9, 0x98, 0x0, 0xe51, 0x10, 0x9, 0x4, 0x2, 0x2, 0x7fffffff, 0x3, 0x87, 0x7, 0x7, 0x0, 0x5, 0x8001, 0x3ff, 0x6, 0x4, 0x80, 0x200, 0x1, 0x1, 0xb01, 0x7, 0x3c, 0x7ff, 0x5, 0x8, 0xffffb656, 0x3, 0x3, 0x3, 0x6, 0x2, 0x6, 0x9, 0xa1, 0x0, 0x5, 0x9, 0x4a98, 0x0, 0xae, 0x5, 0xb5, 0x1, 0x1, 0x0, 0x3, 0xfffffffe, 0x8, 0x6, 0xc, 0x6, 0xfdf5, 0x5, 0x7f, 0xa8, 0x5, 0x4, 0xd, 0x9, 0x3, 0x6, 0x1, 0x0, 0xad, 0x800, 0xc, 0x2, 0x2, 0x1a, 0x9, 0x100, 0x101, 0x5, 0x0, 0x16c, 0x0, 0xaab, 0x0, 0x1, 0x803, 0x7, 0x0, 0xffff, 0x1ff, 0x3, 0x401, 0x4, 0x1, 0xfffff800, 0x0, 0x7c, 0x1, 0x40, 0x1, 0x4, 0x9e6, 0x8, 0x5, 0x401, 0xfff, 0x0, 0x8, 0x6, 0xcb6, 0x7, 0xf7, 0x8, 0x5, 0x2, 0x9, 0x6, 0x7, 0xffe00000, 0xffffffff, 0x9, 0xc, 0x6, 0x0, 0x800, 0x9d85]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x420e}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0xffffffffdffffffc, 0x2, 0x8, 0x5, {0x9, 0x1, 0x0, 0x94, 0x7a1d, 0xbb}, {0xb, 0x2, 0x5, 0x7, 0x6, 0xd124}, 0x10000, 0x2, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe450, 0x400, 0xfffffff8, 0x69a5, 0x6, 0x3, 0x7, 0x3, 0x9, 0xfffff000, 0xfffff801, 0x3, 0x3, 0x4, 0x7fff, 0x5, 0x2, 0xa4, 0x9, 0x10, 0xda7, 0x4, 0x2, 0x200, 0x80, 0x2, 0xa6, 0x0, 0x4, 0x1, 0x7f, 0x2, 0xe, 0x2, 0x0, 0x4, 0xfffffffd, 0x7f, 0x3, 0x0, 0xffff8001, 0x7fffffff, 0xfff, 0x7, 0x8000, 0x6, 0x5, 0x8000, 0x7, 0x1, 0x8, 0xd372, 0xfffffff8, 0x5, 0x9, 0x5, 0x7ff, 0x6, 0x1, 0xe, 0xfffffffc, 0x7, 0x8000, 0x8, 0x7a, 0x9, 0xff, 0x5, 0x2, 0x3, 0x5, 0x3, 0x1, 0x6, 0x9, 0x3, 0x254d, 0x40, 0x8, 0x6, 0x7f, 0x5, 0x56, 0x7ea6, 0x8, 0x3, 0x3, 0x10000, 0x9, 0xcb, 0xc1, 0x8001, 0xce4, 0x1eb5, 0xbbb, 0xfffffffd, 0x1, 0x7, 0xa0000, 0x2b, 0x1, 0x6, 0x5, 0x9b8, 0x3, 0x777e, 0x1, 0x6, 0x80000000, 0x1000, 0x32, 0x4, 0x10, 0x7, 0x9, 0xff, 0x1, 0x200, 0xa, 0x1, 0x5719, 0x100, 0x1400, 0x10, 0x10000, 0xa, 0x1, 0xfff, 0xfffffe00, 0xffffff80, 0x7, 0xfffffffc, 0x76, 0x80000001, 0x9, 0x10001, 0x4, 0xf, 0x80, 0x5, 0xa, 0x8000, 0xe, 0xf2d, 0x1ff, 0x8, 0x258, 0x5, 0xb, 0x5, 0x6, 0x2, 0x6, 0x7, 0x6, 0x4, 0x7ff, 0x2, 0x9, 0xfdb, 0x8, 0x4, 0x6, 0x1ff, 0xfff, 0x8, 0x7fff, 0xfffffff9, 0x19881207, 0x0, 0x200, 0x32d, 0x2, 0x7, 0x9, 0x2, 0xfffffffc, 0x75d2d3ca, 0xf, 0x2, 0x1, 0xff, 0x275d, 0x1, 0x3, 0x7, 0xfffffffa, 0x2, 0x3ff, 0x7fff, 0xfffffffc, 0x6, 0x1, 0x10000, 0xffff, 0x9, 0x8, 0x3, 0x1, 0x9baa, 0x9, 0x6, 0x3, 0x6, 0x5, 0xe34, 0x6, 0x100, 0xdc8, 0x101, 0x0, 0x182, 0xffff, 0x2, 0x6, 0x0, 0x9685, 0x4, 0x7f, 0xa5, 0x9742, 0xfff, 0x6, 0x81, 0x0, 0x3, 0xffffffff, 0x6, 0x300000, 0xffffffff, 0x80000000, 0x96, 0x9, 0x4, 0x10, 0x6, 0x10, 0x2, 0x7fffffff, 0x7fff, 0x8, 0x9, 0xacc, 0xb78, 0x1, 0xffffffff, 0xff, 0x8001, 0x2, 0x6, 0x2e, 0x963, 0xffffffa8, 0x6, 0xf, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8d}, @TCA_ROUTE4_TO={0x8, 0x2, 0x61}]}}]}, 0x19b4}}, 0x0) 3.003739156s ago: executing program 4 (id=882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100f15e0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r2 = userfaultfd(0x80001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000800)=0x9, 0x4) r5 = socket(0x27, 0x80000, 0x65) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x9, 0xff, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000300)={0x9, 0x9, 0x400}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0xfffffffffffffffe, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x8007, 0x0, 0x9, 0x200400}, 0xffffffffffffffc4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0xffff, 0x0, {0x80}}, 0x14}}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000002c0)={0x3, 0x2000}, 0x4) 2.884261771s ago: executing program 2 (id=884): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x38, 0x1, [0x1800000]}}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="140100001e00010000000000000000000301008014000300fc010000000000000000000000000000140001"], 0x114}], 0x1}, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.698544344s ago: executing program 4 (id=885): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000200)={@multicast2, @empty, 0x1, "63648c44490f2c040d8a34daa4ba845f293c9b6f1e783f6d9e69a4d733cecdca", 0x5, 0x5, 0x101, 0x2}, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x337a, 0x10100, 0x0, 0x21}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x21, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x6, 0x0) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) 1.328991373s ago: executing program 2 (id=886): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000400)={[0x3]}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x101, 0x0) pwritev(r3, &(0x7f0000001300)=[{&(0x7f0000001040)='4', 0x1}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/rt_cache\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xa, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @generic={0x10, 0x7, 0x9, 0x4, 0x10001}]}, &(0x7f0000000280)='syzkaller\x00', 0x1, 0x14, &(0x7f00000002c0)=""/20, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xd, 0x3, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[r2, r3, r4, r5, r6], &(0x7f0000000500)=[{0x5, 0x1, 0x1, 0xc}, {0x4, 0x1, 0xb, 0x5}, {0x5, 0x5, 0x3, 0xa}, {0x5, 0x1, 0xb, 0x1}, {0x4, 0x5, 0x4, 0x2}, {0x1, 0x5, 0xe, 0x1}, {0x3, 0x4, 0xc, 0xa}, {0x5, 0x5, 0xb, 0x9}, {0x1, 0x5, 0x3}, {0x4, 0x2, 0xd, 0x4}], 0x10, 0x100, @void, @value}, 0x94) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540), 0x800201, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, 0x0) r8 = io_uring_setup(0x3e7b, &(0x7f0000000140)={0x0, 0x2a29, 0x40, 0x2, 0xc6}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x19, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000008000005000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) close_range(r8, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 1.053065261s ago: executing program 3 (id=889): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="740000001000010027bd7000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="104e06000162010054001280110001006272696467655f736c617665000000003c0005800500060001"], 0x74}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x5, 0xfffc, {0x7, 0x1}, {0xad, 0x2}, @cond=[{0x3, 0x6a, 0x19, 0x2, 0xd, 0xc6}, {0x2, 0x7f, 0x9, 0xa4ed, 0xc7, 0x7}]}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) sendto$packet(r5, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140), 0x14) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@mmap={0x8, 0x3, 0x4, 0x10000, 0x7fff, {0x0, 0xea60}, {0x2, 0x8, 0x9, 0xa8, 0x9, 0x9, "5dc6b815"}, 0x800, 0x1, {}, 0xfffffff8}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f0000000100)=""/142) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f00000000c0)={@lba=0x5, 0x2, 0x0, 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x8c2b01) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x2}, 0x4) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="f50300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000de3d00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000680)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) syz_open_dev$vcsa(&(0x7f00000004c0), 0x8, 0x420) pipe(&(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010091f2705c60b4a88b0bae"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.052114019s ago: executing program 2 (id=890): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f00000002c0)=""/175, 0xaf, 0x0, &(0x7f00000003c0)=""/152, 0x98}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="02"], 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 908.963351ms ago: executing program 2 (id=891): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x131, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r1, @ANYBLOB="09ee00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="050000000300"/19], 0x50) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000008002001c00128009000100626f6e64000000000c00028005000d000100000014003500626f6e6430000000000000001e40c09eb5ba15d7a20c60e21ab02eaf8a5451c5dcdf41180a1482476c6fb1752a097d43abdce0fb782ccd0d80190a2a"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x26}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="eab1000000000000e3ffffffffffffff00000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000000000000100"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000009cfcffff000000000004000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000d6008500000083000000bf0900000000000055090100000000009500000000000000181100001ad227bea7cf1a3a761a", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000c26a040010000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xd, 0xe, &(0x7f0000000540)=""/14, 0x41100, 0x20, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x2, 0x3ce}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x1, r8, r1], &(0x7f00000006c0)=[{0x1, 0x2, 0x44, 0x8}], 0x10, 0x1d342cec, @void, @value}, 0x94) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r9 = accept4(r0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x2, &(0x7f0000000000)=[{0x7, 0x1, 0x0, 0x401}, {0x6, 0x8d, 0x0, 0x1}]}) sendmmsg$alg(r9, &(0x7f0000007140)=[{0x0, 0x0, 0x0}], 0x492492492492533, 0x80840) openat$tun(0xffffffffffffff9c, 0x0, 0x143082, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r9) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="7340e86dff8b0a48", @ANYRES16=r10, @ANYBLOB="080029bd7000fcdbdf250500000008003400faffffff08002c000104000005002f000000000008002b0003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) lsm_get_self_attr(0x67, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x5f, ""/95}, &(0x7f00000000c0)=0x7f, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000130000005401008038000400200001000a004e1e0000007f00000000000000001c00000000000000090000001400020002009100e0000002fe000000000000001600010069623a6072696467655f736c6176655f30000000"], 0x68}}, 0x0) 719.067476ms ago: executing program 3 (id=892): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) modify_ldt$write(0x1, &(0x7f0000000200)={0x120e, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7f, 0x5, {0x0}, {0xee00}, 0x80000000, 0x8ce8}) r1 = syz_clone3(&(0x7f0000000380)={0x141880800, 0x0, 0x0, 0x0, {0x200001e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000000c0)={{0x0, 0x7}, {0x1, 0x81}, 0x1, 0x2, 0x40}) r3 = getpgid(r1) r4 = syz_open_procfs(r3, &(0x7f0000000080)='net/unix\x00') unlinkat(r4, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 607.117244ms ago: executing program 3 (id=893): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x544c}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@overlay={0x3, 0xd, 0x4, 0x1, 0x8, {0x77359400}, {0x1, 0x0, 0x5, 0x5, 0xe, 0x2, "97e118df"}, 0x855a, 0x3, {}, 0x7}) 508.862131ms ago: executing program 3 (id=894): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x6, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000100)={@pptp={0x18, 0x2, {0x1, @private=0xa010101}}, {0x0}, 0x0}, 0xa0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socket$can_bcm(0x1d, 0x2, 0x2) bind$can_j1939(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r7) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x1000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0400d0}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r9, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendto$l2tp(r2, &(0x7f0000000240)="d938f187a517154104cc1b99552b15894dc97e5852ca28ec35ce33d09e14db99083c2a5142d7aa7e1f82862b87c6c79d54164f0432b4caa2908be7ef01dcfef31b48d788e89c2b9ce5db80427aef2a67ee6285653befde357529aa34521d7a8c1e554334536f4a382744000007e059ee4002a8364eab5d15cff872bcf43c5602ee6777ba59e67b0d51d8f0a1d4943122382676118cc2f67743a87a4c82e60d6d082361ea0da627b16f211db0", 0xac, 0x24008004, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x4c}}, 0x20004880) 348.571695ms ago: executing program 3 (id=895): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000a600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014000000000000000100000001"], 0x30, 0x4080}}], 0x1, 0x880) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x4}, 0x8) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r9 = socket$can_raw(0x1d, 0x3, 0x1) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r10, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r9, r10, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x8, 0x5}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r11, 0xc02064a5, &(0x7f0000000640)={r12, 0x5, &(0x7f0000000380)=[0x1, 0x4, 0x9, 0xf, 0xfe00], &(0x7f00000003c0)=[0xc, 0xbab], &(0x7f0000000600)=[0x7, 0x2, 0x8001, 0xd]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000f9ffffffffffffff000095"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xc}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x2) 168.371341ms ago: executing program 3 (id=896): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x103400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x0, 0x87, 0x0, @private1, @mcast2}}}}, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 0s ago: executing program 2 (id=897): mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)={[{@dyn}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x107, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xdffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x8, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000100)) kernel console output (not intermixed with test programs): - 0 [ 48.333123][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.335464][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.338419][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.342540][ T5953] veth0_vlan: entered promiscuous mode [ 48.347208][ T5956] veth0_macvtap: entered promiscuous mode [ 48.352091][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.354211][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.368180][ T5956] veth1_macvtap: entered promiscuous mode [ 48.373498][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.379058][ T5953] veth1_vlan: entered promiscuous mode [ 48.379156][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.397040][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.399964][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.402933][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.406063][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.409364][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.416120][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.417223][ T5295] Bluetooth: hci3: command tx timeout [ 48.417244][ T5959] Bluetooth: hci0: command tx timeout [ 48.417845][ T5959] Bluetooth: hci1: command tx timeout [ 48.418074][ T5957] Bluetooth: hci2: command tx timeout [ 48.419083][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.419122][ T5956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.430899][ T5956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.434339][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.438723][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.441135][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.443479][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446105][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.457535][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.492683][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.496337][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.496408][ T5953] veth0_macvtap: entered promiscuous mode [ 48.510722][ T5953] veth1_macvtap: entered promiscuous mode [ 