last executing test programs: 12.459711993s ago: executing program 1 (id=976): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x529a02, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002240)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x1, r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f000000ce80)=@newlink={0x20, 0x11, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x420a, 0x14148}}, 0x20}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0x7, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004400c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88001}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)={0x850, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x134, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x19c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xdb7a917f7dbee8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x13c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x62910fc4409493ca}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x158, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6a8bdbc3e877fd00}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x44010}, 0x4048040) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) sendfile(r0, r0, 0x0, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001800010000000000000000000a00000000000000000000001800160014000100020000000000000000001000fc00010008001f"], 0x44}, 0x1, 0x0, 0x0, 0x24041004}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x4080) 12.11842818s ago: executing program 1 (id=981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@dellink={0x40, 0x10, 0xc03, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) timer_create(0x7, 0x0, &(0x7f0000000000)) 12.005639214s ago: executing program 1 (id=983): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffff6, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0x8}]}, 0x78) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0xf) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 11.938660189s ago: executing program 1 (id=987): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x111, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x111, 0x1}}, 0x20) close_range(r1, r1, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r3, 0xc, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r3, 0xc, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x8) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x5, 0xcaf, 0x2, {0x2, @pix_mp={0x0, 0x8000, 0x0, 0x5, 0x7, [{0x7fff}, {0x2, 0x81}, {0x101, 0x5}, {0x100, 0x7fffffff}, {0x9}, {0x4040, 0x5}, {0x8, 0x6}, {0x9, 0x8}], 0x5, 0x3, 0x0, 0x0, 0x2}}, 0x47e3}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x5, 0xcaf, 0x2, {0x2, @pix_mp={0x0, 0x8000, 0x0, 0x5, 0x7, [{0x7fff}, {0x2, 0x81}, {0x101, 0x5}, {0x100, 0x7fffffff}, {0x9}, {0x4040, 0x5}, {0x8, 0x6}, {0x9, 0x8}], 0x5, 0x3, 0x0, 0x0, 0x2}}, 0x47e3}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000003c0)={0x4, 0x8, 0xfa00, {r3, 0x9}}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x4, 0x10}, &(0x7f0000000440)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x4, 0x10}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r4, @in6={{0xa, 0x4e21, 0xb0a, @loopback, 0x6}}, [0x0, 0x8001, 0x3, 0xe7b, 0x33057a81, 0x0, 0x6, 0x5, 0x2, 0x5, 0xfffffffffffff801, 0xffffffffffffffff, 0xc, 0x88d, 0x81]}, &(0x7f0000000580)=0x100) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f00000005c0)=""/4096) connect$vsock_stream(r1, &(0x7f00000015c0)={0x28, 0x0, 0x0, @host}, 0x10) r5 = syz_open_dev$vcsu(&(0x7f0000001600), 0x700000000000000, 0x0) ioctl$sock_ifreq(r5, 0x891a, &(0x7f0000001680)={'pim6reg1\x00', @ifru_data=&(0x7f0000001640)="95ade4dce4a12ef5defaeb91610a9db9f0d28f12de3dc5c6e293c022ee3c67dd"}) connect$inet(r5, &(0x7f00000016c0)={0x2, 0x4e24, @multicast1}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) open$dir(&(0x7f0000001700)='./file0\x00', 0x40000, 0xe1) connect$inet(r6, &(0x7f0000001740)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r6, &(0x7f0000001740)={0x2, 0x4e22, @empty}, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) socket$netlink(0x10, 0x3, 0x9) getxattr(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)=@random={'osx.', '\x00'}, &(0x7f0000001940), 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000001980)={0x4, 0x0, [{0x372, 0x0, 0xc}, {0x20c, 0x0, 0x6}, {0x287, 0x0, 0xfffffffffffffffb}, {0xa33, 0x0, 0x8000}]}) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000001a00)={0x28, 0x2, 0x0, {0x3, 0x5, 0xc}}, 0x28) write$vhost_msg(r5, &(0x7f0000002a80)={0x1, {&(0x7f0000001a40)=""/54, 0x36, &(0x7f0000001a80)=""/4096, 0x1, 0x4}}, 0x48) (async) write$vhost_msg(r5, &(0x7f0000002a80)={0x1, {&(0x7f0000001a40)=""/54, 0x36, &(0x7f0000001a80)=""/4096, 0x1, 0x4}}, 0x48) connect$unix(r1, &(0x7f0000002b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r1, &(0x7f0000002b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003040)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003000)={&(0x7f0000002c00)={0x3e4, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3bc, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c401d507d2fe3818d5b986a0ff71af857331aeb340c74d2e9f594fe91f49ddc"}, @WGPEER_A_FLAGS={0x8, 0x3, 0xa}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x48000}, 0x20000080) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000003040)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003000)={&(0x7f0000002c00)={0x3e4, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3bc, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0c401d507d2fe3818d5b986a0ff71af857331aeb340c74d2e9f594fe91f49ddc"}, @WGPEER_A_FLAGS={0x8, 0x3, 0xa}, @WGPEER_A_ALLOWEDIPS={0x1f8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x48000}, 0x20000080) 11.937333581s ago: executing program 1 (id=989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x2, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x2200, 0x0) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3ff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24040085) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1000100000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfe}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r16}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 11.740507142s ago: executing program 1 (id=992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0x0, 0x0, 0x7, 0x8, 0x0, 0xfd, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x58000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0xc, 0x0, 0x4}, {0x80a0000, 0x18345800, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x3000, 0x0, 0x76, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1, 0x9}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x4, 0xa1, 0x20, 0x0, 0x10, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xd000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x1, 0xf801, 0x0, [0x80000001, 0x0, 0x3d, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="98a4aa3443180f5825c25b79c785a22451cbd43ffec08ced9d1a8ca93d7d83093443f1a15183c650f113bcc26678c006089ff0c346e8c28134430b312650241c5151a6f676c09714891bbaeec4315732f420124b7ff2badf04e0e7188ecde6df306984e51debbe9ec036", @ANYRES16=r6, @ANYBLOB="14000000b50360792542f4cf42f0535a1c6c2835efa1dfb6fb3b7b984d2dda4ff0f80335d7fb4f6e0e75237f882092515f248971454f14aab4d687d16c7f9bb8a0c35e493394fa435b6b0007e9f640e9fac20cc7dcb649d6fb822e5d885121d52c35726afe4bf6c7b06b450b50b477ea335b24dcda5da6a040071893ca952b756cde9e09600385f74ece217bd919402308d8bcfd704c2648f1135de7cc", @ANYRESHEX=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r8, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r10, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee332084eeef176f92471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="020027bd7000ffdbdf255a00000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000580)='block_bio_remap\x00', r4, 0x0, 0x4b}, 0xb) sync() 2.743416326s ago: executing program 2 (id=1152): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d700000000030005000020000002"], 0x80}}, 0x4) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000100)) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000640)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x2, 0x80, 0x8, 0x2, @broadcast}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="25c5776775ff4384ba1b41ebcee7", 0xe}, {&(0x7f00000002c0)="99a1d8197cc1005e5a43e1e25e7070e3d1fac64a05d1c2f97636ce26064e9f66ad176d20698ad3d26cb77b9fdedaa430c7514be41355c3ac4c0b679fc4688b3eceef1085a64c2c16f89a0846be596a970b553ea882e284be44a95b8d0a47921dde13", 0x62}, {&(0x7f0000000340)="4c7ac9f105e7d4a2bc85c8b62b11e2506995b2c4b461818192dfdd2b92a8640061ea23006ce28a17a6c62c7233cbfde114340d401859f1f36938393fa24405874fceeaac0b3fb2b0196943939d274b3be4ceab595a1d945a1ae3c94d2099eb5197b6935906821cf055cde4dba32da5fe716935c3cca6014a5d47eec5ca57bbc2c53ae46fef364d226e0fb96defbdb78b79d32488de55aa735212586de29573a95148eb1c1240", 0xa6}, {&(0x7f0000000400)="736ca3a3fd571e2f38e317cf2c7bf3ac680d4de572be9feb6538b65f7845afd70c703d1ec62fd858071a7be427c9e3de4df89b11b48e5350288e4d448eb0151b7a3a028ad2128bbf90ebc16a30d832a5d5326a2a4b4a94cded0bc9f0755596596a30c34775e182d86e41091f58f353f0286b2894941f98d0ffaada4cec3b46da5d54ff9e90036659381fae87854afae477b74f9a5f6d1789e659b6d41f8027795c00f17b2fcfbf92ce6be6e1815a804480e4c8e600603f7950792bf5f30cb652f2a740c281cd31c04e8dd6f8ccd7911650b7805d96a58845fad3c3a7a976aefa", 0xe0}, {&(0x7f0000000500)="05c251247d3b0c0f82246dd592ba1c907db68834addbbc555d7c4a8d59ee7fdfd2b6a93154d93694432485832618139ba0c0b7a48b5c834e84f41dec88c7ab8a8a3680d316c8c3e2322364157b57db73cd461a138ea0848fb4954f5bf10312700286b4d2d70b43cf3913750a997d13dcdaa34fd48b1eea2ea34d8e48a288a72d3074511c57c6644197167ba435c017473167de6b56abdbf984be36cef820efbd7479", 0xa2}], 0x5}}], 0x1, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x19) 1.197776336s ago: executing program 2 (id=1158): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r1, 0x4) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x12202) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac32317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e75885ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622e4bf5f8d0000000000000000000000020000000000000d25bba500"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 1.119889903s ago: executing program 2 (id=1160): mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000040)=0x60, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x80000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './cgroup\x00'}) (async) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180), 0xfff) 1.068249125s ago: executing program 2 (id=1161): remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x121800, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xd45, 0x8}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000000c0)=0xa, 0x4, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x4cfd, 0x4}, 0x30}, 0x10) 1.067191827s ago: executing program 2 (id=1163): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r0, 0x0, 0x0, 0x10100, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES16], 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.066819793s ago: executing program 3 (id=1164): gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000100)="e2eeaf100f158463fe940514ff6c71283e3b4f03b7f98a9cc836af65c529854d2d59723f5f43040a80a1704607f7866bf9d5530ef4159d11864dbf586be6028092c73183eafb4f6b95349c7dfc7cc8e1336b7d439e9e7cf30cc7041a4c0acee93c6449aa74286e26dea8094961e65b18ceee925b5a0e2f57abdd3366da6ef38562a460fa61e797e92fb0df03ea5b1904fa2a64f47aef2fd574db4801b6479f28e10c30cb49bca9ca", &(0x7f0000000000)="8a75fdb078bb736cf50353a6ae52e9746cfc8e3b102d337954e5e8c0eb5ddd5d0aa920f83f345b9a1a9cda128420f5de2b99ac3462f1"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x1}}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {0x6, 0xfff1}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x240088d5) (async) close(r0) 930.491084ms ago: executing program 3 (id=1168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000080)="90", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000010c0)={0x0, 0x8}, &(0x7f0000001100)=0x8) 929.367902ms ago: executing program 3 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff032}, {0x1}, {0x4, 0x4, 0x1d}, {0x1cfd, 0xfe, 0x1}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x10, 0x0, 0x66, 0x3, {{0x1f, 0x4, 0x0, 0x18, 0x7c, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x8b, 0x0, 0x8, [0x400, 0x4, 0x7]}, @timestamp={0x44, 0x1c, 0xdb, 0x0, 0xc, [0x6, 0x2, 0x3a28, 0x1, 0x7, 