48.520665][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.522877][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.536703][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.538947][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.543214][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.546797][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.549483][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.552401][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.555079][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.558013][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.561276][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.569466][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.572516][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.575214][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.579020][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.582510][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.585931][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.590403][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.593887][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.594426][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.595839][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.598908][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.603509][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.606248][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.644127][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.645892][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 48.651607][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.673815][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.676849][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.848383][ T6045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1545 sclass=netlink_tcpdiag_socket pid=6045 comm=syz.2.6 [ 48.885373][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 49.310400][ T6061] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 49.312608][ T6061] gretap1: entered promiscuous mode [ 49.314087][ T6061] gretap1: entered allmulticast mode [ 49.540650][ T6063] capability: warning: `syz.0.12' uses 32-bit capabilities (legacy support in use) [ 49.605081][ T6062] dccp_close: ABORT with 319 bytes unread [ 49.610486][ T6069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6069 comm=syz.1.14 [ 49.848170][ T6083] IPv6: sit1: Disabled Multicast RS [ 49.850086][ T6083] sit1: entered allmulticast mode [ 49.939724][ T6086] sctp: [Deprecated]: syz.0.20 (pid 6086) Use of int in max_burst socket option. [ 49.939724][ T6086] Use struct sctp_assoc_value instead [ 49.946251][ T6086] netlink: 200 bytes leftover after parsing attributes in process `syz.0.20'. [ 50.496513][ T5295] Bluetooth: hci3: command tx timeout [ 50.497439][ T65] Bluetooth: hci2: command tx timeout [ 50.497466][ T5959] Bluetooth: hci0: command tx timeout [ 50.497529][ T5957] Bluetooth: hci1: command tx timeout [ 51.036495][ T6103] Falling back ldisc for ttyS3. [ 51.057762][ T6113] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 51.067053][ T6113] team0: Device hsr_slave_0 failed to register rx_handler [ 51.121868][ T40] kauditd_printk_skb: 121 callbacks suppressed [ 51.121879][ T40] audit: type=1400 audit(1742526564.093:236): avc: denied { setopt } for pid=6123 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.129320][ T40] audit: type=1400 audit(1742526564.093:237): avc: denied { write } for pid=6123 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.135227][ T40] audit: type=1400 audit(1742526564.093:238): avc: denied { read } for pid=6123 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.144781][ T40] audit: type=1400 audit(1742526564.113:239): avc: denied { write } for pid=6123 comm="syz.0.32" path="socket:[9065]" dev="sockfs" ino=9065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.233703][ T40] audit: type=1400 audit(1742526564.203:240): avc: denied { read } for pid=6131 comm="syz.0.34" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.240964][ T40] audit: type=1400 audit(1742526564.203:241): avc: denied { open } for pid=6131 comm="syz.0.34" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.247817][ T40] audit: type=1400 audit(1742526564.213:242): avc: denied { read write } for pid=6131 comm="syz.0.34" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.254381][ T40] audit: type=1400 audit(1742526564.213:243): avc: denied { open } for pid=6131 comm="syz.0.34" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 51.343609][ T40] audit: type=1400 audit(1742526564.313:244): avc: denied { write } for pid=6136 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.349472][ T40] audit: type=1400 audit(1742526564.313:245): avc: denied { nlmsg_write } for pid=6136 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.393033][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 51.428042][ T6141] process 'syz.2.38' launched './file0' with NULL argv: empty string added [ 51.457511][ T6132] ufs: You didn't specify the type of your ufs filesystem [ 51.457511][ T6132] [ 51.457511][ T6132] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 51.457511][ T6132] [ 51.457511][ T6132] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 51.467148][ T6132] ufs: ufstype=old is supported read-only [ 51.470446][ T6132] syz.0.34: attempt to access beyond end of device [ 51.470446][ T6132] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 51.665808][ T6150] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 51.747694][ T6157] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.786797][ T69] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.899832][ T6168] ======================================================= [ 51.899832][ T6168] WARNING: The mand mount option has been deprecated and [ 51.899832][ T6168] and is ignored by this kernel. Remove the mand [ 51.899832][ T6168] option from the mount to silence this warning. [ 51.899832][ T6168] ======================================================= [ 51.958227][ T69] usb 7-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 51.960827][ T69] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.975134][ T69] usb 7-1: config 0 descriptor?? [ 52.162375][ T6186] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 52.166121][ T6186] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 52.188335][ T69] usbhid 7-1:0.0: can't add hid device: -71 [ 52.191026][ T69] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 52.196628][ T69] usb 7-1: USB disconnect, device number 2 [ 52.211846][ T6187] tc_dump_action: action bad kind [ 52.282236][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 52.575711][ T65] Bluetooth: hci3: command tx timeout [ 52.576230][ T5295] Bluetooth: hci1: command tx timeout [ 52.576315][ T5957] Bluetooth: hci0: command tx timeout [ 52.585605][ T5295] Bluetooth: hci2: command tx timeout [ 52.997590][ T6208] fuse: Bad value for 'fd' [ 53.024398][ T6211] macvlan1: entered promiscuous mode [ 53.026555][ T6211] macvlan1: entered allmulticast mode [ 53.032078][ T6208] Zero length message leads to an empty skb [ 53.071105][ T6216] overlayfs: failed to resolve './file1': -2 [ 53.079298][ T6214] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 53.142897][ T6220] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 53.146272][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 53.337620][ T6240] usb usb8: usbfs: process 6240 (syz.3.72) did not claim interface 0 before use [ 53.379779][ T6244] netlink: 'syz.0.73': attribute type 10 has an invalid length. [ 53.386165][ T5986] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 53.423384][ T6251] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 53.496884][ T6261] input: syz0 as /devices/virtual/input/input5 [ 53.552722][ T5986] usb 7-1: config index 0 descriptor too short (expected 55488, got 36) [ 53.556160][ T5986] usb 7-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 53.559211][ T5986] usb 7-1: config 0 has no interfaces? [ 53.562155][ T5986] usb 7-1: config index 1 descriptor too short (expected 55488, got 36) [ 53.564476][ T5986] usb 7-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 53.567581][ T5986] usb 7-1: config 0 has no interfaces? [ 53.571305][ T5986] usb 7-1: config index 2 descriptor too short (expected 55488, got 36) [ 53.574512][ T5986] usb 7-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 53.580209][ T5986] usb 7-1: config 0 has no interfaces? [ 53.583510][ T5986] usb 7-1: config index 3 descriptor too short (expected 55488, got 36) [ 53.586199][ T5986] usb 7-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 53.589111][ T5986] usb 7-1: config 0 has no interfaces? [ 53.591849][ T5986] usb 7-1: config index 4 descriptor too short (expected 55488, got 36) [ 53.594203][ T5986] usb 7-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 53.597619][ T5986] usb 7-1: config 0 has no interfaces? [ 53.599379][ T5986] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.602250][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.606061][ T5986] usb 7-1: config 0 descriptor?? [ 53.698796][ T6270] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 53.701566][ T6270] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 53.725812][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.811854][ T10] usb 7-1: USB disconnect, device number 3 [ 53.875649][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 53.880334][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.883977][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.887899][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.892233][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.895439][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.900664][ T58] usb 5-1: config 0 descriptor?? [ 54.308009][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.310064][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.312130][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.314012][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.316333][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.318302][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.320190][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.322253][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.324247][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.326461][ T58] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 54.329215][ T58] HID 045e:07da: Invalid code 65791 type 1 [ 54.334112][ T58] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input6 [ 54.343204][ T58] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 54.656511][ T5295] Bluetooth: hci3: command tx timeout [ 54.657184][ T65] Bluetooth: hci0: command tx timeout [ 54.657324][ T5957] Bluetooth: hci2: command tx timeout [ 54.657347][ T5959] Bluetooth: hci1: command tx timeout [ 54.701031][ T6284] mmap: syz.3.84 (6284) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.784603][ T6300] overlayfs: failed to resolve './file1': -2 [ 56.009003][ T6302] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.111393][ T6306] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 56.119401][ T6306] netlink: 48 bytes leftover after parsing attributes in process `syz.0.93'. [ 56.185160][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 56.185172][ T40] audit: type=1400 audit(1742526569.153:305): avc: denied { read } for pid=6305 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.222328][ T6309] bond0: option ad_select: unable to set because the bond device is up [ 56.225281][ T40] audit: type=1400 audit(1742526569.193:306): avc: denied { ioctl } for pid=6308 comm="syz.0.94" path="socket:[12418]" dev="sockfs" ino=12418 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.249755][ T58] usb 5-1: USB disconnect, device number 2 [ 56.295622][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 56.362000][ T40] audit: type=1400 audit(1742526569.333:307): avc: denied { read } for pid=6312 comm="syz.2.96" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.370223][ T40] audit: type=1400 audit(1742526569.333:308): avc: denied { open } for pid=6312 comm="syz.2.96" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.380273][ T40] audit: type=1400 audit(1742526569.343:309): avc: denied { mount } for pid=6312 comm="syz.2.96" name="/" dev="configfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.388627][ T40] audit: type=1400 audit(1742526569.343:310): avc: denied { search } for pid=6312 comm="syz.2.96" name="/" dev="configfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.388658][ T40] audit: type=1400 audit(1742526569.343:311): avc: denied { read } for pid=6312 comm="syz.2.96" name="/" dev="configfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.388682][ T40] audit: type=1400 audit(1742526569.343:312): avc: denied { open } for pid=6312 comm="syz.2.96" path="/" dev="configfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.388709][ T40] audit: type=1400 audit(1742526569.353:313): avc: denied { ioctl } for pid=6312 comm="syz.2.96" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 56.419418][ T6311] team0 (unregistering): Port device team_slave_0 removed [ 56.457137][ T6311] team0 (unregistering): Port device team_slave_1 removed [ 56.463599][ T6315] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.97'. [ 56.469645][ T6315] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 56.472405][ T6315] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.524444][ T40] audit: type=1400 audit(1742526569.493:314): avc: denied { create } for pid=6316 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.826541][ T6334] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 56.861223][ T6340] xt_hashlimit: size too large, truncated to 1048576 [ 56.912445][ T6342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6342 comm=syz.0.105 [ 56.912846][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6343 comm=syz.0.105 [ 56.917438][ T6342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6342 comm=syz.0.105 [ 56.925571][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6343 comm=syz.0.105 [ 56.928033][ T6342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6342 comm=syz.0.105 [ 56.932429][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6343 comm=syz.0.105 [ 56.941756][ T6342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6342 comm=syz.0.105 [ 56.943174][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6343 comm=syz.0.105 [ 56.948178][ T6342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6342 comm=syz.0.105 [ 56.952844][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6343 comm=syz.0.105 [ 57.045000][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 57.248632][ T6378] hfs: Unknown parameter 'discard' [ 57.253081][ T6380] xt_TCPMSS: Only works on TCP SYN packets [ 57.842262][ T6420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 58.135630][ T6006] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 58.153429][ T6423] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 58.159205][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.162149][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.164694][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.167555][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.170147][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.172816][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.175422][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.178798][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.259585][ T6427] warning: `syz.2.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.312686][ T6006] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 58.316025][ T6006] usb 8-1: config 0 has no interface number 0 [ 58.318333][ T6006] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 58.322313][ T6006] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 58.329320][ T6006] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 58.333757][ T6006] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 58.339372][ T6006] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 58.344231][ T6006] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 58.347719][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.352877][ T6006] usb 8-1: config 0 descriptor?? [ 58.355635][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 58.366077][ T6006] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 58.575787][ T68] usb 8-1: USB disconnect, device number 2 [ 58.584879][ T68] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 58.766631][ T6451] random: crng reseeded on system resumption [ 59.232367][ T6475] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.143'. [ 59.303589][ T6492] program syz.3.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.508707][ T6515] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 59.662887][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 59.749634][ T6529] 9pnet_virtio: no channels available for device syz [ 59.824800][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 59.906819][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 60.007422][ T6579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 60.023737][ T6578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.117874][ T6484] ceph: No mds server is up or the cluster is laggy [ 60.157892][ T6578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.273934][ T6578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.351071][ T6578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.422180][ T6578] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.425455][ T6578] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.428797][ T6578] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.435356][ T6578] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.486379][ T6611] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.522247][ T6611] gretap0: entered promiscuous mode [ 60.525826][ T6611] gretap0: left promiscuous mode [ 60.581757][ T6620] Bluetooth: MGMT ver 1.23 [ 60.587170][ T6625] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 60.589609][ T6620] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 60.699638][ T6628] uprobe: syz.0.188:6628 failed to unregister, leaking uprobe [ 60.767963][ T6636] netlink: 'syz.3.191': attribute type 3 has an invalid length. [ 60.805183][ T6638] overlayfs: workdir and upperdir must reside under the same mount [ 60.960481][ T6645] netlink: 'syz.3.194': attribute type 4 has an invalid length. [ 62.655666][ T5295] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.655768][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 65.524725][ T6563] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.589126][ T6563] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.639307][ T6563] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.708998][ T6563] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.823132][ T6563] bridge_slave_1: left allmulticast mode [ 65.825180][ T6563] bridge_slave_1: left promiscuous mode [ 65.827239][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.833204][ T6563] bridge_slave_0: left allmulticast mode [ 65.834805][ T6563] bridge_slave_0: left promiscuous mode [ 65.838456][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.061367][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.066014][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.069268][ T6563] bond0 (unregistering): Released all slaves [ 66.387584][ T6563] hsr_slave_0: left promiscuous mode [ 66.390248][ T6563] hsr_slave_1: left promiscuous mode [ 66.392713][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.397116][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.406624][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.409200][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.430965][ T6563] veth1_macvtap: left promiscuous mode [ 66.432750][ T6563] veth0_macvtap: left promiscuous mode [ 66.434329][ T6563] veth1_vlan: left promiscuous mode [ 66.435894][ T6563] veth0_vlan: left promiscuous mode [ 67.020386][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 67.076874][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 67.810252][ T40] kauditd_printk_skb: 88 callbacks suppressed [ 67.810263][ T40] audit: type=1400 audit(1742526580.783:403): avc: denied { setrlimit } for pid=6703 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 71.139642][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.142120][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.918207][ T40] audit: type=1326 audit(1742526584.893:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.0.201" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f281658d169 code=0x0 [ 71.941540][ T40] audit: type=1400 audit(1742526584.913:405): avc: denied { setattr } for pid=6738 comm="syz.3.204" name="tty27" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 71.969492][ T40] audit: type=1400 audit(1742526584.943:406): avc: denied { ioctl } for pid=6736 comm="syz.0.201" path="socket:[11190]" dev="sockfs" ino=11190 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.991450][ T6752] xt_hashlimit: size too large, truncated to 1048576 [ 72.028926][ T5295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.032175][ T5295] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.034621][ T5295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.038631][ T5295] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.040577][ T40] audit: type=1400 audit(1742529145.020:407): avc: denied { getopt } for pid=6749 comm="syz.2.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.042641][ T5295] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.049124][ T5295] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.055901][ T40] audit: type=1400 audit(1742529145.020:408): avc: denied { mounton } for pid=6760 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 72.148504][ T6760] chnl_net:caif_netlink_parms(): no params data found [ 72.161241][ T40] audit: type=1400 audit(1742529145.130:409): avc: denied { watch_sb } for pid=6767 comm="syz.3.207" path="/77" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 72.205829][ T6773] sctp: [Deprecated]: syz.3.208 (pid 6773) Use of int in maxseg socket option. [ 72.205829][ T6773] Use struct sctp_assoc_value instead [ 72.227144][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.229600][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.232005][ T6760] bridge_slave_0: entered allmulticast mode [ 72.234240][ T6760] bridge_slave_0: entered promiscuous mode [ 72.237559][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.239655][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.241925][ T6760] bridge_slave_1: entered allmulticast mode [ 72.244222][ T6760] bridge_slave_1: entered promiscuous mode [ 72.264589][ T6776] bridge0: port 3(syz_tun) entered blocking state [ 72.267030][ T6776] bridge0: port 3(syz_tun) entered disabled state [ 72.268987][ T6776] syz_tun: entered allmulticast mode [ 72.271822][ T6776] syz_tun: entered promiscuous mode [ 72.273886][ T6776] bridge0: port 3(syz_tun) entered blocking state [ 72.275931][ T6776] bridge0: port 3(syz_tun) entered forwarding state [ 72.281376][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.287116][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.311211][ T40] audit: type=1400 audit(1742529145.280:410): avc: denied { ioctl } for pid=6777 comm="syz.3.210" path="socket:[11203]" dev="sockfs" ino=11203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.313582][ T6760] team0: Port device team_slave_0 added [ 72.324528][ T6760] team0: Port device team_slave_1 added [ 72.340053][ T40] audit: type=1400 audit(1742529145.310:411): avc: denied { write } for pid=6780 comm="syz.3.211" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.358615][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.358737][ T40] audit: type=1400 audit(1742529145.330:412): avc: denied { checkpoint_restore } for pid=6780 comm="syz.3.211" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.360652][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.375767][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.380521][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.382972][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.394089][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.427619][ T6760] hsr_slave_0: entered promiscuous mode [ 72.429702][ T6760] hsr_slave_1: entered promiscuous mode [ 72.431961][ T6760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.434692][ T6760] Cannot create hsr debugfs directory [ 72.519541][ T6760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.523709][ T6760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.527752][ T6760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.532427][ T6760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.543087][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.545381][ T6760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.548684][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.551213][ T6760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.578264][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.586969][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.590213][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.599308][ T6760] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.610572][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.613350][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.620156][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.622771][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.730617][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.807242][ T6006] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.862384][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 72.862398][ T40] audit: type=1400 audit(1742529145.830:419): avc: denied { shutdown } for pid=6810 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.867842][ T6760] veth0_vlan: entered promiscuous mode [ 72.873816][ T40] audit: type=1400 audit(1742529145.830:420): avc: denied { read } for pid=6810 comm="syz.0.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.880183][ T6760] veth1_vlan: entered promiscuous mode [ 72.900992][ T6760] veth0_macvtap: entered promiscuous mode [ 72.904129][ T6760] veth1_macvtap: entered promiscuous mode [ 72.912524][ T6760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.917122][ T6760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.919909][ T40] audit: type=1400 audit(1742529145.890:421): avc: denied { bind } for pid=6816 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.925431][ T6760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.928442][ T6760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.931175][ T6760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.934233][ T6760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.939459][ T40] audit: type=1400 audit(1742529145.900:422): avc: denied { write } for pid=6816 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.947775][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.954415][ T6760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.959612][ T6760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.963643][ T6760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.967772][ T6760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.971319][ T6760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.975052][ T6006] usb 8-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.979532][ T6006] usb 8-1: config 1 interface 0 has no altsetting 0 [ 72.982376][ T6760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.988884][ T6006] usb 8-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 72.991503][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.993728][ T6006] usb 8-1: Product: 죕꼔銵ﳍ澏ி慂㶧暦㨺䦟袨꒫ꊹ콽や옛唊햎序ⷻณ鐹哬扢ꭑ᪇邬贮쳲㪄Ὃ⿗쨎⏦ [ 72.996626][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.998232][ T6006] usb 8-1: Manufacturer: 㐁 [ 73.001513][ T6006] usb 8-1: SerialNumber: 倊 [ 73.007880][ T6760] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011210][ T6760] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.014294][ T6760] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.019116][ T6760] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.027865][ T40] audit: type=1400 audit(1742529146.000:423): avc: denied { getopt } for pid=6823 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.060054][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.062883][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.073525][ T6561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.076809][ T6561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.084821][ T40] audit: type=1400 audit(1742529146.050:424): avc: denied { mounton } for pid=6760 comm="syz-executor" path="/syzkaller.nnxWOw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.096415][ T40] audit: type=1400 audit(1742529146.060:425): avc: denied { mount } for pid=6760 comm="syz-executor" name="/" dev="gadgetfs" ino=8909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.158945][ T40] audit: type=1400 audit(1742529146.130:426): avc: denied { setopt } for pid=6829 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.159460][ T6830] __nla_validate_parse: 10 callbacks suppressed [ 73.159471][ T6830] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.202'. [ 73.170939][ T6830] openvswitch: netlink: Key type 8215 is out of range max 32 [ 73.179394][ T40] audit: type=1400 audit(1742529146.150:427): avc: denied { append } for pid=6829 comm="syz.4.202" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.180518][ T6830] program syz.4.