0xfff]}, @end, @timestamp={0x44, 0x8, 0x79, 0x0, 0x0, [0x7]}, @cipso={0x86, 0x1c, 0x3, [{0x1, 0x11, "fa7aa4be73cf7570ef6950e7b22afa"}, {0x5, 0x5, "5698db"}]}, @rr={0x7, 0x17, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000040)={0x8db0, 0x1, [{0x1, 0x1}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x3, 0x3}, {0x0, 0xfff2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048840}, 0x10000) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff032}, {0x1}, {0x4, 0x4, 0x1d}, {0x1cfd, 0xfe, 0x1}]}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x10, 0x0, 0x66, 0x3, {{0x1f, 0x4, 0x0, 0x18, 0x7c, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x8b, 0x0, 0x8, [0x400, 0x4, 0x7]}, @timestamp={0x44, 0x1c, 0xdb, 0x0, 0xc, [0x6, 0x2, 0x3a28, 0x1, 0x7, 0xfff]}, @end, @timestamp={0x44, 0x8, 0x79, 0x0, 0x0, [0x7]}, @cipso={0x86, 0x1c, 0x3, [{0x1, 0x11, "fa7aa4be73cf7570ef6950e7b22afa"}, {0x5, 0x5, "5698db"}]}, @rr={0x7, 0x17, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) (async) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000040)={0x8db0, 0x1, [{0x1, 0x1}]}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x3, 0x3}, {0x0, 0xfff2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20048840}, 0x10000) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0xfe, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x75507}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) (async) 800.562362ms ago: executing program 3 (id=1170): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) (async) 800.048663ms ago: executing program 3 (id=1171): open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x20, 0x9959, 0x8}) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/4096, 0xe078}], 0x1}, 0x21) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5835451f, 0x400600) flock(r4, 0x9) close_range(r1, r4, 0x2) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) 740.583751ms ago: executing program 3 (id=1172): syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6b00000000102c8000000000000000000000ffff64010101ff0000000000000001880000000000000000"], 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0xa, 0x8, "a867dc159d50dfabd78a3e1af7591b97f0758b9a8583fb00", {0x4, 0x7}, 0xffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x9, 0x8a55, 0xbe64}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000380)={0x1f, 0x0, @any, 0x5}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="1332f87def1fdc6ce66a310ba38fc8d4fd6cf2b4fef4593cd83e5d17cfe3616d130eb71e11bfc4ae0e224b22e82aa875ddb07e6215c88e75722157838f8ff80d7447bea1099ba016d0bdeca77970bd5b40a4bfda796e3cec876f285306d68272845c98d7199c19cb73ee6719c6", 0x6d}, {&(0x7f0000000140)="f83bd3db547aee05e09b04aba9f7364ca525f4ffb9eef3ea12752b7627cb0066a3602027290b841f7ee6bba5e3af371ce33d06f5d99676139c80a356a6017b0fc18bd20696cd6bc8f7c4083e0daeac7ba04428a303fe4cfa5a790dbca8f5d4713f733ea04faa09604223eccf0343ceb91c9440d7008d9e9589245e21c9d3dff7695193e272d0bcd100", 0x5e}], 0x2) ioctl$SNAPSHOT_FREE(r2, 0x3305) 270.356886ms ago: executing program 0 (id=1181): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7, 0xfffffff8, 0xd, 0x10, 0x2, 0x8}, &(0x7f0000000100)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7, 0xfffffff8, 0xd, 0x10, 0x2, 0x8}, &(0x7f0000000100)=0x9c) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f000000028000", 0x2b}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fd", 0xa7}], 0x2}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x42, &(0x7f0000000000)={'trans=virtio,', {[{@access_any}]}}) utimes(&(0x7f00000000c0)='./file1\x00', 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) 167.771189ms ago: executing program 0 (id=1182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xc, 0x1, 0x9, @local, @mcast1, 0x8000, 0x7800, 0x3ff, 0x3}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8500b312}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@newpolicy={0xdc, 0x13, 0x1, 0x70bd2c, 0x25dfdbfe, {{@in6=@remote, @in6=@local, 0x4e22, 0x7, 0x4e21, 0x0, 0x2, 0xa0, 0x80, 0x87, r1, r2}, {0x8001, 0xe, 0x0, 0x0, 0x1eb200, 0xfffffffffffffffc, 0xe, 0x1}, {0xfffffffffffffff7, 0x1, 0x0, 0x511d8062}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x2, 0x3}, [@lifetime_val={0x24, 0x9, {0x9, 0x6, 0xd, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048090}, 0x20040015) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0}) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="cc0000001b00d115000000000000000000000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000f53b"], 0xcc}}, 0x0) 167.495516ms ago: executing program 2 (id=1183): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xffa6}], 0x1}, 0xa6}], 0x1, 0x4008440) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000380)=""/146, 0x92}], 0x1, 0x1, 0x2) 167.236601ms ago: executing program 0 (id=1184): r0 = socket$inet(0x2, 0x2, 0x5) fallocate(r0, 0xa, 0x10001, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x100}, {r2, 0x2600}, {r0, 0x1000}, {r0}, {r1, 0x8}, {r3, 0x845c}, {r4, 0x8000}, {r1, 0x2010}], 0x8, &(0x7f0000000140)={r5, r6+10000000}, &(0x7f0000000180)={[0x1]}, 0x8) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r8 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8, {0x6}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000240)) fcntl$getownex(r3, 0x10, &(0x7f0000000280)={0x0, 0x0}) sched_rr_get_interval(r10, &(0x7f00000002c0)) clock_settime(0x4, &(0x7f0000000300)={0x77359400}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0x893fe000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r9, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) r12 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) sendfile(r12, r9, &(0x7f00000003c0)=0x10001, 0xf8) ioctl$TUNDETACHFILTER(r11, 0x401054d6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000400)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x3, 0x5, 0x6, 0x3, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x1, &(0x7f00000004c0)=""/1, 0x0, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x8738}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r11, r1], &(0x7f00000005c0)=[{0x2, 0x2, 0xa, 0x5}], 0x10, 0xc}, 0x94) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$selinux_validatetrans(r9, &(0x7f00000006c0)={'system_u:object_r:modules_dep_t:s0', 0x20, 'system_u:object_r:mouse_device_t:s0', 0x20, 0x9, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7a) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f0000000740)={'nr0\x00', {0x2, 0x0, @remote}}) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$IPSET_CMD_TYPE(r11, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x2c}}, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000900)) 70.414677ms ago: executing program 0 (id=1185): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c248bc513cc72c0000401300cf0400000000001e", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a801800048004000180"], 0x2c}}, 0x50) 69.688647ms ago: executing program 0 (id=1186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000e580fc77c90da000000007910900000000000630000980000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=""/7, 0x9, 0x0, 0xea, 0xb4, &(0x7f0000000500)="8b77e456e7de795318c1b79d2619e36e981e83969d8cbfb8c68abe2f75af38c2926f8c877558cca76d44b7592476b9d812789b331d1b1065c0a538cfb8030ea8489fdf95cb3320a80075c3da857da3acc4df6029a1e7f9c9ec232eba817c2899431923fc2ae6f622c7a4943a38d099e53988f740abf0c04731761b6f47aa544cdaaf46e05ef65df980cae57daadc5442a33cc1518458999869661674e89a6a898afd7f13b6d864472c1514be9d594b65071e0bced59740d5b29ad1df70029b996b7a140a1dc3da9a9afa807477fd17a42210018af1e8d4363bd7ea1a33546814857fc75dda6c7b58ac0d", &(0x7f0000000600)="55616e017239c18a92fb6f957569aae9afb8d3c46244d16f525498f528548e5b41af4c9f9cad0676477f5aeaf117c39074a19c3604d6835f14e19574aed858414497647f6aa88022510133aac76cda0f7300307a8c8162243139985cbe93667ae0374aec36b038e11270cc269d62ae2f33b8cece7e1fd6ffdcf77b086373b11ff13b3a669c1bd2fc5fac5a32cea45454865eb53dedfda72ef9b1639ce09397e855df0908687d9d0c656b81a834ecd3a3f0c0c4a8", 0x4, 0x0, 0xfffff6ae}, 0x50) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x7005, 0x0) signalfd4(r0, &(0x7f0000000080)={[0x339]}, 0x8, 0x800) readv(r3, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000b000000060000000000000e010000000100000000305f002e105f615f300055af1d7b780e34b4bb8ecd562c077524aeb321ee2545e47066e554786912105eb376d081552e31b2a5a907a45c1b403bcec616a0d5b5c3680c5589d361b8a3267dbf8920df1306db2ee0ba69733d16c74c17cb2c67f0f504b01d5145a0403ca8aed37fe73c41f6ce732d12ca0c37649984e451ffac85b4503b1023e25db92d2474e882163180bccb68"], &(0x7f0000000200)=""/78, 0x33, 0x4e, 0x0, 0x7}, 0x28) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000100)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000300), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, 0x0, 0x29, 0x0, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @empty, @empty, @local}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x5) 0s ago: executing program 0 (id=1187): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000000)={0x88, "c67970d93164ab71f579214ca9eb37e01063c12f539aa8cb9617e07d350ebc30cbbbc9fbdf0525598ab5be25a63b9836b2bdd4e92c138e87fadb4fe95aeaacb0c7a109b204e603cb09cf6bc3935686377ed579fa844650efa3bd034a0886fa128f79130b327528261f4005705afdce30a0204862b01aa8aeb45f7012994feb3d682479845a6040c6"}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000140)={{0x4, 0x0, 0x80, {0xeeee8000, 0xf000, 0x2}}, "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", "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"}) r2 = geteuid() mount$tmpfs(0x0, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200), 0x1000020, &(0x7f0000002240)={[{@huge_within_size}], [{@euid_gt={'euid>', r2}}]}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000002280)={[0xffffffff, 0x1, 0x4, 0x0, 0x8, 0x7, 0x1ff, 0x2, 0x5, 0x5, 0xd, 0xa57f, 0x6, 0x3, 0x4, 0x8, 0x5, 0x0, 0x45e0, 0x9, 0x0, 0x400, 0x4, 0xbc, 0x8, 0x0, 0x4, 0x3, 0x504, 0x4, 0x1ed, 0x5, 0x1, 0x0, 0x5, 0x3, 0x96, 0x1, 0x2, 0x7eda964e, 0x9, 0x3, 0x2, 0x5, 0x8, 0x674, 0x6, 0x6, 0x1ff, 0x7, 0x6, 0x63e, 0x2, 0x678, 0x9, 0x6, 0x0, 0xfffffff6, 0x9, 0x1, 0x4, 0x0, 0x3, 0x5, 0x2, 0x9, 0x7f, 0x5, 0x9, 0xd, 0x7, 0x5, 0x98, 0x1, 0x7, 0xfffffbff, 0x2e0f, 0x14bd, 0x750d, 0x7, 0x6, 0x4, 0x2, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x5, 0x0, 0x8, 0x3, 0x6, 0x3ff, 0x8, 0x66, 0x7, 0x2, 0x2, 0x7b, 0x7, 0x6, 0xbc1d, 0x4, 0x9ef6, 0x1, 0xd, 0x0, 0x200, 0xe, 0x8, 0x0, 0xb2, 0x4, 0x5, 0x9, 0x6, 0x1, 0x5, 0x9bc, 0x4578, 0x200, 0xb, 0xe, 0x5, 0xff4a, 0x7fffffff, 0x2, 0x2, 0x9, 0x6, 0x8, 0x1, 0x9, 0x3, 0x5, 0x80, 0x9, 0x2, 0xfffffff8, 0x2, 0x7, 0x1, 0x2, 0x9, 0x4, 0x3, 0x8, 0x1, 0x0, 0x9, 0x5, 0x101, 0x6, 0x5, 0xfffffffb, 0x4, 0x5, 0x6, 0x5, 0x4, 0xfffff801, 0x6c6f, 0x7, 0x8001, 0x4, 0x80000001, 0x1, 0x6, 0xc8, 0x6, 0x9, 0x80000001, 0x3, 0x8, 0x3ff, 0x4974, 0x9, 0x4, 0x49, 0x3ff, 0xffffff80, 0x2, 0x7, 0x7, 0x8, 0x6, 0x2f, 0xffffffff, 0x40, 0xfffffff9, 0x3ca, 0x13a, 0x1, 0x1, 0x7, 0x10000, 0x3, 0x9, 0xfffffff7, 0xb314, 0xea, 0xb7, 0xffffffab, 0x401, 0x8001, 0xfffffffa, 0x79dc, 0x2, 0x80000000, 0xb, 0x101, 0x86, 0x7fffffff, 0x9, 0x6, 0x2d, 0x0, 0x1c0, 0x10000000, 0x6, 0x40, 0x78, 0x6, 0x1000, 0xf2, 0x1, 0x3, 0x5, 0xfffffff9, 0x401, 0xddc, 0x4, 0x7fffffff, 0x6, 0x8, 0xac76, 0x2, 0x39, 0x7fff, 0x1cee, 0x3, 0xa2, 0x4, 0xfff, 0x9, 0xffff, 0x5, 0x4, 0x9, 0xf, 0x7, 0xc, 0xfff, 0x4, 0x80000001, 0x10, 0x8, 0xffffff05, 0x2, 0x7, 0x9, 0x3, 0x7ff, 0x3, 0x5, 0x200, 0x80000001, 0xfffffff7, 0xc2, 0xd6, 0x5, 0x3, 0x2, 0x904, 0x9, 0x6, 0x1d08, 0x2, 0x1ff, 0x7fd, 0x1, 0x6ccd, 0x4, 0x7, 0x6, 0x0, 0x29, 0xa2, 0x3572, 0xd8dc, 0xfffffffd, 0x9, 0xb, 0x5, 0x8, 0x40, 0x0, 0x8, 0x22, 0x10000, 0x5, 0xff, 0x8, 0xd8e, 0x80000001, 0x0, 0x81, 0x3, 0xc, 0x9, 0xfffffff9, 0x5, 0x6, 0x5, 0xff, 0x83, 0xf, 0x8, 0x21, 0xd, 0x3, 0x40, 0xb69, 0x9, 0x8, 0xb06f, 0x7, 0x6, 0x8, 0x4, 0x6, 0x9, 0xa, 0xa3b5, 0x7, 0x1, 0x0, 0x4d1, 0x0, 0x1, 0xfffffff7, 0x649, 0x8, 0x3, 0x65b, 0x2, 0x2, 0xffffffff, 0xfff, 0x9, 0x43cc, 0x5, 0xf99, 0x40, 0x9, 0x1, 0x8, 0x1ff, 0x401, 0x4, 0x8, 0x8, 0x7, 0x7, 0x5, 0x1, 0x5, 0x8f9, 0x8, 0x6, 0x9, 0xf, 0x57a90a28, 0xfff, 0x10000, 0x101, 0x6, 0x6, 0x3, 0x401, 0x400, 0x6, 0x7, 0x5, 0x2, 0x3ff, 0x77b7, 0x10, 0x3, 0x8, 0xfffffff2, 0x5, 0xfffffbff, 0x6, 0x8, 0x3, 0x5b03, 0xfff, 0x56, 0x4, 0x10001, 0x7fff, 0x3, 0x7, 0x8, 0xc, 0xff, 0x2, 0xfffffffa, 0x8, 0x7, 0x9, 0x42d, 0x97, 0x4, 0x6, 0x7, 0x7fffffff, 0x3d, 0x7fff, 0x2, 0x80, 0x2, 0x5, 0x5, 0xffffffff, 0x7f, 0x6, 0x8, 0x7fff, 0x612, 0xf, 0x9, 0xc3af, 0x7, 0x9, 0x100, 0x7ff, 0x8, 0x4, 0x7f, 0x0, 0x6, 0x8, 0x9, 0x5, 0x6, 0x3, 0x9, 0x8c, 0x9a6d, 0x3, 0x9, 0x800, 0x0, 0x4, 0x7, 0x7, 0x81, 0xa, 0x3, 0x0, 0x6, 0x7, 0x101, 0xc, 0x6, 0x0, 0x1, 0xfffffff6, 0xd1f, 0x1000, 0x65, 0x1, 0xc, 0x0, 0xfffffffe, 0x7, 0x2, 0x10000, 0x7, 0x0, 0x5, 0x76a8, 0x101, 0x10001, 0x33ec, 0x8, 0xfffffff7, 0xf, 0x4, 0x3, 0x81, 0x80000001, 0xa, 0x4, 0x5, 0x100, 0xfffffffc, 0xce, 0x1, 0x31df, 0x20000000, 0x5, 0x9, 0x3, 0x9, 0x100, 0x100, 0xfffffff6, 0x2c, 0xb, 0x10001, 0x6, 0xf9415bb, 0x6, 0x63, 0x0, 0x2, 0x81, 0x7fffffff, 0x8000, 0x8, 0xffff8001, 0xf1fc, 0xfffffffe, 0x0, 0x7, 0xe, 0xaa2, 0x1, 0x7, 0x6, 0xb2b, 0x9, 0x0, 0x6, 0x7fff, 0x5, 0x7, 0x7, 0x0, 0xfffff91f, 0x4, 0x6, 0x6, 0x1, 0xa6af, 0x9, 0x4, 0x8, 0x2, 0x0, 0x314, 0xffff, 0x4, 0x8, 0x6, 0x4, 0x2, 0x1, 0x3, 0xff, 0x6, 0xa0b5, 0xa, 0x2, 0x0, 0x4f, 0x0, 0x2, 0x6, 0xf, 0x80000001, 0x5, 0xe, 0x1203, 0xe, 0xa, 0x1, 0x6, 0x6, 0x0, 0x10001, 0x5, 0xff, 0x9, 0x6, 0x7ff, 0xffffe932, 0x1, 0x5, 0x9, 0x8, 0x1, 0x6, 0x5, 0xfd, 0x6, 0x401, 0x6, 0x0, 0x2, 0xc, 0x7, 0x4, 0xc68f, 0x25f9cb24, 0x8, 0x6, 0x7fff, 0xa, 0x7, 0xff, 0xfec8, 0xe0000000, 0x1000, 0x3, 0xfffff2e8, 0xdc0d, 0x7, 0xb681, 0x2, 0x9c1f, 0x4, 0x7, 0x6, 0x7f, 0x9, 0x2, 0xc, 0x9, 0x0, 0x9, 0x40, 0x7, 0x2, 0x7, 0x1, 0x2, 0xef1, 0x6ca, 0x0, 0xfffffffb, 0x2, 0x6, 0x41, 0x3, 0x9, 0x9, 0x5, 0x0, 0x1, 0x7, 0x5, 0x3, 0x46159fa6, 0x1, 0x5, 0x6, 0xe, 0x4, 0xffff6b23, 0x10000, 0xc1, 0x1000, 0x98, 0x1, 0x8, 0xd, 0x5, 0x5, 0x7, 0x7, 0x8, 0x3ff, 0xc2c3, 0x4, 0x99, 0x4, 0x6, 0x8c, 0x94, 0x5, 0x1, 0x2, 0x8, 0xa4b9, 0xd8e, 0x7, 0x80, 0x0, 0x1, 0x81, 0x4, 0x3, 0x7, 0x6, 0xff, 0xffffff7a, 0x5, 0xfffffc00, 0x8e6d, 0x2, 0x2, 0x8, 0x10000, 0x5, 0x0, 0x9, 0x1, 0x53b, 0x8, 0x5, 0xffff, 0x9, 0x2, 0x3, 0x356, 0x3, 0x218, 0xebe, 0x8, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x8, 0x5, 0x8, 0x5, 0x5, 0x1, 0x0, 0x8000, 0x200, 0x8, 0x9, 0xfffffffb, 0xa, 0xb, 0x81, 0x1, 0x4, 0x101, 0x7fffffff, 0x46d0, 0x9, 0x4800000, 0x360c735c, 0x200, 0xfc000000, 0x6, 0x4, 0x1, 0x5, 0x4, 0x9, 0x6, 0x81, 0x2, 0x8000, 0x9, 0xd79, 0x100, 0x1b76, 0x1dd54594, 0x2, 0x2, 0x9, 0x4, 0x4, 0x5, 0x3, 0x66c3, 0x9, 0x7, 0x7877, 0x1ff, 0x42a5, 0x9, 0xa4, 0x10, 0xfffffffe, 0x3, 0x14, 0x9dd7, 0xba21, 0x9, 0x1, 0x0, 0x6, 0x6c03, 0x8, 0x8, 0x1, 0x5, 0x7, 0x3, 0x9, 0x6, 0x8b, 0x1, 0x2, 0xc4, 0x800, 0xffffff00, 0x4af, 0xfffffffc, 0x7fff, 0x200, 0x1, 0x2, 0x9, 0x8001, 0x27, 0xb, 0x5, 0x1, 0x101, 0x7, 0x9, 0x9, 0x348f5516, 0x5, 0xff, 0x800, 0xffff, 0x6000, 0x9, 0x1ff, 0x100, 0xc58, 0x4, 0x341016b5, 0x2, 0x8001, 0x80, 0xc79d, 0x400, 0x1, 0x100, 0x3, 0x2, 0xd8, 0x88, 0x2, 0x401, 0x8, 0xffffffff, 0x0, 0x0, 0x8, 0x9, 0x4, 0x800, 0x2, 0x7, 0x3, 0x7, 0x8, 0xfffeffff, 0x0, 0xffff8000, 0x80, 0x4, 0x401, 0x9, 0x7ff, 0xa0, 0x1000, 0xfffffc00, 0xf, 0x2, 0x6, 0x0, 0xe4, 0x800, 0xc, 0x81, 0x0, 0x8, 0x80000000, 0xc, 0x9f, 0x9, 0x1, 0x9, 0x57, 0x4, 0x9, 0x1, 0x7fff, 0x1, 0x3, 0x9, 0x7, 0x4, 0x40, 0x80000001, 0x8, 0xffff, 0x3, 0x7, 0x5, 0x44e3, 0xd136, 0x7fffffff, 0x1, 0x8, 0x8, 0x3c0f, 0x7, 0x9, 0x7, 0x3ff, 0x5, 0x7, 0x1b, 0x8, 0x1, 0x80000000, 0x2, 0x2, 0x10, 0x7, 0x8, 0x7, 0x2, 0xc, 0x8, 0xce, 0xff, 0x1472, 0x4, 0xb0b6, 0x0, 0x8, 0xfffffff4, 0x3c4c, 0x8, 0x3, 0x0, 0x0, 0x0, 0xd7, 0xfffffff7, 0x9, 0x8, 0xfff, 0x60, 0x52, 0x5, 0x5, 0x6b, 0x6, 0x9, 0x7, 0x2b548f0a, 0x9, 0xc87, 0xfead, 0x101, 0x1, 0xb, 0x3, 0x8, 0xfffffffe, 0x3, 0x18, 0x8, 0x5, 0xb7c, 0x65e, 0x8001, 0xfffffff7, 0x2, 0x8, 0x8001, 0x0, 0x1e2, 0x3, 0xa, 0xc64, 0x2, 0x40, 0x7, 0x8, 0x1, 0xa, 0x22, 0x1, 0x2, 0x3, 0xdedc, 0xfff, 0x5, 0x10000, 0xecf0, 0x2, 0x2, 0x1, 0x9, 0x4d4, 0x7, 0x56, 0x65fe0, 0x7, 0x200, 0x6, 0x81, 0x4, 0x2fbc792, 0xf9, 0x4687eca5, 0x0, 0x7, 0x7, 0x9, 0x7fffffff, 0x8, 0x1]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000003280)={0x0, 0x200, "bab1e6", 0x68, 0x3}) quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0) syz_usb_connect(0x1, 0x2ae, &(0x7f00000032c0)={{0x12, 0x1, 0x250, 0xbb, 0xc8, 0x15, 0xff, 0x846, 0x5f01, 0x2217, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29c, 0x1, 0x7, 0x7f, 0x0, 0xf, [{{0x9, 0x4, 0xb3, 0x3, 0xe, 0x1d, 0x37, 0x15, 0x8, [], [{{0x9, 0x5, 0x5, 0x8, 0x8, 0x6, 0x3, 0x78}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x7, 0x2, 0xfa}}, {{0x9, 0x5, 0xf5f948e2c31cfbef, 0x2, 0x40, 0x5, 0xf8, 0xf, [@generic={0x9, 0x30, "2accc53beae02b"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x3, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x4, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x6, 0x5, 0x9, [@generic={0x3d, 0xc, "98d65decd2aab5a2f41c28a152f0976d42a4fd1eb940bf00cb66c4641c43630ecd0cb50ff0a25f580c55ab4d7e53447d3043f367f8634da6cbe402"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x6, 0x8, 0x9f, [@generic={0x4e, 0x24, "644cd2e0998412f66288e1137dba860f7c38ce7e2a13ebe9b539c9a67eb4d705140d040cc803a0d60efa1a459ba8dbc3088a37ed1874cd157b74d8de27fcb7cf9a1b675ba97438a32eede1a4"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x8000}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x61, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x32, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x9, 0x9, 0xeb}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x94, 0x6, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x19}]}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x2, 0xe6, 0x7, [@generic={0x7e, 0x4, "8d714ece0551ee4818a46259a91cf7956391f76dc04d1ec04076c7e6ecf3a1f6a4930afa909ff845c581c0e02c99b63217878c24ff1ad011ba10716312949fd8b00fe8aa6ceb03a1bf384af7e65c3cf2f20fad9e31f0e8f6388cb5d7d837575b019384e65f34a0098e9e5b977517add1d01b3a828a185b8be56f7fdc"}]}}, {{0x9, 0x5, 0xc, 0xc, 0xf28d850fc90ed8d9, 0xc4, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xb0, 0xeb, 0x0, [@generic={0xde, 0x8, "e4c3c9c2be2a85fcbbe0ce3148d95b447d9cb8f6a866a22ac13892ee950e9644f135c800715751555abbe4cedd4ae9af2797f949d776ee18b06393f7613a70acdfc4238b781728ca01c7da20ebeefa9e21d4a4bb11fa42abb9b66d88fdd89327c437a5ad3b5bba922eb844536d296ecd071fb12ba386325f1d2359b16a761af64035e6ee8da131032698155be6805d2dd93a818cd3f034a3d81b158c4dc56cbe3b63efaade47ba984b916b702fe3c5badcd9573dd1b3ed65f73312034ad9d365ad170e9f7638df1e82b881f78a4e62c6fe7288237ed4024b9689e4ed"}]}}]}}]}}]}}, &(0x7f0000003900)={0xa, &(0x7f0000003580)={0xa, 0x6, 0x201, 0x40, 0xf3, 0x8, 0xff}, 0x3d, &(0x7f00000035c0)={0x5, 0xf, 0x3d, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x158, 0xff00, 0x100, [0xf, 0xf, 0xff3f00, 0xc0, 0xffff, 0xffff00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x2, 0x8, 0x3ff}, @ext_cap={0x7}]}, 0x6, [{0xdf, &(0x7f0000003600)=@string={0xdf, 0x3, "9ff5e7179f94d9598b0732571cd766b1816c61376253e6aabdb4d2e377738a98c49f9bc47652af2f3dc8f35b9ce3019faf8170cdebbf06ec55c12fe48e1705081047c35249eafc812d4d1b25ff0e1ed89888f060bf55a0f1d13d2070d1c74a4c30efad493016c1a1abdaf0b3bb315e293ebc09e4f40028e10d1e991350fab8ee64fa40e8affcb9344e7ece3d6f2af68d58c7db019c510011032bb4bbe7f40018754fa5f945df11fc3e68147d47329e5d680655a6edbcebf44b3bb73ae6dd7bf26a1207b7c1a67de869d27c6d7123ac30ab100c63ac87b8250620265bd1"}}, {0x4, &(0x7f0000003700)=@lang_id={0x4, 0x3, 0xf461}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x3400}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x457}}, {0xc9, &(0x7f00000037c0)=@string={0xc9, 0x3, "10e86ac17109046e1f49fe6eb4bf7fb22c3cf57a79484498af74b8c9bd3c203b5461028f972202e20ef5514d5369f7ba260a0ce2368ded9e7dffeab9ebf72fd559a44e244dd403d588fa433774625bd066e6284e997a23a3653f158230d0b2623adde74096b1c6fac754dc6618f00418123afd3af27a9a9ca4a603ecc1ebf9d327fd0184959fd5dc8864586354d48c3cf6a45f5ca57d6d155fa98f6b14a69388a2469d12cf4eee735fd64fa644321a6d65b0c2446db5a7b121c3205b0958f582096c7a761d493d"}}, {0x32, &(0x7f00000038c0)=@string={0x32, 0x3, "3177612ed88f6fa6cd98da6f0535448eef6fc654dd1518d1f30e2d4e4f169230d03d1c134139864d5be0bfba569c0b76"}}]}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003980), 0x800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r4, 0x3b87, &(0x7f00000039c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x2}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003a40), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x54, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x57}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) fcntl$addseals(r4, 0x409, 0x1) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000003cc0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000003d00)=0x2c) read$FUSE(r4, &(0x7f0000003d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000005d80)={{0x3, r2, r8, r2, r8, 0x0, 0x918a}, 0x9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x5}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r9, &(0x7f0000005f00)={&(0x7f0000005e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e40)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000041) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000005f40)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0x83f}], 0x2c) setresuid(r7, r2, r7) r10 = openat2(0xffffffffffffffff, &(0x7f0000005f80)='./file0\x00', &(0x7f0000005fc0)={0x200000, 0x20, 0x25}, 0x18) sendmsg$IPSET_CMD_HEADER(r10, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x2c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) kernel console output (not intermixed with test programs): adm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 68.384188][ T6650] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 68.387553][ T40] audit: type=1400 audit(1766171648.274:370): avc: denied { create } for pid=6649 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 68.396098][ T40] audit: type=1400 audit(1766171648.274:371): avc: denied { write } for pid=6649 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 68.494006][ T6648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6648 comm=syz.3.191 [ 68.498551][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 68.511520][ T2485] pvrusb2: Invalid write control endpoint [ 68.550439][ T2485] pvrusb2: Invalid write control endpoint [ 68.552373][ T2485] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 68.563790][ T2485] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 68.566153][ T2485] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 68.569210][ T2485] pvrusb2: Device being rendered inoperable [ 68.572102][ T2485] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 68.575210][ T2485] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 68.579168][ T2485] pvrusb2: Attached sub-driver cx25840 [ 68.581007][ T2485] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 68.593945][ T2485] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 68.600959][ T40] audit: type=1400 audit(1766171648.484:372): avc: denied { ioctl } for pid=6661 comm="syz.0.197" path="socket:[13666]" dev="sockfs" ino=13666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.635869][ T6666] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 68.643793][ T6666] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 68.653754][ T6669] capability: warning: `syz.0.198' uses deprecated v2 capabilities in a way that may be insecure [ 68.712099][ T6023] usb 7-1: USB disconnect, device number 4 [ 68.753588][ T6687] syzkaller1: entered promiscuous mode [ 68.757951][ T6687] syzkaller1: entered allmulticast mode [ 68.825025][ T6696] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:4 [ 68.875071][ T6701] netlink: 'syz.0.207': attribute type 23 has an invalid length. [ 69.122947][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032798c00: rx timeout, send abort [ 69.126752][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888032798c00: 0x2ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 69.688430][ T6734] tmpfs: Bad value for 'mpol' [ 69.783269][ T6750] netlink: 292 bytes leftover after parsing attributes in process `syz.1.221'. [ 69.813917][ T6754] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 69.816924][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 69.821320][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 69.833877][ T6755] vhci_hcd: connection closed [ 69.835300][ T46] vhci_hcd vhci_hcd.2: stop threads [ 69.839055][ T46] vhci_hcd vhci_hcd.2: release socket [ 69.842940][ T6761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6761 comm=syz.1.224 [ 69.843656][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 69.855766][ T6761] input: syz0 as /devices/virtual/input/input9 [ 69.865815][ T6761] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 69.869255][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 69.876075][ T6764] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 69.877115][ T6762] tmpfs: Bad value for 'mpol' [ 70.007144][ T6775] netlink: 104 bytes leftover after parsing attributes in process `syz.3.229'. [ 70.141662][ T6791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=6791 comm=syz.3.234 [ 70.149909][ T6791] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 70.167616][ T6791] veth3: entered promiscuous mode [ 70.225235][ T6795] binder: 6792:6795 ioctl 4010942a 200000000240 returned -22 [ 70.290583][ T6800] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.358876][ T6807] syz_tun: entered allmulticast mode [ 70.361886][ T6807] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 70.368253][ T6807] new mount options do not match the existing superblock, will be ignored [ 70.450105][ T6806] syz_tun: left allmulticast mode [ 70.548551][ T6823] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 70.548551][ T6823] The task syz.2.242 (6823) triggered the difference, watch for misbehavior. [ 70.604091][ T141] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.647221][ T6829] No source specified [ 70.752427][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 70.774836][ T141] usb 5-1: Using ep0 maxpacket: 8 [ 70.786504][ T141] usb 5-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 70.789861][ T141] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 70.792806][ T141] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 70.803994][ T141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.811534][ T141] usb 5-1: config 0 descriptor?? [ 70.985570][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 70.988373][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 70.997859][ T6851] syzkaller1: entered promiscuous mode [ 70.999637][ T6851] syzkaller1: entered allmulticast mode [ 71.114607][ T6856] kvm: kvm [6855]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 71.134757][ T6856] kvm: kvm [6855]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 71.160570][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 71.289523][ T6870] 9pnet_virtio: no channels available for device syz [ 71.297420][ T6870] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 71.321780][ T6872] netlink: del zone limit has 4 unknown bytes [ 71.406964][ T6878] netlink: 'syz.1.259': attribute type 32 has an invalid length. [ 71.410381][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 71.426132][ T6878] bond2: Setting coupled_control to off (0) [ 71.523474][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.263'. [ 71.531584][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 71.722711][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.727300][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.731250][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.735899][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.813791][ T5988] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 71.991029][ T5988] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 71.993644][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 71.996179][ T5988] usb 6-1: Product: syz [ 71.997393][ T5988] usb 6-1: Manufacturer: syz [ 71.998727][ T5988] usb 6-1: SerialNumber: syz [ 72.001399][ T5988] usb 6-1: config 0 descriptor?? [ 72.008737][ T5988] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 72.011081][ T5988] dvb-usb: bulk message failed: -22 (2/0) [ 72.015714][ T5988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.018801][ T5988] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 72.021445][ T5988] usb 6-1: media controller created [ 72.027980][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.204483][ T6889] cxusb: i2c rd: len=4096 is too big! [ 72.204483][ T6889] [ 72.208063][ T5988] cxusb: set interface failed [ 72.209809][ T5988] dvb-usb: bulk message failed: -22 (1/0) [ 72.229324][ T5988] DVB: Unable to find symbol mt352_attach() [ 72.231173][ T5988] dvb-usb: bulk message failed: -22 (5/0) [ 72.233372][ T5988] zl10353_read_register: readreg error (reg=127, ret==-121) [ 72.235812][ T5988] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 72.293753][ T5988] rc_core: IR keymap rc-dvico-mce not found [ 72.295801][ T5988] Registered IR keymap rc-empty [ 72.298364][ T5988] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 72.302309][ T5988] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 72.307306][ T5988] dvb-usb: schedule remote query interval to 100 msecs. [ 72.309645][ T5988] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 72.314978][ T5988] usb 6-1: USB disconnect, device number 7 [ 72.343252][ T6912] netlink: 'syz.2.270': attribute type 2 has an invalid length. [ 72.352770][ T6912] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 72.358063][ T5988] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 73.358901][ T5988] usb 5-1: USB disconnect, device number 3 [ 73.396540][ T6940] qrtr: Invalid version 0 [ 73.632181][ T6966] program syz.0.286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.638724][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 73.638733][ T40] audit: type=1400 audit(1766171653.524:423): avc: denied { bind } for pid=6965 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.808232][ T40] audit: type=1400 audit(1766171653.694:424): avc: denied { setopt } for pid=6970 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.823764][ T40] audit: type=1400 audit(1766171653.694:425): avc: denied { connect } for pid=6970 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 73.833824][ T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.879316][ T6988] nft_compat: unsupported protocol 0 [ 73.888048][ T40] audit: type=1400 audit(1766171653.774:426): avc: denied { create } for pid=6987 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 73.993778][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 73.996551][ T60] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 73.999050][ T60] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.002086][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.005325][ T60] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.009233][ T60] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.013581][ T60] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.016736][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.109297][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.242449][ T60] usb 7-1: usb_control_msg returned -32 [ 74.245850][ T60] usbtmc 7-1:16.0: can't read capabilities [ 74.279687][ T34] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 74.283491][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 74.287054][ T34] usb 8-1: Product: syz [ 74.288218][ T7015] mmap: syz.0.295 (7015) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.288549][ T34] usb 8-1: Manufacturer: syz [ 74.294461][ T34] usb 8-1: SerialNumber: syz [ 74.298101][ T34] usb 8-1: config 0 descriptor?? [ 74.301409][ T34] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 74.304680][ T34] dvb-usb: bulk message failed: -22 (2/0) [ 74.309250][ T34] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 74.313561][ T34] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 74.318455][ T34] usb 8-1: media controller created [ 74.325562][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.364011][ T7018] overlay: ./file0 is not a directory [ 74.457900][ T40] audit: type=1400 audit(1766171654.344:427): avc: denied { mount } for pid=7026 comm="syz.0.298" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 74.498869][ T40] audit: type=1400 audit(1766171654.384:428): avc: denied { bind } for pid=7029 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.514486][ T40] audit: type=1400 audit(1766171654.404:429): avc: denied { write } for pid=6984 comm="syz.3.289" path="socket:[15785]" dev="sockfs" ino=15785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 74.515549][ T6985] cxusb: i2c wr: len=95 is too big! [ 74.515549][ T6985] [ 74.528798][ T34] cxusb: set interface failed [ 74.530599][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 74.552930][ T34] DVB: Unable to find symbol mt352_attach() [ 74.555150][ T34] dvb-usb: bulk message failed: -22 (5/0) [ 74.556962][ T34] zl10353_read_register: readreg error (reg=127, ret==-121) [ 74.559460][ T34] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 74.606045][ T40] audit: type=1400 audit(1766171654.494:430): avc: denied { mount } for pid=7035 comm="syz.0.301" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 74.613782][ T34] rc_core: IR keymap rc-dvico-mce not found [ 74.615692][ T34] Registered IR keymap rc-empty [ 74.617835][ T34] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 74.621616][ T34] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input11 [ 74.627259][ T34] dvb-usb: schedule remote query interval to 100 msecs. [ 74.629497][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 74.645878][ T34] usb 8-1: USB disconnect, device number 3 [ 74.676423][ T34] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 74.995406][ T7054] fuse: Unknown parameter 'f' [ 75.078780][ T40] audit: type=1400 audit(1766171654.964:431): avc: denied { create } for pid=7055 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.090647][ T40] audit: type=1400 audit(1766171654.974:432): avc: denied { ioctl } for pid=7055 comm="syz.3.307" path="socket:[14223]" dev="sockfs" ino=14223 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.132568][ T7061] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 75.144595][ T7062] bond3 (unregistering): Released all slaves [ 75.232655][ T7073] new mount options do not match the existing superblock, will be ignored [ 75.237280][ T7073] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 75.437490][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 75.446424][ T7099] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4Ï€!FõïVl‘uc'f`å”Þ†’;œ1µ [ 75.540241][ T7113] xt_cluster: node mask cannot exceed total number of nodes [ 75.675828][ T7119] bond4 (unregistering): Released all slaves [ 75.734608][ T60] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 75.752591][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 75.832648][ T7134] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 75.894578][ T60] usb 6-1: Invalid ep0 maxpacket: 32 [ 75.966270][ T7154] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.969548][ T7154] overlayfs: missing 'lowerdir' [ 76.033865][ T60] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 76.079485][ T7163] block nbd3: shutting down sockets [ 76.120536][ T7154] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 76.160292][ T7167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 76.184118][ T60] usb 6-1: Invalid ep0 maxpacket: 32 [ 76.186563][ T60] usb usb6-port1: attempt power cycle [ 76.237589][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.240637][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.523768][ T60] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 76.554862][ T60] usb 6-1: Invalid ep0 maxpacket: 32 [ 76.589584][ T34] usb 7-1: USB disconnect, device number 5 [ 76.596147][ T7185] netlink: 700 bytes leftover after parsing attributes in process `syz.3.341'. [ 76.599887][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 76.604304][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.341'. [ 76.635161][ T7192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.683854][ T60] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 76.704620][ T60] usb 6-1: Invalid ep0 maxpacket: 32 [ 76.707094][ T60] usb usb6-port1: unable to enumerate USB device [ 76.752326][ T7203] hugetlbfs: Bad value for 'uid' [ 76.754016][ T7203] hugetlbfs: Bad value for 'uid' [ 77.087129][ T7215] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 77.096348][ T7215] CIFS mount error: No usable UNC path provided in device string! [ 77.096348][ T7215] [ 77.099653][ T7215] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 77.106986][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 77.325780][ T7233] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 77.337197][ T7233] bond4: entered promiscuous mode [ 77.339557][ T7233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.553752][ T34] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 77.584175][ T141] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.715594][ T34] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 77.719741][ T34] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 77.722339][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 77.725543][ T34] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 77.729089][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 77.732355][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 77.739803][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.743429][ T34] usb 7-1: string descriptor 0 read error: -22 [ 77.745531][ T34] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 77.748514][ T141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.751575][ T141] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 77.754433][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.757519][ T141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.760553][ T34] usb 7-1: config 0 descriptor?? [ 77.762605][ T7231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 77.769633][ T141] usb 5-1: config 0 descriptor?? [ 77.771429][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 77.773358][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 77.780548][ T34] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input13 [ 77.793800][ C2] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 78.021082][ T7239] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 78.025639][ T7239] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 78.028190][ T7239] netlink: 228 bytes leftover after parsing attributes in process `syz.2.355'. [ 78.037273][ T6023] usb 7-1: USB disconnect, device number 6 [ 78.178933][ T141] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 78.181332][ T141] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 78.189450][ T141] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input14 [ 78.201632][ T141] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 78.397063][ T7233] bond4: (slave macvlan0): making interface the new active one [ 78.399583][ T7233] macvlan0: entered promiscuous mode [ 78.407665][ T7233] macvlan0: left promiscuous mode [ 78.415587][ T60] usb 5-1: USB disconnect, device number 4 [ 78.603061][ T7252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.619409][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 78.644892][ T40] kauditd_printk_skb: 14168 callbacks suppressed [ 78.644908][ T40] audit: type=1326 audit(1766171658.524:14601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.658035][ T40] audit: type=1326 audit(1766171658.524:14602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.666790][ T40] audit: type=1326 audit(1766171658.524:14603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.674149][ T40] audit: type=1326 audit(1766171658.524:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.681177][ T40] audit: type=1326 audit(1766171658.524:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.690848][ T40] audit: type=1326 audit(1766171658.524:14606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.700123][ T40] audit: type=1326 audit(1766171658.524:14607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.708531][ T40] audit: type=1326 audit(1766171658.524:14608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.717602][ T40] audit: type=1326 audit(1766171658.524:14609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.726866][ T40] audit: type=1326 audit(1766171658.524:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7237 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0cf8f7c9 code=0x7ff00000 [ 78.863771][ T6023] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 79.017146][ T6023] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.020048][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.022798][ T6023] usb 6-1: Product: syz [ 79.033733][ T6023] usb 6-1: Manufacturer: syz [ 79.035201][ T6023] usb 6-1: SerialNumber: syz [ 79.040170][ T6023] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.078538][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.296636][ T60] usb 6-1: USB disconnect, device number 12 [ 79.524040][ T7277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'. [ 79.872614][ T7299] openvswitch: netlink: Key type 51 is out of range max 32 [ 79.882851][ T7299] netlink: 'syz.1.377': attribute type 178 has an invalid length. [ 80.044784][ T7305] netlink: 1 bytes leftover after parsing attributes in process `syz.2.379'. [ 80.071668][ T7307] afs: Unknown parameter 'dyn0x0000000000000003' [ 80.153776][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 80.156923][ T10] ath9k_htc: Failed to initialize the device [ 80.159892][ T60] usb 6-1: ath9k_htc: USB layer deinitialized [ 80.494757][ T7330] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 80.508364][ T7330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.574250][ T7339] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 80.576993][ T7339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.389'. [ 80.656935][ T7351] netlink: 'syz.1.394': attribute type 21 has an invalid length. [ 80.845085][ T7368] veth3: entered promiscuous mode [ 80.894963][ T7379] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 80.900382][ T7381] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 80.917585][ T7379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.921050][ T7380] dummy0: left promiscuous mode [ 80.926975][ T7380] bond1: (slave dummy0): making interface the new active one [ 80.929980][ T7380] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 80.932834][ T7381] dummy0: entered promiscuous mode [ 80.935369][ T7378] program syz.1.402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.943917][ T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.955287][ T7381] bond1: (slave dummy0): Releasing active interface [ 80.962693][ T7381] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 80.967112][ T7381] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 80.969726][ T7381] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 80.972275][ T7381] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 80.974955][ T7381] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 81.047544][ T7391] netlink: 'syz.1.407': attribute type 11 has an invalid length. [ 81.115011][ T60] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.118486][ T60] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.121512][ T60] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.125119][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.129700][ T7361] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 81.136299][ T60] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.197955][ T7407] __nla_validate_parse: 68 callbacks suppressed [ 81.197970][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 81.335630][ T34] usb 8-1: USB disconnect, device number 4 [ 81.404751][ T7447] ptrace attach of "/syz-executor exec"[5928] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 81.815260][ T7480] tmpfs: Bad value for 'huge' [ 82.047770][ T7497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 82.893028][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 82.896574][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.438'. [ 83.118072][ T7553] program syz.2.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.134809][ T7555] vxcan1: entered allmulticast mode [ 83.195100][ T5936] Bluetooth: hci1: SCO packet for unknown connection handle 217 [ 83.383808][ T34] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.458693][ T7573] netlink: 'syz.0.459': attribute type 11 has an invalid length. [ 83.461993][ T7573] netlink: 244 bytes leftover after parsing attributes in process `syz.0.459'. [ 83.495576][ T7573] netlink: 240 bytes leftover after parsing attributes in process `syz.0.459'. [ 83.513785][ T34] usb 8-1: device descriptor read/64, error -71 [ 83.557062][ T7578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer. [ 83.658304][ T40] kauditd_printk_skb: 18444 callbacks suppressed [ 83.658317][ T40] audit: type=1400 audit(1766171663.544:33055): avc: denied { read } for pid=7587 comm="syz.1.462" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.673310][ T40] audit: type=1400 audit(1766171663.544:33056): avc: denied { read write } for pid=7587 comm="syz.1.462" name="video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.680874][ T40] audit: type=1400 audit(1766171663.544:33057): avc: denied { open } for pid=7587 comm="syz.1.462" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.688705][ T40] audit: type=1400 audit(1766171663.544:33058): avc: denied { ioctl } for pid=7587 comm="syz.1.462" path="/dev/video36" dev="devtmpfs" ino=1067 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.696577][ T40] audit: type=1400 audit(1766171663.544:33059): avc: denied { create } for pid=7587 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.703128][ T40] audit: type=1400 audit(1766171663.564:33060): avc: denied { read } for pid=5639 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.710046][ T40] audit: type=1400 audit(1766171663.564:33061): avc: denied { open } for pid=7587 comm="syz.1.462" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 83.718091][ T40] audit: type=1400 audit(1766171663.564:33062): avc: denied { read } for pid=5639 comm="dhcpcd" name="n113" dev="tmpfs" ino=3404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.724935][ T40] audit: type=1400 audit(1766171663.564:33063): avc: denied { open } for pid=5639 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=3404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.734095][ T40] audit: type=1400 audit(1766171663.564:33064): avc: denied { getattr } for pid=5639 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=3404 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.739328][ T7594] qnx6: unable to read the first superblock [ 83.745268][ T7594] qnx6: unable to read the first superblock [ 83.747166][ T7594] qnx6: unable to read the first superblock [ 83.773749][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 83.923745][ T34] usb 8-1: device descriptor read/64, error -71 [ 84.034076][ T34] usb usb8-port1: attempt power cycle [ 84.153784][ T6023] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 84.313771][ T6023] usb 6-1: Using ep0 maxpacket: 8 [ 84.317085][ T6023] usb 6-1: config 2 interface 0 has no altsetting 0 [ 84.321208][ T6023] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 84.324129][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.326653][ T6023] usb 6-1: Product: syz [ 84.328011][ T6023] usb 6-1: Manufacturer: syz [ 84.329565][ T6023] usb 6-1: SerialNumber: syz [ 84.384017][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.405140][ T34] usb 8-1: device descriptor read/8, error -71 [ 84.541283][ T6023] usb 6-1: USB disconnect, device number 13 [ 84.653846][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 84.684527][ T34] usb 8-1: device descriptor read/8, error -71 [ 84.783097][ T7623] could not allocate digest TFM handle sha1-neon [ 84.807846][ T34] usb usb8-port1: unable to enumerate USB device [ 84.842944][ T10] Process accounting resumed [ 84.846984][ T7628] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.473' sets config #1 [ 84.856986][ T7630] Process accounting resumed [ 84.943834][ T6023] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 85.073883][ T6023] usb 8-1: device descriptor read/64, error -71 [ 85.116304][ T7655] netlink: 148 bytes leftover after parsing attributes in process `syz.0.480'. [ 85.119392][ T7655] netlink: 23 bytes leftover after parsing attributes in process `syz.0.480'. [ 85.175281][ T7660] IPVS: persistence engine module ip_vs_pe_s not found [ 85.196182][ T7659] IPVS: persistence engine module ip_vs_pe_s not found [ 85.205544][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 85.310042][ T7672] geneve2: entered promiscuous mode [ 85.311736][ T7672] geneve2: entered allmulticast mode [ 85.333845][ T6023] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 85.473822][ T6023] usb 8-1: device descriptor read/64, error -71 [ 85.594245][ T6023] usb usb8-port1: attempt power cycle [ 85.613994][ T7682] nbd0: detected capacity change from 0 to 63 [ 85.620796][ T5936] block nbd0: Receive control failed (result -32) [ 85.621164][ T7690] Invalid/unusable pipe [ 85.623945][ T6027] block nbd0: Send control failed (result -32) [ 85.634674][ T6027] block nbd0: Request send failed, requeueing [ 85.639398][ T30] block nbd0: Dead connection, failed to find a fallback [ 85.641793][ T30] block nbd0: shutting down sockets [ 85.643552][ T30] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.647399][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.650528][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.653576][ T6027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.658872][ T7698] x_tables: duplicate underflow at hook 3 [ 85.663749][ T30] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.675200][ T6027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 85.677900][ T6027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.681476][ T6027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 85.684850][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.688742][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.691967][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.695862][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.698991][ T6027] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.702766][ T6027] Buffer I/O error on dev nbd0, logical block 2, async page read [ 85.706848][ T6027] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.710594][ T6027] Buffer I/O error on dev nbd0, logical block 3, async page read [ 85.713787][ T6027] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.719001][ T6027] Buffer I/O error on dev nbd0, logical block 0, async page read [ 85.721764][ T6027] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 85.725064][ T6027] Buffer I/O error on dev nbd0, logical block 1, async page read [ 85.727941][ T6027] ldm_validate_partition_table(): Disk read failed. [ 85.730407][ T6027] Dev nbd0: unable to read RDB block 0 [ 85.732427][ T6027] nbd0: unable to read partition table [ 85.739804][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 85.748612][ T6027] ldm_validate_partition_table(): Disk read failed. [ 85.751806][ T6027] Dev nbd0: unable to read RDB block 0 [ 85.757599][ T6027] nbd0: unable to read partition table [ 85.761295][ T7698] ldm_validate_partition_table(): Disk read failed. [ 85.768984][ T53] libceph: connect (1)[c::]:6789 error -101 [ 85.771776][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 85.772195][ T7698] Dev nbd0: unable to read RDB block 0 [ 85.777102][ T7698] nbd0: unable to read partition table [ 85.780606][ T7698] EXT4-fs (nbd0): unable to read superblock [ 85.909584][ T7711] 9pnet_virtio: no channels available for device 127.0.0.1 [ 85.934202][ T6023] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 85.961608][ T7711] 9pnet_virtio: no channels available for device syz [ 85.964967][ T6023] usb 8-1: device descriptor read/8, error -71 [ 85.996094][ T7719] validate_nla: 66 callbacks suppressed [ 85.996104][ T7719] netlink: 'syz.0.497': attribute type 58 has an invalid length. [ 86.035230][ T53] libceph: connect (1)[c::]:6789 error -101 [ 86.037972][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 86.129218][ T7728] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 86.156061][ T7728] veth0_vlan: left promiscuous mode [ 86.159945][ T7728] veth0_vlan: entered promiscuous mode [ 86.164677][ T7728] team0: Device veth0_vlan failed to register rx_handler [ 86.199015][ T7726] input: syz1 as /devices/virtual/input/input15 [ 86.317024][ T7749] macvtap0: refused to change device tx_queue_len [ 86.320544][ T7749] /dev/sg0: Can't lookup blockdev [ 86.513104][ T7760] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 86.519904][ T7703] ceph: No mds server is up or the cluster is laggy [ 86.545824][ T53] libceph: connect (1)[c::]:6789 error -101 [ 86.548404][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 86.654412][ T7769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7769 comm=syz.1.512 [ 86.661246][ T7769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60 sclass=netlink_tcpdiag_socket pid=7769 comm=syz.1.512 [ 86.845136][ T7781] sp0: Synchronizing with TNC [ 86.891361][ T7785] __nla_validate_parse: 3 callbacks suppressed [ 86.891372][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 86.896638][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 86.906159][ T7410] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.908995][ T7410] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.911960][ T7410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.914680][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.515'. [ 86.914699][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'. [ 86.920618][ T7410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.173073][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'. [ 87.208137][ T7803] 9pnet_virtio: no channels available for device syz [ 87.213851][ T7803] program syz.1.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.245186][ T7809] ip6erspan0: entered promiscuous mode [ 87.327995][ T7812] bond4: Unable to set up delay as MII monitoring is disabled [ 87.331603][ T7812] bond4 (unregistering): Released all slaves [ 88.865114][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 98.936823][ T40] kauditd_printk_skb: 273 callbacks suppressed [ 98.936833][ T40] audit: type=1400 audit(1766171678.824:33338): avc: denied { read } for pid=7882 comm="syz.1.524" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.952130][ T40] audit: type=1400 audit(1766171678.824:33339): avc: denied { read } for pid=7883 comm="syz.2.525" dev="nsfs" ino=4026532903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.962516][ T40] audit: type=1400 audit(1766171678.824:33340): avc: denied { open } for pid=7883 comm="syz.2.525" path="net:[4026532903]" dev="nsfs" ino=4026532903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.973968][ T40] audit: type=1400 audit(1766171678.824:33341): avc: denied { open } for pid=7882 comm="syz.1.524" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.981192][ T40] audit: type=1400 audit(1766171678.844:33342): avc: denied { map } for pid=7882 comm="syz.1.524" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.990893][ T40] audit: type=1400 audit(1766171678.854:33343): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.002366][ T40] audit: type=1400 audit(1766171678.854:33344): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.020215][ T40] audit: type=1400 audit(1766171678.854:33345): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.029959][ T40] audit: type=1400 audit(1766171678.884:33346): avc: denied { read write } for pid=7891 comm="syz.3.528" name="udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.034617][ C2] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 99.039168][ T40] audit: type=1400 audit(1766171678.884:33347): avc: denied { open } for pid=7891 comm="syz.3.528" path="/dev/udmabuf" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.041384][ C2] sr 2:0:0:0: [sr0] tag#10 CDB: Test Unit Ready [ 99.158495][ T7930] xt_socket: unknown flags 0x20 [ 99.178085][ T7933] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 99.182408][ T7933] ucma_write: process 383 (syz.1.535) changed security contexts after opening file descriptor, this is not allowed. [ 99.666649][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.669359][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.671836][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.673856][ T6252] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.674498][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.679283][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.681820][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.684476][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.686975][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.689498][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.691961][ T7969] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 99.769487][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 99.805499][ T6252] usb 5-1: device descriptor read/64, error -71 [ 99.841777][ T7976] netlink: 76 bytes leftover after parsing attributes in process `syz.2.555'. [ 99.936549][ T7985] use of bytesused == 0 is deprecated and will be removed in the future, [ 99.940212][ T7985] use the actual size instead. [ 100.053819][ T6252] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.128821][ T8001] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 100.134825][ T8001] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 100.192837][ T8005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.193756][ T6252] usb 5-1: device descriptor read/64, error -71 [ 100.201554][ T8005] overlayfs: failed lookup in lower (newroot/159, name='file0', err=-40): overlapping layers [ 100.207225][ T8005] 9pnet_fd: p9_fd_create_tcp (8005): problem binding to privport [ 100.261561][ T8007] 9pnet_virtio: no channels available for device syz [ 100.297138][ T8016] Cannot find add_set index 0 as target [ 100.313954][ T6252] usb usb5-port1: attempt power cycle [ 100.430242][ T8026] sp0: Synchronizing with TNC [ 100.451319][ T8026] [U] è [ 100.470300][ T8032] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.501435][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 100.609062][ T8047] kAFS: No cell specified [ 100.611782][ T8047] kAFS: No cell specified [ 100.613384][ T8047] kAFS: No cell specified [ 100.616563][ T8047] kAFS: No cell specified [ 100.618077][ T8047] kAFS: No cell specified [ 100.619640][ T8047] kAFS: No cell specified [ 100.621478][ T8047] kAFS: No cell specified [ 100.623012][ T8047] kAFS: No cell specified [ 100.626390][ T8047] kAFS: No cell specified [ 100.627944][ T8047] kAFS: No cell specified [ 100.629653][ T8047] kAFS: No cell specified [ 100.631186][ T8047] kAFS: No cell specified [ 100.632796][ T8047] kAFS: No cell specified [ 100.634375][ T8047] kAFS: No cell specified [ 100.635856][ T8047] kAFS: No cell specified [ 100.637441][ T8047] kAFS: No cell specified [ 100.638962][ T8047] kAFS: No cell specified [ 100.640479][ T8047] kAFS: No cell specified [ 100.642004][ T8047] kAFS: No cell specified [ 100.643544][ T8047] kAFS: No cell specified [ 100.645544][ T8047] kAFS: No cell specified [ 100.647049][ T8047] kAFS: No cell specified [ 100.648613][ T8047] kAFS: No cell specified [ 100.650100][ T8047] kAFS: No cell specified [ 100.651651][ T8047] kAFS: No cell specified [ 100.653438][ T8047] kAFS: No cell specified [ 100.655455][ T6252] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.658935][ T8047] kAFS: No cell specified [ 100.661015][ T8047] kAFS: No cell specified [ 100.663317][ T8047] kAFS: No cell specified [ 100.667592][ T8047] kAFS: No cell specified [ 100.669769][ T8047] kAFS: No cell specified [ 100.672226][ T8047] kAFS: No cell specified [ 100.674361][ T8047] kAFS: No cell specified [ 100.694282][ T6252] usb 5-1: device descriptor read/8, error -71 [ 100.914935][ T8065] binder: 8064:8065 ioctl c00c620f 200000000240 returned -22 [ 100.918933][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 100.933891][ T6252] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.954433][ T6252] usb 5-1: device descriptor read/8, error -71 [ 100.989008][ T8072] SELinux: syz.1.586 (8072) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 101.074064][ T6252] usb usb5-port1: unable to enumerate USB device [ 101.919240][ T8087] 9pnet_virtio: no channels available for device syz [ 101.940601][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 102.006491][ T8095] fuse: Bad value for 'fd' [ 102.031289][ T8097] syz_tun: entered allmulticast mode [ 102.049181][ T8097] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.450916][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 102.532697][ T8107] Illegal XDP return value 2076857605 on prog (id 74) dev N/A, expect packet loss! [ 102.725075][ T5988] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 102.883829][ T5988] usb 7-1: Using ep0 maxpacket: 8 [ 102.886790][ T5988] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 102.889770][ T5988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.903283][ T5988] pvrusb2: Hardware description: Terratec Grabster AV400 [ 102.905684][ T5988] pvrusb2: ********** [ 102.907172][ T8097] syz_tun: left allmulticast mode [ 102.909464][ T5988] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 102.912865][ T5988] pvrusb2: Important functionality might not be entirely working. [ 102.915463][ T5988] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 102.919027][ T5988] pvrusb2: ********** [ 102.992389][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.604'. [ 103.026115][ T8136] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.605'. [ 103.138959][ T2485] pvrusb2: Invalid write control endpoint [ 103.166652][ T2485] pvrusb2: Invalid write control endpoint [ 103.169304][ T2485] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.172363][ T2485] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.175278][ T2485] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.179320][ T2485] pvrusb2: Device being rendered inoperable [ 103.181369][ T2485] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 103.183827][ T2485] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 103.190687][ T2485] pvrusb2: Attached sub-driver cx25840 [ 103.192889][ T2485] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 103.197557][ T2485] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 103.268278][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 103.272013][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 103.309606][ T8156] geneve2: entered promiscuous mode [ 103.726099][ T8161] 9p: Could not find request transport: v [ 103.759409][ T8163] 9p: Could not find request transport: v [ 103.886281][ T8178] CIFS mount error: No usable UNC path provided in device string! [ 103.886281][ T8178] [ 103.889626][ T8178] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 103.924263][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=8183 comm=syz.0.617 [ 103.957855][ T40] kauditd_printk_skb: 317 callbacks suppressed [ 103.957866][ T40] audit: type=1400 audit(1766171684.851:33665): avc: denied { create } for pid=8188 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.966451][ T40] audit: type=1400 audit(1766171684.851:33666): avc: denied { bind } for pid=8188 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.972954][ T40] audit: type=1400 audit(1766171684.851:33667): avc: denied { write } for pid=8188 comm="syz.0.619" path="socket:[20390]" dev="sockfs" ino=20390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.993319][ T40] audit: type=1400 audit(1766171684.851:33668): avc: denied { prog_load } for pid=8188 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 103.999512][ T40] audit: type=1400 audit(1766171684.851:33669): avc: denied { prog_run } for pid=8188 comm="syz.0.