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.210318][ T40] audit: type=1400 audit(1742529146.180:428): avc: denied { create } for pid=6786 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.220056][ T6830] XFS (nullb0): Invalid superblock magic number [ 73.223136][ T6006] usbhid 8-1:1.0: can't add hid device: -71 [ 73.224848][ T6006] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 73.233475][ T6006] usb 8-1: USB disconnect, device number 3 [ 73.756315][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 73.793069][ T6859] ceph: Path missing in source [ 73.800916][ T6861] netlink: zone id is out of range [ 73.802985][ T6861] netlink: zone id is out of range [ 73.805040][ T6861] netlink: zone id is out of range [ 73.807431][ T6861] netlink: zone id is out of range [ 73.809538][ T6861] netlink: zone id is out of range [ 73.811537][ T6861] netlink: zone id is out of range [ 73.813666][ T6861] netlink: zone id is out of range [ 73.815861][ T6861] netlink: zone id is out of range [ 73.818375][ T6861] netlink: zone id is out of range [ 73.879762][ T6868] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.095747][ T65] Bluetooth: hci1: command tx timeout [ 74.155702][ T6827] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 74.246037][ T5987] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 74.285770][ T6827] usb 5-1: device descriptor read/64, error -71 [ 74.397097][ T5987] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 74.400222][ T5987] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 74.403995][ T5987] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 74.407411][ T5987] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.413627][ T5987] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 74.416995][ T5987] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 74.419980][ T5987] usb 9-1: Product: syz [ 74.421570][ T5987] usb 9-1: Manufacturer: syz [ 74.426411][ T5987] cdc_wdm 9-1:1.0: skipping garbage [ 74.428305][ T5987] cdc_wdm 9-1:1.0: skipping garbage [ 74.430239][ T5987] cdc_wdm 9-1:1.0: skipping garbage [ 74.432102][ T5987] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 74.525737][ T6827] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 74.624053][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 74.640980][ T6017] usb 9-1: USB disconnect, device number 2 [ 74.658417][ T6827] usb 5-1: device descriptor read/64, error -71 [ 74.775852][ T6827] usb usb5-port1: attempt power cycle [ 74.844902][ T65] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 75.125970][ T6827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.167927][ T6827] usb 5-1: device descriptor read/8, error -71 [ 75.341361][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 75.371963][ T6951] netlink: 6 bytes leftover after parsing attributes in process `syz.3.256'. [ 75.425708][ T6827] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 75.444338][ T6958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 75.446302][ T6827] usb 5-1: device descriptor read/8, error -71 [ 75.451836][ T6960] capability: warning: `syz.4.258' uses deprecated v2 capabilities in a way that may be insecure [ 75.556516][ T6827] usb usb5-port1: unable to enumerate USB device [ 75.582505][ T6982] ufs: Invalid option: "grpquota" or missing value [ 75.584412][ T6982] ufs: wrong mount options [ 75.638467][ T6990] netlink: 'syz.4.269': attribute type 10 has an invalid length. [ 75.756816][ T7005] netfs: Couldn't get user pages (rc=-14) [ 75.823608][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 76.048348][ T7048] kernel read not supported for file /policy (pid: 7048 comm: syz.3.284) [ 76.098231][ T7052] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.101452][ T7052] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 76.104164][ T7052] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 76.107418][ T7052] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 76.142154][ T7054] tipc: Started in network mode [ 76.143687][ T7054] tipc: Node identity 4, cluster identity 4711 [ 76.145786][ T7054] tipc: Node number set to 4 [ 76.175854][ T65] Bluetooth: hci1: command tx timeout [ 76.188543][ T7060] trusted_key: encrypted_key: insufficient parameters specified [ 76.193001][ T7060] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 76.263804][ T7076] rose0: entered allmulticast mode [ 76.324645][ T7081] xt_hashlimit: size too large, truncated to 1048576 [ 76.420980][ T7090] batman_adv: batadv0: Adding interface: dummy0 [ 76.422809][ T7090] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.432893][ T7090] batman_adv: batadv0: Interface activated: dummy0 [ 76.575556][ T6006] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.746951][ T6006] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 76.755503][ T6006] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 76.758199][ T6006] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 76.760699][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.764971][ T7084] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.774952][ T6006] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.931170][ T7100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 76.933776][ T7100] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 76.936622][ T7100] overlayfs: missing 'lowerdir' [ 76.979137][ T7084] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 76.982887][ T7084] SELinux: failed to load policy [ 76.990466][ T6010] usb 8-1: USB disconnect, device number 4 [ 77.234392][ T7119] team0: Device ipvlan2 failed to register rx_handler [ 77.402120][ T7128] netlink: 5 bytes leftover after parsing attributes in process `syz.4.309'. [ 77.404727][ T7128] 0XD: renamed from gretap0 (while UP) [ 77.407989][ T7128] 0XD: entered allmulticast mode [ 77.417520][ T7128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.309'. [ 77.582524][ T7142] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 77.647234][ T7153] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7153 comm: syz.4.317) [ 77.670536][ T7157] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.812150][ T7184] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.880715][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 77.880725][ T40] audit: type=1400 audit(1742529150.850:472): avc: denied { accept } for pid=7189 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.883830][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 77.921660][ T40] audit: type=1400 audit(1742529150.890:473): avc: denied { setopt } for pid=7195 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.003299][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.005804][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.008531][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.013558][ T7200] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.018792][ T7200] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.030818][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.033297][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.035371][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.038256][ T7200] wg1 speed is unknown, defaulting to 1000 [ 78.146917][ T7208] wg1 speed is unknown, defaulting to 1000 [ 78.255577][ T65] Bluetooth: hci1: command tx timeout [ 78.265656][ T7211] netlink: 'syz.0.331': attribute type 4 has an invalid length. [ 78.281684][ T7211] netlink: 'syz.0.331': attribute type 4 has an invalid length. [ 78.482213][ T40] audit: type=1400 audit(1742529151.450:474): avc: denied { map } for pid=7230 comm="syz.3.336" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.501938][ T40] audit: type=1400 audit(1742529151.470:475): avc: denied { read } for pid=7225 comm="syz.0.335" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.510775][ T40] audit: type=1400 audit(1742529151.470:476): avc: denied { open } for pid=7225 comm="syz.0.335" path="/90/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.524815][ T7234] block device autoloading is deprecated and will be removed. [ 78.544545][ T40] audit: type=1400 audit(1742529151.510:477): avc: denied { create } for pid=7240 comm="syz.3.338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.557522][ T40] audit: type=1400 audit(1742529151.510:478): avc: denied { setattr } for pid=7240 comm="syz.3.338" name="file0" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.565363][ T40] audit: type=1400 audit(1742529151.510:479): avc: denied { read } for pid=7240 comm="syz.3.338" name="file0" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.571922][ T40] audit: type=1400 audit(1742529151.510:480): avc: denied { open } for pid=7240 comm="syz.3.338" path="/118/file0" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.580428][ T40] audit: type=1400 audit(1742529151.550:481): avc: denied { ioctl } for pid=7225 comm="syz.0.335" path="/90/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 79.177012][ T7280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30873 sclass=netlink_route_socket pid=7280 comm=syz.2.343 [ 79.382942][ T7289] : Can't lookup blockdev [ 79.560317][ T7305] pim6reg1: entered promiscuous mode [ 79.562431][ T7305] pim6reg1: entered allmulticast mode [ 79.598477][ T7314] __nla_validate_parse: 2 callbacks suppressed [ 79.598487][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 80.335548][ T65] Bluetooth: hci1: command tx timeout [ 80.557854][ T7379] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 80.921511][ T7399] sp0: Synchronizing with TNC [ 80.983598][ T7413] ax25_connect(): syz.0.377 uses autobind, please contact jreuter@yaina.de [ 81.059933][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.380'. [ 81.100222][ T7419] Option ''MO' to dns_resolver key: bad/missing value [ 81.134731][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 81.139847][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 81.269504][ T7438] overlay: filesystem on ./bus not supported as upperdir [ 81.295558][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.390'. [ 81.377424][ T77] cfg80211: failed to load regulatory.db [ 81.685569][ T6017] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 81.839066][ T6017] usb 5-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 81.842001][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.849338][ T6017] usb 5-1: config 0 descriptor?? [ 81.987005][ T7474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.400'. [ 82.058289][ T6017] usbhid 5-1:0.0: can't add hid device: -71 [ 82.060032][ T6017] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.066212][ T6017] usb 5-1: USB disconnect, device number 7 [ 82.074796][ T7485] Invalid option length (1047906) for dns_resolver key [ 82.085561][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 82.088121][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 82.090905][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.094488][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.099904][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.103245][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.107168][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.110856][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.114194][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.117666][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.121160][ T7487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7487 comm=syz.4.404 [ 82.189125][ T7495] overlayfs: failed to resolve '/7': -2 [ 82.235670][ T7501] ufs: Invalid option: "grpquota" or missing value [ 82.237610][ T7501] ufs: wrong mount options [ 82.258152][ T7505] net_ratelimit: 27 callbacks suppressed [ 82.258162][ T7505] skbuff: bad partial csum: csum=65506/2 headroom=176 headlen=65526 [ 82.274601][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.409'. [ 82.277864][ T7507] netlink: 56 bytes leftover after parsing attributes in process `syz.3.409'. [ 82.378366][ T7512] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 82.408617][ T7519] program syz.3.412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.759435][ T7533] wg1 speed is unknown, defaulting to 1000 [ 82.847958][ T6017] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 82.996354][ T6017] usb 8-1: not running at top speed; connect to a high speed hub [ 82.999794][ T6017] usb 8-1: config 2 has an invalid interface number: 97 but max is 0 [ 83.002246][ T6017] usb 8-1: config 2 has no interface number 0 [ 83.004494][ T6017] usb 8-1: config 2 interface 97 altsetting 112 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 83.008706][ T6017] usb 8-1: config 2 interface 97 altsetting 112 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 83.012124][ T6017] usb 8-1: config 2 interface 97 altsetting 112 has a duplicate endpoint with address 0x8, skipping [ 83.016028][ T6017] usb 8-1: config 2 interface 97 altsetting 112 has a duplicate endpoint with address 0x3, skipping [ 83.019840][ T6017] usb 8-1: config 2 interface 97 altsetting 112 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 83.023763][ T6017] usb 8-1: config 2 interface 97 altsetting 112 has a duplicate endpoint with address 0xC, skipping [ 83.027652][ T6017] usb 8-1: config 2 interface 97 has no altsetting 0 [ 83.031510][ T6017] usb 8-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=a7.b0 [ 83.034718][ T6017] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.037932][ T6017] usb 8-1: Product: syz [ 83.039450][ T6017] usb 8-1: Manufacturer: syz [ 83.040991][ T6017] usb 8-1: SerialNumber: syz [ 83.043911][ T7524] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.265386][ T6017] usb 8-1: USB disconnect, device number 5 [ 83.266032][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 83.266041][ T40] audit: type=1400 audit(1742529156.230:544): avc: denied { append } for pid=7562 comm="syz.4.426" name="v4l-subdev1" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.271211][ T7563] ip6t_REJECT: ECHOREPLY is not supported [ 83.288448][ T40] audit: type=1400 audit(1742529156.260:545): avc: denied { getopt } for pid=7562 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.692249][ T40] audit: type=1400 audit(1742529156.660:546): avc: denied { bind } for pid=7567 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.782106][ T7570] vivid-000: ================= START STATUS ================= [ 83.784443][ T7570] vivid-000: Radio HW Seek Mode: Bounded [ 83.786215][ T7570] vivid-000: Radio Programmable HW Seek: false [ 83.787935][ T7570] vivid-000: RDS Rx I/O Mode: Block I/O [ 83.789487][ T7570] vivid-000: Generate RBDS Instead of RDS: false [ 83.791248][ T7570] vivid-000: RDS Reception: true [ 83.792660][ T7570] vivid-000: RDS Program Type: 0 inactive [ 83.794298][ T7570] vivid-000: RDS PS Name: inactive [ 83.795824][ T7570] vivid-000: RDS Radio Text: inactive [ 83.797390][ T7570] vivid-000: RDS Traffic Announcement: false inactive [ 83.799497][ T7570] vivid-000: RDS Traffic Program: false inactive [ 83.801320][ T7570] vivid-000: RDS Music: false inactive [ 83.802848][ T7570] vivid-000: ================== END STATUS ================== [ 83.850996][ T40] audit: type=1400 audit(1742529156.820:547): avc: denied { listen } for pid=7573 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.857364][ T40] audit: type=1400 audit(1742529156.830:548): avc: denied { accept } for pid=7573 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.964876][ T7584] overlay: ./file1 is not a directory [ 83.968862][ T7584] overlay: ./file1 is not a directory [ 83.990055][ T7584] overlayfs: conflicting options: userxattr,verity=on [ 84.026437][ T40] audit: type=1400 audit(1742529157.000:549): avc: denied { ioctl } for pid=7586 comm="syz.3.435" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.058450][ T65] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 84.065569][ T40] audit: type=1400 audit(1742529157.030:550): avc: denied { getopt } for pid=7590 comm="syz.3.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 84.083374][ T7597] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 84.133598][ T40] audit: type=1400 audit(1742529157.100:551): avc: denied { setattr } for pid=7600 comm="syz.3.439" name="cec3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.159718][ T7603] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 84.163681][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.167433][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.172961][ T7603] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 84.202325][ T40] audit: type=1400 audit(1742529157.170:552): avc: denied { setcheckreqprot } for pid=7609 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.202497][ T7611] SELinux: syz.0.443 (7611) set checkreqprot to 1. This is no longer supported. [ 84.230461][ T7611] vlan3: entered promiscuous mode [ 84.233446][ T7611] vlan3: entered allmulticast mode [ 84.235006][ T7611] hsr_slave_1: entered allmulticast mode [ 84.279764][ T7617] selinux_netlink_send: 55 callbacks suppressed [ 84.279775][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7617 comm=syz.0.446 [ 84.313968][ T7618] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 84.363377][ T40] audit: type=1400 audit(1742529157.330:553): avc: denied { wake_alarm } for pid=7624 comm="syz.4.449" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.469218][ T7642] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 84.475665][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.478603][ T7642] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.484137][ T7649] xt_limit: Overflow, try lower: 1207959552/384 [ 84.490556][ T7650] xt_limit: Overflow, try lower: 1207959552/384 [ 84.597674][ T6017] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 84.725646][ T6017] usb 5-1: device descriptor read/64, error -71 [ 84.730274][ T7671] tmpfs: Bad value for 'mpol' [ 84.772334][ T7676] tipc: Started in network mode [ 84.773633][ T7676] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 84.777961][ T7676] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 84.781094][ T7676] tipc: Enabled bearer , priority 10 [ 84.783815][ T7676] __nla_validate_parse: 5 callbacks suppressed [ 84.783827][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.464'. [ 84.965704][ T6017] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.048252][ T7693] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.050088][ T7693] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.060819][ T7693] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.067595][ T7693] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.069552][ T7693] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.072568][ T7693] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.076418][ T7693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.078188][ T7693] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.080389][ T7693] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.083497][ T7693] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.085419][ T7693] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.089558][ T7693] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 85.105631][ T6017] usb 5-1: device descriptor read/64, error -71 [ 85.170596][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.476'. [ 85.172885][ T7712] netlink: 'syz.4.476': attribute type 7 has an invalid length. [ 85.176397][ T7712] netlink: 'syz.4.476': attribute type 8 has an invalid length. [ 85.178549][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 85.220288][ T6017] usb usb5-port1: attempt power cycle [ 85.288639][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 85.555600][ T6017] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.576255][ T6017] usb 5-1: device descriptor read/8, error -71 [ 85.786750][ T5987] tipc: Node number set to 1 [ 85.835541][ T6017] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.868291][ T6017] usb 5-1: device descriptor read/8, error -71 [ 85.975902][ T6017] usb usb5-port1: unable to enumerate USB device usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 86.292482][ T65] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 86.606393][ T7752] Option ''MO' to dns_resolver key: bad/missing value [ 87.055613][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.136272][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.136312][ T5295] Bluetooth: hci3: command 0x0405 tx timeout [ 87.138031][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.202620][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 87.265024][ T7797] ipt_rpfilter: unknown options [ 87.268438][ T7797] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.339903][ T7808] netfs: Couldn't get user pages (rc=-14) [ 87.440718][ T7818] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 87.477390][ T7821] netlink: 'syz.4.507': attribute type 9 has an invalid length. [ 87.636295][ T7836] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1926430720 (3852861440 ns) > initial count (2369312970 ns). Using initial count to start timer. [ 87.706874][ T7844] vlan2: entered promiscuous mode [ 87.708928][ T7844] vlan2: entered allmulticast mode [ 87.710936][ T7844] hsr_slave_1: entered allmulticast mode [ 88.043631][ T7848] netlink: 68 bytes leftover after parsing attributes in process `syz.2.516'. [ 88.046943][ T7848] netlink: 68 bytes leftover after parsing attributes in process `syz.2.516'. [ 88.082160][ T7851] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 88.085594][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.090056][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.097830][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.100455][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.103219][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.105792][ T7851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.110915][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.113525][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.149096][ T6017] IPVS: starting estimator thread 0... [ 88.235667][ T7856] IPVS: using max 22 ests per chain, 52800 per kthread [ 88.258035][ T7867] netlink: 96 bytes leftover after parsing attributes in process `syz.0.522'. [ 88.270787][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.523'. [ 88.287070][ T7871] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.521'. [ 88.293055][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 88.293066][ T40] audit: type=1400 audit(1742529161.260:575): avc: denied { append } for pid=7872 comm="syz.0.524" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.357347][ T40] audit: type=1400 audit(1742529161.330:576): avc: denied { write } for pid=7878 comm="syz.4.526" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 88.368503][ T7880] loop6: detected capacity change from 0 to 524287999 [ 88.374523][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.381401][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 88.384272][ T7781] loop: Write error at byte offset 1, length 4096. [ 88.388504][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 88.391244][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 88.505885][ T40] audit: type=1400 audit(1742529161.470:577): avc: denied { setopt } for pid=7900 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.511591][ T40] audit: type=1400 audit(1742529161.470:578): avc: denied { shutdown } for pid=7900 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.524493][ T7908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.551921][ T7913] netlink: 'syz.0.533': attribute type 28 has an invalid length. [ 88.554124][ T7913] netlink: 'syz.0.533': attribute type 3 has an invalid length. [ 88.559916][ T7913] netlink: 'syz.0.533': attribute type 28 has an invalid length. [ 88.562109][ T7913] netlink: 'syz.0.533': attribute type 3 has an invalid length. [ 88.650201][ T7920] mkiss: ax0: crc mode is auto. [ 88.772779][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dd5800: rx timeout, send abort [ 88.805062][ T7927] 9pnet_fd: p9_fd_create_tcp (7927): problem connecting socket to 127.0.0.1 [ 88.809523][ T40] audit: type=1400 audit(1742529161.780:579): avc: denied { listen } for pid=7926 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.817485][ T40] audit: type=1400 audit(1742529161.790:580): avc: denied { accept } for pid=7926 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 88.845555][ T6008] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 88.995969][ T6008] usb 5-1: Using ep0 maxpacket: 8 [ 88.999786][ T6008] usb 5-1: config 20 has an invalid interface number: 159 but max is 3 [ 89.002977][ T6008] usb 5-1: config 20 contains an unexpected descriptor of type 0x2, skipping [ 89.006694][ T6008] usb 5-1: config 20 contains an unexpected descriptor of type 0x1, skipping [ 89.010247][ T6008] usb 5-1: config 20 has an invalid descriptor of length 0, skipping remainder of the config [ 89.014164][ T6008] usb 5-1: config 20 has 1 interface, different from the descriptor's value: 4 [ 89.018702][ T6008] usb 5-1: config 20 has no interface number 0 [ 89.021264][ T6008] usb 5-1: config 20 interface 159 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 89.026559][ T6008] usb 5-1: config 20 interface 159 has no altsetting 0 [ 89.030794][ T6008] usb 5-1: New USB device found, idVendor=1210, idProduct=0003, bcdDevice= 1.00 [ 89.034418][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.038242][ T6008] usb 5-1: Product: ࠊ [ 89.039578][ T6008] usb 5-1: Manufacturer: 蜂ꁡ⦜隫﷬ᇫᰑ㗧⾧ʯ㷍ᷘⱝ鳠裮둪뻀涯莍䉏﬍쿙莡䶣 [ 89.042680][ T6008] usb 5-1: SerialNumber: ఆ漲秖릣ꛠ锃ި掯㮀哒쮿鿉꾱䀴횹鑴ᶊϹ竒ꧢ鋄ᵾ₼籗졹櫝窴두و歀華桽〧蘭韼鐇쎞庋渪藉ꍐ猪ऒ腒䥿厗魀扡蘃䝧喸䱭偕嬴惯⦂ꦁ [ 89.135751][ T5295] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.215735][ T5959] Bluetooth: hci3: command 0x0405 tx timeout [ 89.215833][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.215968][ T5295] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.273342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dd6400: rx timeout, send abort [ 89.277366][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dd5800: abort rx timeout. Force session deactivation [ 89.310843][ T40] audit: type=1400 audit(1742529162.280:581): avc: denied { read } for pid=7932 comm="syz.4.538" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.325504][ T40] audit: type=1400 audit(1742529162.280:582): avc: denied { open } for pid=7932 comm="syz.4.538" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.370563][ T40] audit: type=1400 audit(1742529162.340:583): avc: denied { ioctl } for pid=7932 comm="syz.4.538" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.464229][ T40] audit: type=1400 audit(1742529162.430:584): avc: denied { mount } for pid=7916 comm="syz.0.534" name="/" dev="hugetlbfs" ino=21918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 89.481688][ T7917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.484725][ T7917] overlayfs: maximum fs stacking depth exceeded [ 89.491268][ T6008] usb-storage 5-1:20.159: USB Mass Storage device detected [ 89.503119][ T6008] usb-storage 5-1:20.159: Quirks match for vid 1210 pid 0003: 20 [ 89.575125][ T6008] usb 5-1: USB disconnect, device number 12 [ 89.614886][ T7950] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 89.659182][ T7954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.744180][ T7966] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 89.753138][ T7966] CIFS: Unable to determine destination address [ 89.776778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dd6400: abort rx timeout. Force session deactivation [ 89.811673][ T7971] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 89.832482][ T7971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.842425][ T7971] bond2: (slave gretap2): making interface the new active one [ 89.853608][ T7971] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 90.001989][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 90.002948][ T7988] netlink: 'syz.4.556': attribute type 13 has an invalid length. [ 90.007547][ T7988] __nla_validate_parse: 4 callbacks suppressed [ 90.007556][ T7988] netlink: 152 bytes leftover after parsing attributes in process `syz.4.556'. [ 90.013087][ T7988] syz_tun: refused to change device tx_queue_len [ 90.014894][ T7988] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.049214][ T7997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 90.052253][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 90.180802][ T8019] x_tables: duplicate underflow at hook 1 [ 90.425639][ T6148] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 90.441870][ T8040] overlay: Unknown parameter 'fowner<00000000000000016384' [ 90.597996][ T6148] usb 7-1: config 8 has an invalid interface number: 219 but max is 0 [ 90.601269][ T6148] usb 7-1: config 8 has no interface number 0 [ 90.603656][ T6148] usb 7-1: config 8 interface 219 altsetting 9 endpoint 0xA is Bulk; changing to Interrupt [ 90.607679][ T6148] usb 7-1: config 8 interface 219 altsetting 9 endpoint 0xF has invalid maxpacket 16, setting to 0 [ 90.611653][ T6148] usb 7-1: config 8 interface 219 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 90.615744][ T6148] usb 7-1: config 8 interface 219 altsetting 9 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 90.619812][ T6148] usb 7-1: config 8 interface 219 altsetting 9 endpoint 0x2 is Bulk; changing to Interrupt [ 90.623616][ T6148] usb 7-1: config 8 interface 219 altsetting 9 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 90.627558][ T6148] usb 7-1: config 8 interface 219 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 90.631437][ T6148] usb 7-1: config 8 interface 219 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 90.635624][ T6148] usb 7-1: config 8 interface 219 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 90.639710][ T6148] usb 7-1: config 8 interface 219 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 90.643843][ T6148] usb 7-1: config 8 interface 219 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 90.647930][ T6148] usb 7-1: config 8 interface 219 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 90.651934][ T6148] usb 7-1: config 8 interface 219 has no altsetting 0 [ 91.083845][ T8044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46346 sclass=netlink_route_socket pid=8044 comm=syz.3.572 [ 91.137034][ T8050] kAFS: unparsable volume name [ 91.139805][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 91.225558][ T5957] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.295616][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.295630][ T65] Bluetooth: hci3: command 0x0405 tx timeout [ 91.306593][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.497960][ T8079] input: syz0 as /devices/virtual/input/input8 [ 91.719468][ T8102] netlink: 'syz.0.587': attribute type 1 has an invalid length. [ 91.740735][ T8102] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 91.746733][ T7779] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 91.752428][ T8102] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.859180][ T7778] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 93.192832][ T6148] usb 7-1: Dual-Role OTG device on HNP port [ 93.197519][ T6148] usb 7-1: can't set HNP mode: -71 [ 93.319251][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 93.319263][ T40] audit: type=1400 audit(1742529166.290:594): avc: denied { module_request } for pid=8145 comm="syz.2.596" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 93.378711][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.418397][ T40] audit: type=1400 audit(1742529166.390:595): avc: denied { map } for pid=8145 comm="syz.2.596" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.425180][ T40] audit: type=1400 audit(1742529166.390:596): avc: denied { execute } for pid=8145 comm="syz.2.596" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 93.480470][ T8150] CIFS mount error: No usable UNC path provided in device string! [ 93.480470][ T8150] [ 93.484008][ T8150] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.618954][ T6008] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.619388][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.621664][ T6008] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 93.917679][ T40] audit: type=1400 audit(1742529166.890:597): avc: denied { map } for pid=8155 comm="syz.2.598" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 93.924243][ T40] audit: type=1400 audit(1742529166.890:598): avc: denied { execute } for pid=8155 comm="syz.2.598" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.325725][ T8171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.600'. [ 94.330518][ T8171] 9p: Unknown Cache mode or invalid value mmap"uname=rfdno [ 94.402956][ T8178] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 