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 104.005775][ T40] audit: type=1400 audit(1766171684.881:33670): avc: denied { setopt } for pid=8185 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.011592][ T40] audit: type=1400 audit(1766171684.881:33671): avc: denied { accept } for pid=8185 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.018046][ T40] audit: type=1400 audit(1766171684.881:33672): avc: denied { write } for pid=8185 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.024360][ T40] audit: type=1400 audit(1766171684.891:33673): avc: denied { create } for pid=8192 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.031029][ T40] audit: type=1400 audit(1766171684.891:33674): avc: denied { ioctl } for pid=8192 comm="syz.0.620" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20931 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.197900][ T8206] netlink: 'syz.2.625': attribute type 62 has an invalid length. [ 104.363761][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.543749][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 104.551595][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 107, changing to 10 [ 104.555253][ T34] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 104.558265][ T34] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 104.563809][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.567269][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.570376][ T34] usb 5-1: Product: ÑŠ [ 104.571790][ T34] usb 5-1: Manufacturer: 猀늑曋柰թꢤ箸픈㴈幡餸牜ì¬â‘—퀼é°ï†¼â£¦â»¢ï¾”é³”è¿å¯“幌⡲ï‹äšç²…â¤é¢¯ç¬‘æ½½ç ã­åŒªï´íœ½è±“糗鳉⟲ä㧈嶈ꡂîƒë¹†ê¼”즑㥤形âªâ‡„蚾㢘⬙﹎섔ᅌêªïœ‚⛎㛄䕴Ø᧨Ⲱé­î ¯ä“¥í”„⮶ [ 104.580493][ T34] usb 5-1: SerialNumber: ј [ 104.847721][ T8237] overlayfs: failed to resolve './file0': -2 [ 104.937309][ T8248] __nla_validate_parse: 4 callbacks suppressed [ 104.937318][ T8248] netlink: 276 bytes leftover after parsing attributes in process `syz.3.639'. [ 104.985340][ T8253] vxlan0: entered promiscuous mode [ 104.987713][ T8253] vxlan0: entered allmulticast mode [ 104.990390][ T1141] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.993242][ T1141] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.996098][ T1141] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.998783][ T1141] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.001830][ T34] cdc_ncm 5-1:1.0: bind() failure [ 105.008454][ T34] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 105.010791][ T34] cdc_ncm 5-1:1.1: bind() failure [ 105.018781][ T34] usb 5-1: USB disconnect, device number 9 [ 105.063270][ T8257] Falling back ldisc for ttynull. [ 105.079313][ T8257] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 105.083226][ T8257] tipc: Enabled bearer , priority 10 [ 105.121329][ T8260] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 105.139658][ T8260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.146159][ T8260] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 105.150267][ T8260] bond3: entered allmulticast mode [ 106.049116][ T8316] sit0: entered promiscuous mode [ 106.054677][ T8316] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 106.057082][ T8316] netlink: 1 bytes leftover after parsing attributes in process `syz.2.661'. [ 106.063293][ T8316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=8316 comm=syz.2.661 [ 106.102613][ T8321] fuse: Bad value for 'user_id' [ 106.105531][ T8321] fuse: Bad value for 'user_id' [ 106.106718][ T8322] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.108269][ T8321] fuse: Bad value for 'user_id' [ 106.110066][ T8322] team0: Device ipvlan2 is already an upper device of the team interface [ 106.111936][ T8321] fuse: Bad value for 'user_id' [ 106.116832][ T8321] fuse: Bad value for 'user_id' [ 106.118391][ T8321] fuse: Bad value for 'user_id' [ 106.120181][ T8321] fuse: Bad value for 'user_id' [ 106.121761][ T8321] fuse: Bad value for 'user_id' [ 106.123567][ T8321] fuse: Bad value for 'user_id' [ 106.126376][ T8321] fuse: Bad value for 'user_id' [ 106.128402][ T8321] fuse: Bad value for 'user_id' [ 106.133735][ T8321] fuse: Bad value for 'user_id' [ 106.135457][ T8321] fuse: Bad value for 'user_id' [ 106.143279][ T8321] fuse: Bad value for 'user_id' [ 106.146546][ T8321] fuse: Bad value for 'user_id' [ 106.148180][ T8321] fuse: Bad value for 'user_id' [ 106.150135][ T8321] fuse: Bad value for 'user_id' [ 106.151749][ T8321] fuse: Bad value for 'user_id' [ 106.154034][ T8321] fuse: Bad value for 'user_id' [ 106.156095][ T8321] fuse: Bad value for 'user_id' [ 106.158518][ T8321] fuse: Bad value for 'user_id' [ 106.160632][ T8321] fuse: Bad value for 'user_id' [ 106.215905][ T6013] tipc: Node number set to 2978862853 [ 106.239452][ T8345] net_ratelimit: 44 callbacks suppressed [ 106.239478][ T8345] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.306910][ T8356] fuse: Bad value for 'max_read' [ 106.558840][ T8380] loop7: detected capacity change from 0 to 7 [ 106.562818][ T8380] buffer_io_error: 202 callbacks suppressed [ 106.562831][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.569167][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.572595][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.576054][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.578903][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.581672][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.584648][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.587471][ T8380] ldm_validate_partition_table(): Disk read failed. [ 106.589820][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.592594][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.595401][ T8380] Buffer I/O error on dev loop7, logical block 0, async page read [ 106.598379][ T8380] Dev loop7: unable to read RDB block 0 [ 106.600341][ T8380] loop7: unable to read partition table [ 106.602846][ T8380] loop7: partition table beyond EOD, truncated [ 106.605355][ T8380] loop_reread_partitions: partition scan of loop7 (úùƒå¡7x~¾SêjÌ–ã¢P) failed (rc=-5) [ 106.883799][ T5988] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 107.055181][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 107.060366][ T5988] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.063315][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.066091][ T5988] usb 6-1: Product: syz [ 107.067409][ T5988] usb 6-1: Manufacturer: syz [ 107.068894][ T5988] usb 6-1: SerialNumber: syz [ 107.071847][ T5988] usb 6-1: config 0 descriptor?? [ 107.078250][ T8385] overlay: Unknown parameter 'smackfsroot' [ 107.081357][ T8385] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 107.312707][ T5988] usb 6-1: USB disconnect, device number 14 [ 107.330364][ T7890] udevd[7890]: setting mode of /dev/bus/usb/006/014 to 020664 failed: No such file or directory [ 107.335188][ T7890] udevd[7890]: setting owner of /dev/bus/usb/006/014 to uid=0, gid=0 failed: No such file or directory [ 107.337462][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 107.344294][ T7998] udevd[7998]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.395452][ T8427] netlink: 128 bytes leftover after parsing attributes in process `syz.1.689'. [ 107.398372][ T8427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 107.403627][ T7412] bridge0: port 3(team0) entered disabled state [ 107.406556][ T8427] xt_l2tp: missing protocol rule (udp|l2tpip) [ 107.475898][ T8434] netlink: 'syz.1.693': attribute type 16 has an invalid length. [ 107.478377][ T8434] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.693'. [ 107.482393][ T8434] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 107.491748][ T8434] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.617896][ T8454] random: crng reseeded on system resumption [ 107.647120][ T8457] bond4 (unregistering): Released all slaves [ 107.856135][ T8467] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 107.986468][ T8473] pim6reg: entered allmulticast mode [ 107.988977][ T8476] pim6reg: left allmulticast mode [ 108.246278][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'. [ 108.251301][ T8499] ip6t_rpfilter: unknown options [ 108.451740][ T8527] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 108.457119][ T8527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.460449][ T8527] batadv_slave_0: entered promiscuous mode [ 108.462613][ T8527] batadv_slave_0: entered allmulticast mode [ 108.623985][ T53] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.754193][ T53] usb 5-1: device descriptor read/64, error -71 [ 108.993741][ T53] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.133753][ T53] usb 5-1: device descriptor read/64, error -71 [ 109.243882][ T53] usb usb5-port1: attempt power cycle [ 109.483800][ T40] kauditd_printk_skb: 339 callbacks suppressed [ 109.483812][ T40] audit: type=1400 audit(1766171690.381:34014): avc: denied { create } for pid=8541 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.492519][ T8542] openvswitch: netlink: Duplicate or invalid key (type 0). [ 109.493847][ T40] audit: type=1400 audit(1766171690.381:34015): avc: denied { write } for pid=8541 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.494969][ T8542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.526350][ T40] audit: type=1400 audit(1766171690.421:34016): avc: denied { create } for pid=8544 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.529847][ T8545] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.726'. [ 109.532560][ T40] audit: type=1400 audit(1766171690.421:34017): avc: denied { write } for pid=8544 comm="syz.2.726" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.543181][ T40] audit: type=1400 audit(1766171690.421:34018): avc: denied { open } for pid=8544 comm="syz.2.726" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.551700][ T40] audit: type=1400 audit(1766171690.421:34019): avc: denied { ioctl } for pid=8544 comm="syz.2.726" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.561507][ T40] audit: type=1400 audit(1766171690.421:34020): avc: denied { bind } for pid=8544 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.567456][ T40] audit: type=1400 audit(1766171690.421:34021): avc: denied { listen } for pid=8544 comm="syz.2.