94.610208][ T8187] netlink: 'syz.2.607': attribute type 2 has an invalid length. [ 95.015522][ T77] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 95.177218][ T77] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.180190][ T77] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.183256][ T77] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 95.185835][ T77] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.189500][ T77] usb 7-1: config 0 descriptor?? [ 95.192561][ T77] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 95.194602][ T77] dvb-usb: bulk message failed: -22 (3/0) [ 95.200648][ T77] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 95.203508][ T77] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 95.205669][ T77] usb 7-1: media controller created [ 95.208075][ T77] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.216853][ T77] dvb-usb: bulk message failed: -22 (6/0) [ 95.219046][ T77] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 95.222412][ T77] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input9 [ 95.229832][ T77] dvb-usb: schedule remote query interval to 150 msecs. [ 95.232087][ T77] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 95.398108][ T77] dvb-usb: bulk message failed: -22 (1/0) [ 95.399882][ T77] dvb-usb: error while querying for an remote control event. [ 95.405390][ T6148] usb 7-1: USB disconnect, device number 6 [ 95.431360][ T6148] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 95.678519][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 95.680964][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 95.695638][ T5957] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.695755][ T6008] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 95.699658][ T6008] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 95.748341][ T40] audit: type=1400 audit(1742529168.720:599): avc: denied { bind } for pid=8216 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 95.806961][ T8221] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.857041][ T5957] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.282413][ T8251] loop9: detected capacity change from 0 to 16 [ 96.289282][ T8251] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 96.291631][ T8251] loop9: partition table partially beyond EOD, truncated [ 96.305571][ T8251] loop9: p1 size 81768186 extends beyond EOD, truncated [ 96.358470][ T8251] input: syz1 as /devices/virtual/input/input10 [ 96.411436][ T8259] SELinux: policydb magic number 0x797c018c does not match expected magic number 0xf97cff8c [ 96.414802][ T8259] SELinux: failed to load policy [ 96.417931][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 96.471594][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 96.560070][ T40] audit: type=1400 audit(1742529169.530:600): avc: denied { shutdown } for pid=8274 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.572089][ T8275] netlink: 80 bytes leftover after parsing attributes in process `syz.2.634'. [ 96.575190][ T40] audit: type=1400 audit(1742529169.540:601): avc: denied { ioctl } for pid=8274 comm="syz.2.634" path="socket:[22480]" dev="sockfs" ino=22480 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.602446][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8275 comm=syz.2.634 [ 96.642662][ T8279] netlink: 'syz.2.635': attribute type 10 has an invalid length. [ 96.646180][ T8279] syz_tun: entered promiscuous mode [ 96.760384][ T8282] overlayfs: missing 'workdir' [ 96.841047][ T8285] 9pnet_fd: p9_fd_create_unix (8285): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 96.857148][ T77] libceph: connect (1)[c::]:6789 error -101 [ 96.859615][ T77] libceph: mon0 (1)[c::]:6789 connect error [ 96.903380][ T8285] ceph: No mds server is up or the cluster is laggy [ 96.968815][ T40] audit: type=1400 audit(1742529169.940:602): avc: denied { read } for pid=8289 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.969109][ T8290] netlink: 'syz.2.638': attribute type 9 has an invalid length. [ 96.978221][ T8290] netlink: 244 bytes leftover after parsing attributes in process `syz.2.638'. [ 97.109787][ T40] audit: type=1400 audit(1742529170.080:603): avc: denied { map } for pid=8296 comm="syz.2.640" path="socket:[22779]" dev="sockfs" ino=22779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 97.121431][ T8298] overlay: ./file0 is not a directory [ 97.140530][ T8300] bpf: Bad value for 'gid' [ 97.150428][ T8300] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 97.447324][ T8322] loop2: detected capacity change from 0 to 7 [ 97.450454][ T8322] Dev loop2: unable to read RDB block 7 [ 97.452005][ T8322] loop2: AHDI p1 p2 [ 97.453092][ T8322] loop2: partition table partially beyond EOD, truncated [ 97.455374][ T8322] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 97.470743][ T6743] udevd[6743]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.775612][ T6008] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 97.775625][ T65] Bluetooth: hci3: command 0x0405 tx timeout [ 97.777703][ T6008] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 98.016211][ T7776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.081172][ T8340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58073 sclass=netlink_route_socket pid=8340 comm=syz.2.656 [ 98.985662][ T58] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 99.139782][ T58] usb 7-1: config 1 interface 0 has no altsetting 0 [ 99.143120][ T58] usb 7-1: New USB device found, idVendor=0525, idProduct=0000, bcdDevice= 0.40 [ 99.146497][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.148640][ T58] usb 7-1: Product: syz [ 99.149752][ T58] usb 7-1: Manufacturer: syz [ 99.150999][ T58] usb 7-1: SerialNumber: syz [ 99.306224][ T7780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.373953][ T58] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0x0000 [ 99.379706][ T58] usb 7-1: USB disconnect, device number 7 [ 99.386255][ T58] usblp0: removed [ 99.855570][ T65] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.855595][ T6008] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 99.860055][ T6008] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 100.110109][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 100.112605][ T8357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 100.812939][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 100.812951][ T40] audit: type=1400 audit(1742529173.780:609): avc: denied { bind } for pid=8383 comm="syz.3.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.857931][ T40] audit: type=1400 audit(1742529173.830:610): avc: denied { accept } for pid=8385 comm="syz.3.667" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 101.430691][ T40] audit: type=1326 audit(1742529174.400:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.2.669" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa85b58d169 code=0x0 [ 101.536473][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 101.935767][ T65] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 101.935853][ T5959] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 101.936061][ T5957] Bluetooth: hci5: command 0x1003 tx timeout [ 101.936110][ T5957] Bluetooth: hci4: command 0xfc11 tx timeout [ 101.996025][ T8397] netlink: 72 bytes leftover after parsing attributes in process `syz.0.670'. [ 102.024598][ T40] audit: type=1326 audit(1742529174.990:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8398 comm="syz.4.671" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75c638d169 code=0x0 [ 102.193025][ T40] audit: type=1400 audit(1742529175.160:613): avc: denied { read } for pid=8404 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.281609][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 102.376173][ T8420] openvswitch: netlink: Unknown key attributes 2 [ 102.378511][ T8421] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 102.490591][ T8428] dns_resolver: Unsupported content type (234) [ 102.562060][ T8437] bridge_slave_0: left allmulticast mode [ 102.564060][ T8437] bridge_slave_0: left promiscuous mode [ 102.567545][ T8437] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.571942][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.578326][ T8437] bond0: (slave bond_slave_0): Releasing backup interface [ 102.584279][ T8437] bond0: (slave bond_slave_1): Releasing backup interface [ 102.593059][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.598480][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.602035][ T8437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.604498][ T8437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.610155][ T8438] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 102.614350][ T8437] bond2: (slave ip6gretap1): Removing an active aggregator [ 102.618585][ T8437] bond2: (slave ip6gretap1): Releasing backup interface [ 102.630518][ T8438] bond0: (slave wlan1): Opening slave failed [ 102.764777][ T8447] fuseblk: Bad value for 'rootmode' [ 102.771810][ T8447] fuseblk: Bad value for 'rootmode' [ 102.917972][ T8464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.956627][ T40] audit: type=1400 audit(1742529175.920:614): avc: denied { name_connect } for pid=8467 comm="syz.4.691" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 102.965161][ T40] audit: type=1400 audit(1742529175.930:615): avc: denied { mounton } for pid=8460 comm="syz.0.690" path="/160/file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.986419][ T8462] 9pnet: Could not find request transport: w [ 103.147661][ T8484] xt_hashlimit: max too large, truncated to 1048576 [ 103.149960][ T8484] xt_bpf: check failed: parse error [ 103.264242][ T40] audit: type=1400 audit(1742529176.230:616): avc: denied { execute } for pid=8491 comm="syz.2.697" path="/dev/audio1" dev="devtmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 103.524362][ T8500] ptrace attach of "/syz-executor exec"[5953] was attempted by ""[8500] [ 103.534459][ T40] audit: type=1400 audit(1742529176.500:617): avc: denied { getopt } for pid=8499 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.652452][ T40] audit: type=1400 audit(1742529176.620:618): avc: denied { read } for pid=8507 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.782395][ T7780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.798358][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.706'. [ 103.801713][ T8519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.706'. [ 103.924513][ T7780] Bluetooth: (null): Invalid header checksum [ 103.927922][ T7780] Bluetooth: (null): Invalid header checksum [ 103.930103][ T7780] Bluetooth: (null): Invalid header checksum [ 104.009396][ T8486] syz.0.695 (8486) used greatest stack depth: 20224 bytes left [ 104.037444][ T7777] Bluetooth: (null): Invalid header checksum [ 104.408202][ T6008] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 104.535570][ T6008] usb 7-1: device descriptor read/64, error -71 [ 104.585587][ T6148] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 104.735702][ T6148] usb 9-1: Using ep0 maxpacket: 16 [ 104.739208][ T6148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.743378][ T6148] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.748186][ T6148] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.752641][ T6148] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 104.756217][ T6148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.764869][ T6148] usb 9-1: config 0 descriptor?? [ 104.775854][ T6008] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 104.905985][ T6008] usb 7-1: device descriptor read/64, error -71 [ 104.972831][ T8560] tmpfs: Bad value for 'mpol' [ 105.026005][ T6008] usb usb7-port1: attempt power cycle [ 105.066594][ T7779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.365644][ T6008] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 105.369893][ T8533] random: crng reseeded on system resumption [ 105.387306][ T6008] usb 7-1: device descriptor read/8, error -71 [ 105.555695][ T6148] usbhid 9-1:0.0: can't add hid device: -71 [ 105.557450][ T6148] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 105.561588][ T6148] usb 9-1: USB disconnect, device number 3 [ 105.625599][ T6008] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 105.646229][ T6008] usb 7-1: device descriptor read/8, error -71 [ 105.757520][ T6008] usb usb7-port1: unable to enumerate USB device [ 106.490769][ T8581] SELinux: policydb version -494472596 does not match my version range 15-34 [ 106.493528][ T8581] SELinux: failed to load policy [ 106.526559][ T8584] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 107.348487][ T8597] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 107.352214][ T8597] hsr0: entered promiscuous mode [ 107.357364][ T8597] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 107.361432][ T8597] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 107.365614][ T8597] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 107.565704][ T6148] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 107.725970][ T6148] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.730258][ T6148] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 107.733510][ T6148] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.736733][ T6148] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.740325][ T6148] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.743112][ T6148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.747161][ T6148] usb 7-1: config 0 descriptor?? [ 107.749064][ T8593] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.163390][ T6148] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 108.169594][ T6148] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 108.230437][ T6148] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.462785][ T6148] usb 7-1: USB disconnect, device number 12 [ 108.585799][ T5959] Bluetooth: hci0: command tx timeout [ 109.047308][ T8608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.142253][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 109.142263][ T40] audit: type=1400 audit(1742529182.110:625): avc: denied { create } for pid=8619 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.149631][ T40] audit: type=1400 audit(1742529182.120:626): avc: denied { write } for pid=8619 comm="syz.4.741" path="socket:[25253]" dev="sockfs" ino=25253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.159739][ T40] audit: type=1400 audit(1742529182.120:627): avc: denied { nlmsg_read } for pid=8619 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.173279][ T40] audit: type=1400 audit(1742529182.140:628): avc: denied { accept } for pid=8623 comm="syz.2.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.232659][ T8631] netlink: 4420 bytes leftover after parsing attributes in process `syz.4.745'. [ 109.283428][ T40] audit: type=1400 audit(1742529182.250:629): avc: denied { read } for pid=8636 comm="syz.4.746" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.296464][ T40] audit: type=1400 audit(1742529182.270:630): avc: denied { create } for pid=8636 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.297566][ T8624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.303311][ T40] audit: type=1400 audit(1742529182.270:631): avc: denied { listen } for pid=8636 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.303333][ T40] audit: type=1400 audit(1742529182.270:632): avc: denied { accept } for pid=8636 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.318688][ T8624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.327466][ T8624] bond0 (unregistering): Released all slaves [ 109.438435][ T40] audit: type=1400 audit(1742529182.410:633): avc: denied { accept } for pid=8644 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.536203][ T7776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.629179][ T8652] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.639967][ T8649] netfs: Couldn't get user pages (rc=-14) [ 109.675917][ T68] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 109.712003][ T40] audit: type=1400 audit(1742529182.680:634): avc: denied { remount } for pid=8653 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 109.791828][ T8660] ax25_connect(): syz.2.752 uses autobind, please contact jreuter@yaina.de [ 109.798291][ T8662] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.755'. [ 109.801395][ T8662] openvswitch: netlink: EtherType 0 is less than min 600 [ 109.846183][ T68] usb 5-1: Using ep0 maxpacket: 32 [ 109.849822][ T68] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 109.852762][ T68] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 16 [ 109.859003][ T68] usb 5-1: config 1 interface 0 has no altsetting 0 [ 109.863127][ T68] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.871579][ T68] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.875162][ T68] usb 5-1: Product: 㠁 [ 109.877140][ T68] usb 5-1: Manufacturer: ၪ [ 109.878505][ T68] usb 5-1: SerialNumber: Њ [ 109.881157][ T68] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 109.883707][ T68] usb 5-1: no configuration chosen from 1 choice [ 109.897889][ T77] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 109.913821][ T6006] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 109.914668][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 109.918687][ T6006] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 109.921093][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 109.924082][ T6006] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 109.940513][ T6006] hid-generic 0000:0004:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 110.035418][ T8686] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 110.068338][ T77] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.072483][ T77] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.075273][ T77] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.078482][ T77] usb 9-1: config 0 descriptor?? [ 110.110712][ T8689] syzkaller0: entered promiscuous mode [ 110.112826][ T8689] syzkaller0: entered allmulticast mode [ 110.178336][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.297446][ T77] usbhid 9-1:0.0: can't add hid device: -71 [ 110.299330][ T77] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 110.310669][ T77] usb 9-1: USB disconnect, device number 4 [ 110.821073][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.939405][ T8694] 9pnet_virtio: no channels available for device syz [ 110.941916][ T8694] 9pnet_virtio: no channels available for device syz [ 110.944137][ T8694] 9pnet_virtio: no channels available for device syz [ 110.946784][ T8694] 9pnet_virtio: no channels available for device syz [ 110.948883][ T8694] 9pnet_virtio: no channels available for device syz [ 110.950965][ T8694] 9pnet_virtio: no channels available for device syz [ 110.953310][ T8694] 9pnet_virtio: no channels available for device syz [ 110.955415][ T8694] 9pnet_virtio: no channels available for device syz [ 110.957562][ T8694] 9pnet_virtio: no channels available for device syz [ 110.959853][ T8694] 9pnet_virtio: no channels available for device syz [ 110.961885][ T8694] 9pnet_virtio: no channels available for device syz [ 110.963885][ T8694] 9pnet_virtio: no channels available for device syz [ 110.967854][ T8694] 9pnet_virtio: no channels available for device syz [ 110.969941][ T8694] 9pnet_virtio: no channels available for device syz [ 110.972463][ T8694] 9pnet_virtio: no channels available for device syz [ 110.974432][ T8694] 9pnet_virtio: no channels available for device syz [ 110.976769][ T8694] 9pnet_virtio: no channels available for device syz [ 110.979529][ T8694] 9pnet_virtio: no channels available for device syz [ 110.982424][ T8694] 9pnet_virtio: no channels available for device syz [ 110.985176][ T8694] 9pnet_virtio: no channels available for device syz [ 110.988284][ T8694] 9pnet_virtio: no channels available for device syz [ 110.991176][ T8694] 9pnet_virtio: no channels available for device syz [ 110.994027][ T8694] 9pnet_virtio: no channels available for device syz [ 110.996884][ T8694] 9pnet_virtio: no channels available for device syz [ 110.999756][ T8694] 9pnet_virtio: no channels available for device syz [ 111.002659][ T8694] 9pnet_virtio: no channels available for device syz [ 111.005683][ T8694] 9pnet_virtio: no channels available for device syz [ 111.008516][ T8694] 9pnet_virtio: no channels available for device syz [ 111.011309][ T8694] 9pnet_virtio: no channels available for device syz [ 111.014190][ T8694] 9pnet_virtio: no channels available for device syz [ 111.017143][ T8694] 9pnet_virtio: no channels available for device syz [ 111.020001][ T8694] 9pnet_virtio: no channels available for device syz [ 111.279725][ T8702] 9pnet: p9_errstr2errno: server reported unknown error niband/rdma_cm [ 111.329619][ T8705] input: syz0 as /devices/virtual/input/input13 [ 111.399834][ T8711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 111.402567][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.408306][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 111.428831][ T8715] tls_set_device_offload_rx: netdev not found [ 111.480522][ T8725] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.771'. [ 111.597956][ T8712] vhci_hcd: connection closed [ 111.604035][ T7779] vhci_hcd: stop threads [ 111.607663][ T7779] vhci_hcd: release socket [ 111.610409][ T7779] vhci_hcd: disconnect device [ 111.655598][ T6148] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 111.658561][ T6148] usb 43-1: enqueue for inactive port 0 [ 111.725588][ T68] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 111.735752][ T6148] vhci_hcd: vhci_device speed not set [ 111.875558][ T68] usb 9-1: Using ep0 maxpacket: 8 [ 111.879154][ T68] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.883008][ T68] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 111.888317][ T68] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.892689][ T68] usb 9-1: config 0 descriptor?? [ 111.907451][ T8751] netlink: 576 bytes leftover after parsing attributes in process `syz.2.777'. [ 112.302242][ T68] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 112.307532][ T68] usb 9-1: USB disconnect, device number 5 [ 112.359491][ T1343] usb 5-1: USB disconnect, device number 13 [ 112.826359][ T8809] Debayer A: ================= START STATUS ================= [ 112.829206][ T8809] Debayer A: Debayer Mean Window Size: 3 [ 112.831536][ T8809] Debayer A: ================== END STATUS ================== [ 112.973905][ T8831] hfsplus: unable to find HFS+ superblock [ 112.993890][ T8838] overlayfs: failed to resolve './file0': -2 [ 113.002891][ T8831] overlay: ./file0 is not a directory [ 113.010884][ T8842] 9pnet: Could not find request transport: xen [ 113.029079][ T8845] syz.0.798: attempt to access beyond end of device [ 113.029079][ T8845] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 113.032802][ T8845] VFS: could not find a valid V7 on nbd0. [ 113.046221][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 113.047783][ T8845] netlink: 'syz.0.798': attribute type 2 has an invalid length. [ 113.049378][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.799'. [ 113.061693][ T8847] dvmrp0: entered allmulticast mode [ 113.073460][ T8849] syz.2.800 (8849): /proc/8848/oom_adj is deprecated, please use /proc/8848/oom_score_adj instead. [ 113.098833][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 113.170186][ T8861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.179529][ T8867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.355586][ T1343] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 113.409488][ T8878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.811'. [ 113.506619][ T8888] openvswitch: netlink: Actions may not be safe on all matching packets [ 113.512932][ T1343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 113.517680][ T1343] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 113.520196][ T1343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.529140][ T1343] usb 5-1: config 0 descriptor?? [ 113.779991][ T8854] wg1 speed is unknown, defaulting to 1000 [ 113.889620][ T8854] efs: device does not support 512 byte blocks [ 113.891558][ T8854] device does not support 512 byte blocks [ 113.891558][ T8854] [ 114.002001][ T1343] usbhid 5-1:0.0: can't add hid device: -71 [ 114.004887][ T1343] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 114.009507][ T1343] usb 5-1: USB disconnect, device number 14 [ 114.095817][ T8922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.099100][ T8922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.303754][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 114.303765][ T40] audit: type=1400 audit(1742529187.270:648): avc: denied { append } for pid=8930 comm="syz.2.825" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.313171][ T40] audit: type=1400 audit(1742529187.270:649): avc: denied { execute } for pid=8930 comm="syz.2.825" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.579807][ T8951] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 114.581633][ T8950] IPVS: stopping master sync thread 8951 ... [ 114.618898][ T40] audit: type=1400 audit(1742529187.590:650): avc: denied { create } for pid=8956 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 114.628208][ T8957] netlink: 56 bytes leftover after parsing attributes in process `syz.2.831'. [ 114.685712][ T40] audit: type=1400 audit(1742529187.650:651): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.695660][ T40] audit: type=1400 audit(1742529187.650:652): avc: denied { open } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.695698][ T40] audit: type=1400 audit(1742529187.650:653): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.745368][ T8970] netlink: 9 bytes leftover after parsing attributes in process `syz.4.833'. [ 114.749736][ T8970] 0: renamed from hsr_slave_1 (while UP) [ 114.750722][ T40] audit: type=1400 audit(1742529187.720:654): avc: denied { create } for pid=8971 comm="syz.0.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.759311][ T8970] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 114.765527][ T40] audit: type=1400 audit(1742529187.720:655): avc: denied { setopt } for pid=8971 comm="syz.0.834" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.775659][ T40] audit: type=1400 audit(1742529187.740:656): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.782016][ T40] audit: type=1400 audit(1742529187.740:657): avc: denied { read write open } for pid=5956 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.086596][ T8996] netlink: 'syz.4.840': attribute type 4 has an invalid length. [ 115.092930][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 115.102647][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.190929][ T9007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.845'. [ 115.298555][ T7781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.320705][ T9013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 115.403197][ T9017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18200 sclass=netlink_route_socket pid=9017 comm=syz.0.849 [ 115.725622][ T6148] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 115.855654][ T6148] usb 7-1: device descriptor read/64, error -71 [ 115.937150][ T7780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.105705][ T6148] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 116.245603][ T6148] usb 7-1: device descriptor read/64, error -71 [ 116.356936][ T6148] usb usb7-port1: attempt power cycle [ 116.632416][ T9048] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 116.695641][ T6148] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 116.718478][ T6148] usb 7-1: device descriptor read/8, error -71 [ 116.961391][ T6148] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 116.988246][ T6148] usb 7-1: device descriptor read/8, error -71 [ 117.097471][ T6148] usb usb7-port1: unable to enumerate USB device [ 117.368680][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 117.379720][ T9051] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.383304][ T9051] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.386668][ T9051] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.390025][ T9051] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.394244][ T9051] vxlan0: entered promiscuous mode [ 117.497045][ T9056] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 117.886593][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880352e3c00: rx timeout, send abort [ 118.388994][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880352e3c00: abort rx timeout. Force session deactivation [ 118.505794][ T77] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 118.513514][ T77] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 118.544074][ T9070] netlink: 'syz.0.864': attribute type 30 has an invalid length. [ 118.552466][ T9071] tmpfs: Bad value for 'mpol' [ 118.861459][ T9081] netlink: 'syz.4.866': attribute type 58 has an invalid length. [ 118.861474][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'. [ 118.949810][ T7780] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.024357][ T7780] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.076363][ T7780] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.161038][ T7780] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.187234][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.188462][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.189074][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.189686][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.190096][ T65] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.190638][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.197381][ T5959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.200257][ T5959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.200482][ T5959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.201052][ T5959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.201440][ T5959] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.201626][ T5959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.280212][ T9095] wg1 speed is unknown, defaulting to 1000 [ 119.332176][ T40] kauditd_printk_skb: 603 callbacks suppressed [ 119.332186][ T40] audit: type=1400 audit(1742529192.300:1261): avc: denied { name_bind } for pid=9102 comm="syz.4.872" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.337660][ T40] audit: type=1400 audit(1742529192.310:1262): avc: denied { read } for pid=9102 comm="syz.4.872" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.338325][ T40] audit: type=1400 audit(1742529192.310:1263): avc: denied { read open } for pid=9102 comm="syz.4.872" path="net:[4026532887]" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.339391][ T40] audit: type=1400 audit(1742529192.310:1264): avc: denied { create } for pid=9102 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.340901][ T40] audit: type=1400 audit(1742529192.310:1265): avc: denied { ioctl } for pid=9102 comm="syz.4.872" path="socket:[26593]" dev="sockfs" ino=26593 ioctlcmd=0x48e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.343874][ T40] audit: type=1400 audit(1742529192.310:1266): avc: denied { read } for pid=9102 comm="syz.4.872" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.344569][ T40] audit: type=1400 audit(1742529192.310:1267): avc: denied { read open } for pid=9102 comm="syz.4.872" path="net:[4026532887]" dev="nsfs" ino=4026532887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.345665][ T40] audit: type=1400 audit(1742529192.320:1268): avc: denied { create } for pid=9102 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.346840][ T40] audit: type=1400 audit(1742529192.320:1269): avc: denied { getopt } for pid=9102 comm="syz.4.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.355403][ T40] audit: type=1400 audit(1742529192.320:1270): avc: denied { name_bind } for pid=9102 comm="syz.4.872" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 119.595266][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 119.595280][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 119.656899][ T7780] bond0 (unregistering): Released all slaves [ 119.661577][ T7780] bond1 (unregistering): Released all slaves [ 119.748518][ T7780] bond2 (unregistering): Released all slaves [ 119.752149][ T7780] bond3 (unregistering): Released all slaves [ 119.766834][ T9101] netlink: 'syz.3.873': attribute type 6 has an invalid length. [ 119.984811][ T9126] Mount JFS Failure: -22 [ 119.986207][ T9126] jfs_mount failed w/return code = -22 [ 120.111494][ T9095] chnl_net:caif_netlink_parms(): no params data found [ 120.214590][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.217616][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.219716][ T9095] bridge_slave_0: entered allmulticast mode [ 120.222199][ T9095] bridge_slave_0: entered promiscuous mode [ 120.237207][ T7780] hsr_slave_0: left promiscuous mode [ 120.250866][ T7780] hsr_slave_1: left allmulticast mode [ 120.252401][ T7780] hsr_slave_1: left promiscuous mode [ 120.253975][ T7780] veth1_macvtap: left promiscuous mode [ 120.256851][ T7780] veth0_macvtap: left promiscuous mode [ 120.258491][ T7780] veth1_vlan: left promiscuous mode [ 120.259987][ T7780] veth0_vlan: left promiscuous mode [ 120.427048][ T7778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.499645][ T9152] xt_hashlimit: size too large, truncated to 1048576 [ 120.875523][ T5989] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 121.005497][ T5989] usb 9-1: device descriptor read/64, error -71 [ 121.065993][ T7776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.227065][ T5959] Bluetooth: hci3: command tx timeout [ 121.245713][ T5989] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 121.385744][ T5989] usb 9-1: device descriptor read/64, error -71 [ 121.505666][ T5989] usb usb9-port1: attempt power cycle [ 121.601130][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.603128][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.605117][ T9095] bridge_slave_1: entered allmulticast mode [ 121.607427][ T9095] bridge_slave_1: entered promiscuous mode [ 121.640686][ T9095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.646845][ T9095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.677912][ T9095] team0: Port device team_slave_0 added [ 121.682754][ T9095] team0: Port device team_slave_1 added [ 121.703509][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.705549][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.712553][ T9095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.718100][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.720020][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.729676][ T9095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.762363][ T9095] hsr_slave_0: entered promiscuous mode [ 121.764263][ T9095] hsr_slave_1: entered promiscuous mode [ 121.767566][ T9095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.769744][ T9095] Cannot create hsr debugfs directory [ 121.837291][ T9161] QAT: Invalid ioctl -2110754303 [ 121.859862][ T5989] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 121.880747][ T5989] usb 9-1: device descriptor read/8, error -71 [ 121.933700][ T9169] IPv6: NLM_F_REPLACE set, but no existing node found! [ 122.135508][ T5989] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 122.173294][ T5989] usb 9-1: device descriptor read/8, error -71 [ 122.276384][ T5989] usb usb9-port1: unable to enumerate USB device [ 122.294122][ T9176] netlink: 48 bytes leftover after parsing attributes in process `syz.3.889'. [ 122.299562][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.350151][ T9095] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.356356][ T9095] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.361716][ T9095] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.369442][ T9095] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.495327][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.529491][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.543204][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.545176][ T7779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.563848][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.566712][ T7779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.633622][ T9193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9193 comm=syz.3.894 [ 122.658401][ T9193] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 122.670406][ T9193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.681939][ T9193] bond2: (slave ip6gretap1): making interface the new active one [ 122.684618][ T9193] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 123.000253][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 123.003340][ T9202] syz_tun: left allmulticast mode [ 123.005152][ T9202] syz_tun: left promiscuous mode [ 123.007160][ T9202] bridge0: port 3(syz_tun) entered disabled state [ 123.013639][ T9202] bridge_slave_1: left promiscuous mode [ 123.015340][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.018435][ T9202] bridge_slave_0: left allmulticast mode [ 123.020052][ T9202] bridge_slave_0: left promiscuous mode [ 123.021778][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.062857][ T1172] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.229445][ T5953] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000056: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 123.232925][ T5953] KASAN: null-ptr-deref in range [0x00000000000002b0-0x00000000000002b7] [ 123.237443][ T5953] CPU: 2 UID: 0 PID: 5953 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 123.240526][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.243482][ T5953] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 123.245162][ T5953] Code: 89 c3 89 c6 e8 43 a9 3b fe 85 db 75 64 e8 3a ae 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 123.250549][ T5953] RSP: 0018:ffffc90003b5f988 EFLAGS: 00010206 [ 123.252237][ T5953] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e452a [ 123.254470][ T5953] RDX: 0000000000000056 RSI: ffffffff837e44b6 RDI: 00000000000002b0 [ 123.256632][ T5953] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 123.258838][ T5953] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 123.261043][ T5953] R13: ffff88804d781000 R14: 0000000000000003 R15: ffff88805e1e9480 [ 123.263208][ T5953] FS: 000055555606e500(0000) GS:ffff88806a800000(0000) knlGS:0000000000000000 [ 123.265745][ T5953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.267519][ T5953] CR2: 00005555560895c8 CR3: 000000004b0f0000 CR4: 0000000000352ef0 [ 123.269778][ T5953] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.271995][ T5953] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.274207][ T5953] Call Trace: [ 123.275149][ T5953] [ 123.276018][ T5953] ? die_addr+0x3b/0xa0 [ 123.277216][ T5953] ? exc_general_protection+0x155/0x230 [ 123.278867][ T5953] ? asm_exc_general_protection+0x26/0x30 [ 123.280491][ T5953] ? afs_atcell_get_link+0x39a/0x480 [ 123.282037][ T5953] ? afs_atcell_get_link+0x326/0x480 [ 123.283505][ T5953] ? afs_atcell_get_link+0x33e/0x480 [ 123.285008][ T5953] ? afs_atcell_get_link+0x326/0x480 [ 123.286613][ T5953] ? __pfx_afs_atcell_get_link+0x10/0x10 [ 123.288186][ T5953] step_into+0x1982/0x2220 [ 123.289483][ T5953] ? __pfx_step_into+0x10/0x10 [ 123.290859][ T5953] ? lookup_fast+0x153/0x5f0 [ 123.292176][ T5953] path_openat+0x74c/0x2d80 [ 123.293485][ T5953] ? __pfx_path_openat+0x10/0x10 [ 123.294946][ T5953] ? __pfx___lock_acquire+0x10/0x10 [ 123.296420][ T5953] ? lock_acquire.part.0+0x11b/0x380 [ 123.297934][ T5953] ? find_held_lock+0x2d/0x110 [ 123.299285][ T5953] do_filp_open+0x20c/0x470 [ 123.300561][ T5953] ? __pfx_do_filp_open+0x10/0x10 [ 123.302022][ T5953] ? find_held_lock+0x2d/0x110 [ 123.303373][ T5953] ? alloc_fd+0x41f/0x760 [ 123.304599][ T5953] do_sys_openat2+0x17a/0x1e0 [ 123.306012][ T5953] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.307560][ T5953] ? do_unlinkat+0x165/0x760 [ 123.308950][ T5953] ? __virt_addr_valid+0x5e/0x590 [ 123.310396][ T5953] ? __pfx_do_unlinkat+0x10/0x10 [ 123.311863][ T5953] __x64_sys_openat+0x175/0x210 [ 123.313312][ T5953] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.314635][ T5953] do_syscall_64+0xcd/0x250 [ 123.315882][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.317582][ T5953] RIP: 0033:0x7fa85b58bad0 [ 123.318849][ T5953] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 123.324215][ T5953] RSP: 002b:00007ffe2c33cd40 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 123.326570][ T5953] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa85b58bad0 [ 123.328776][ T5953] RDX: 0000000000000000 RSI: 00007ffe2c33ce70 RDI: 00000000ffffff9c [ 123.331006][ T5953] RBP: 00007ffe2c33ce70 R08: 0000000000000000 R09: 0000000000000000 [ 123.333270][ T5953] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffe2c33df00 [ 123.335421][ T5953] R13: 00007fa85b60e08c R14: 000055555606e4a8 R15: 00007ffe2c33df40 [ 123.337751][ T5953] [ 123.338633][ T5953] Modules linked in: [ 123.340129][ T5953] ---[ end trace 0000000000000000 ]--- [ 123.341091][ T65] Bluetooth: hci3: command tx timeout [ 123.342391][ T5953] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 123.345699][ T5953] Code: 89 c3 89 c6 e8 43 a9 3b fe 85 db 75 64 e8 3a ae 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 123.351300][ T5953] RSP: 0018:ffffc90003b5f988 EFLAGS: 00010206 [ 123.353009][ T5953] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e452a [ 123.360131][ T5953] RDX: 0000000000000056 RSI: ffffffff837e44b6 RDI: 00000000000002b0 [ 123.362346][ T5953] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 123.364531][ T5953] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 123.366912][ T5953] R13: ffff88804d781000 R14: 0000000000000003 R15: ffff88805e1e9480 [ 123.366920][ T5953] FS: 000055555606e500(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 123.366942][ T5953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.366951][ T5953] CR2: 00007ffe1f3ca690 CR3: 000000004b0f0000 CR4: 0000000000352ef0 [ 123.366957][ T5953] DR0: 0000000000000000 DR1: 0000000000000066 DR2: 0000000000000000 [ 123.366963][ T5953] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 123.366971][ T5953] Kernel panic - not syncing: Fatal exception [ 123.367501][ T5953] Kernel Offset: disabled VM DIAGNOSIS: 03:10:36 Registers: info registers vcpu 0 CPU#0 RAX=ffff888024766820 RBX=ffff888024766888 RCX=0000000080270024 RDX=0000000080270025 RSI=ffffea000091d980 RDI=0000000000200000 RBP=ffffc9000ff47b70 RSP=ffffc9000ff47b30 R8 =ffff888024766888 R9 =0000000080270024 R10=0000000000000000 R11=0000000000000000 R12=ffff888024766820 R13=0000000080270025 R14=ffffea000091d980 R15=0000000000000000 RIP=ffffffff821206b6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f081c21c270 CR3=000000002532e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000066 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81ab31c8 RDX=0000000000000001 RSI=0000000000000000 RDI=ffffffffffffffff RBP=ffff88801d688000 RSP=ffffc900006c0ba0 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=1ffff920000d817c R14=0000000000000001 R15=ffff88806a72cfe0 RIP=ffffffff818f84a0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2968a4 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000066 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df7ce3bf62a59df3 e9c0d1e18aad0d86 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a9435c8ddc4cf762 cc421b6bd4e6345a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f880cf11fbdde4f2 f587b208b1e65611 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5cb7e5979dd87ce5 6026fe6a30fe8e77 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004b80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003f8004bb91d 9ed800003c780000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 004bb839004bba38 000001e1004bc43b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000d2c41f60000 33f70000f14c0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 04bc00006bbf0000 004bbcf367ef0000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d27a4ace53175de3 c7db3ee535a4a201 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7b577bdd7072567a 4aa5e35ac48f0545 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540c635 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90003b5f380 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540c65f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555606e500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555560895c8 CR3=000000004b0f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe2c33cdc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa85b60f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa85b60f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa85b60f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa85b60f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa85b60f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa85b60f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000188 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffff7fffffffffff RBX=ffffffff9aa2ed48 RCX=ffffffff81973132 RDX=0000000000000001 RSI=0000000000000004 RDI=ffffffff9aa2ed48 RBP=1ffff92000638f0d RSP=ffffc900031c7848 R8 =0000000000000001 R9 =fffffbfff3545da9 R10=ffffffff9aa2ed4b R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000200 R14=dffffc0000000000 R15=0000000000000206 RIP=ffffffff821d03db RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557f60f500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f29502d7d60 CR3=000000002af10000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7d06d090 00007ffd7d06d090 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7d06f1b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f62c7f2 000055557f62c0b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f6224a0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f69f7aa 000055557f69ef00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004a030000000000 0000000000000000 01ffffffffffffff ffe5083003020200 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010010000880a2d7 9008000100000008 06060124aa0fffff ffffffff0400046c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 100006016ee80202 006a030000000000 0000000000000000 01ffffffffffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffe5085003040200 4e0303fe02004c03 0002004a03000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ffffffffff ffffffe508300302 02002e0303f80200 2c030002002a0302 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000