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.573499][ T40] audit: type=1400 audit(1766171690.451:34022): avc: denied { ioctl } for pid=8539 comm="syz.1.724" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.581296][ T40] audit: type=1400 audit(1766171690.451:34023): avc: denied { read } for pid=8546 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.588197][ T53] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.593028][ T8547] wlan1: entered allmulticast mode [ 109.606406][ T53] usb 5-1: device descriptor read/8, error -71 [ 109.613795][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 109.632266][ T8552] tmpfs: User quota inode hardlimit too large. [ 109.734037][ T8561] syz_tun: entered allmulticast mode [ 109.765675][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.769990][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.774166][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.779194][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.782303][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.788114][ T34] usb 6-1: config 0 descriptor?? [ 109.819822][ T8566] 9pnet_virtio: no channels available for device syz [ 109.853800][ T53] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 109.874460][ T53] usb 5-1: device descriptor read/8, error -71 [ 109.938650][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 109.987896][ T53] usb usb5-port1: unable to enumerate USB device [ 110.079322][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.083098][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.400336][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 110.402260][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 110.407386][ T34] usb 6-1: USB disconnect, device number 15 [ 110.770389][ T8594] netlink: 11 bytes leftover after parsing attributes in process `syz.2.740'. [ 110.872978][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 110.967186][ T8613] netlink: 'syz.1.746': attribute type 19 has an invalid length. [ 110.969792][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 110.972747][ T8613] netlink: 'syz.1.746': attribute type 19 has an invalid length. [ 110.976000][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 111.304760][ T8650] exFAT-fs (nullb0): invalid boot record signature [ 111.306997][ T8650] exFAT-fs (nullb0): failed to read boot sector [ 111.309065][ T8650] exFAT-fs (nullb0): failed to recognize exfat type [ 111.315423][ T8650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=8650 comm=syz.0.759 [ 111.319891][ T8650] exfat: Unknown parameter 'discardÖßû"®|´Á*:p†Ñdû´î%tû‹|”H' [ 111.333063][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.757'. [ 111.357982][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 111.576182][ T8667] netlink: 'syz.1.764': attribute type 11 has an invalid length. [ 111.591559][ T8667] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 111.594573][ T8667] macsec1: entered promiscuous mode [ 111.596591][ T8667] macsec1: entered allmulticast mode [ 111.598317][ T8667] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 111.664588][ T8671] kAFS: unable to lookup cell '(,c¾ûL' [ 112.250227][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.768'. [ 112.318295][ T8690] nvme_fabrics: unknown parameter or missing value 'ELF9û' in ctrl creation request [ 112.426412][ T8698] netlink: 360 bytes leftover after parsing attributes in process `syz.0.772'. [ 112.682213][ T8708] 9pnet_virtio: no channels available for device syz [ 113.570502][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 113.575108][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 113.594975][ T8744] bond0: (slave team0): Releasing backup interface [ 113.605662][ T8744] team0 (unregistering): Port device team_slave_0 removed [ 113.614719][ T8744] team0 (unregistering): Port device team_slave_1 removed [ 113.808337][ T8756] UHID_CREATE from different security context by process 635 (syz.0.791), this is not allowed. [ 114.054975][ T8778] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 114.568189][ T40] kauditd_printk_skb: 238 callbacks suppressed [ 114.568200][ T40] audit: type=1400 audit(1766171695.461:34262): avc: denied { create } for pid=8783 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.578407][ T40] audit: type=1400 audit(1766171695.471:34263): avc: denied { bind } for pid=8783 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.584530][ T40] audit: type=1400 audit(1766171695.471:34264): avc: denied { setopt } for pid=8783 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.590832][ T40] audit: type=1400 audit(1766171695.471:34265): avc: denied { accept } for pid=8783 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 114.664216][ T40] audit: type=1400 audit(1766171695.561:34266): avc: denied { mounton } for pid=8789 comm="syz.0.799" path="/210/file0" dev="tmpfs" ino=1115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.673542][ T8790] blk_print_req_error: 203 callbacks suppressed [ 114.673558][ T8790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.679546][ T8790] buffer_io_error: 14 callbacks suppressed [ 114.679555][ T8790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.684020][ T8790] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.686988][ T8790] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.690005][ T8790] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.693241][ T8790] Buffer I/O error on dev nbd0, logical block 2, async page read [ 114.696195][ T8790] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.699149][ T8790] Buffer I/O error on dev nbd0, logical block 3, async page read [ 114.701659][ T8790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.704962][ T8790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.707442][ T8790] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.710530][ T8790] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.713057][ T8790] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.716148][ T8790] Buffer I/O error on dev nbd0, logical block 2, async page read [ 114.718612][ T8790] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.721548][ T8790] Buffer I/O error on dev nbd0, logical block 3, async page read [ 114.724241][ T8790] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.727716][ T8790] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.730155][ T8790] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.733113][ T8790] Buffer I/O error on dev nbd0, logical block 1, async page read [ 114.736050][ T8790] ldm_validate_partition_table(): Disk read failed. [ 114.739336][ T8790] Dev nbd0: unable to read RDB block 0 [ 114.742317][ T8790] nbd0: unable to read partition table [ 114.748133][ T8790] XFS (nbd0): SB validate failed with error -5. [ 114.799184][ T40] audit: type=1400 audit(1766171695.691:34267): avc: denied { mounton } for pid=8796 comm="syz.0.800" path="/211" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 114.874850][ T40] audit: type=1400 audit(1766171695.771:34268): avc: denied { remount } for pid=8801 comm="syz.0.801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.913970][ T40] audit: type=1400 audit(1766171695.811:34269): avc: denied { read write } for pid=8807 comm="syz.0.802" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.922064][ T40] audit: type=1400 audit(1766171695.811:34270): avc: denied { open } for pid=8807 comm="syz.0.802" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.930509][ T8808] input: syz1 as /devices/virtual/input/input17 [ 114.933852][ T40] audit: type=1400 audit(1766171695.811:34271): avc: denied { ioctl } for pid=8807 comm="syz.0.802" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 115.234964][ T8825] x_tables: duplicate underflow at hook 1 [ 115.240029][ T8825] IPVS: length: 115 != 8 [ 116.000016][ T8855] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 116.003003][ T8855] SELinux: failed to load policy [ 116.109214][ T8864] __nla_validate_parse: 2 callbacks suppressed [ 116.109224][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 116.206780][ T8868] loop2: detected capacity change from 0 to 14 [ 116.212264][ T7890] Dev loop2: unable to read RDB block 14 [ 116.214393][ T7890] loop2: unable to read partition table [ 116.216371][ T7890] loop2: partition table beyond EOD, truncated [ 116.221762][ T8868] Dev loop2: unable to read RDB block 14 [ 116.223636][ T8868] loop2: unable to read partition table [ 116.225657][ T8868] loop2: partition table beyond EOD, truncated [ 116.233190][ T8868] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.481869][ T8884] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 116.484436][ T8884] netlink: 'syz.2.829': attribute type 3 has an invalid length. [ 116.486882][ T8884] netlink: 212 bytes leftover after parsing attributes in process `syz.2.829'. [ 116.512960][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 116.570871][ T8888] lo speed is unknown, defaulting to 1000 [ 116.573258][ T8888] lo speed is unknown, defaulting to 1000 [ 116.575572][ T8888] lo speed is unknown, defaulting to 1000 [ 116.581695][ T8888] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.592509][ T8888] lo speed is unknown, defaulting to 1000 [ 116.595189][ T8888] lo speed is unknown, defaulting to 1000 [ 116.597720][ T8888] lo speed is unknown, defaulting to 1000 [ 116.600271][ T8888] lo speed is unknown, defaulting to 1000 [ 117.035196][ T8902] fuseblk: Bad value for 'fd' [ 117.043380][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 117.056293][ T8902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.344623][ T8887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.346864][ T8887] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.353578][ T8887] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.357637][ T8887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.359665][ T8887] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.362466][ T8887] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.365894][ T8887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.367796][ T8887] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.370357][ T8887] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.373370][ T8887] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.376195][ T8887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.378139][ T8887] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.380777][ T8887] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.436749][ T8908] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 117.439279][ T8908] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 117.441932][ T8908] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.836'. [ 117.673862][ T53] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 117.703073][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.845'. [ 117.706263][ T8935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.845'. [ 117.733785][ T5988] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 117.832626][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.837026][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.885652][ T5988] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 117.888696][ T5988] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 117.904325][ T5988] usb 8-1: config 0 interface 0 has no altsetting 0 [ 117.909834][ T5988] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.913668][ T5988] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.926443][ T5988] usb 8-1: Product: syz [ 117.928172][ T5988] usb 8-1: Manufacturer: syz [ 117.930207][ T5988] usb 8-1: SerialNumber: syz [ 117.952692][ T5988] usb 8-1: config 0 descriptor?? [ 117.958318][ T5988] hub 8-1:0.0: bad descriptor, ignoring hub [ 117.960285][ T5988] hub 8-1:0.0: probe with driver hub failed with error -5 [ 117.971933][ T5988] usb 8-1: selecting invalid altsetting 0 [ 118.025268][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 118.045324][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.048235][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.052388][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.055681][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.259546][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.262424][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.268253][ T53] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 118.270651][ T53] usb 6-1: can't read configurations, error -71 [ 118.324745][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.852'. [ 118.393598][ T8976] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 118.587539][ T60] usb 8-1: USB disconnect, device number 13 [ 118.654631][ T5936] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.743811][ T60] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 118.759075][ T8996] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 118.873659][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 118.897058][ T60] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 118.899654][ T60] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.902347][ T9005] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 118.902806][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 118.923151][ T60] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 118.926089][ T60] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 118.928725][ T60] usb 8-1: Product: syz [ 118.930064][ T60] usb 8-1: Manufacturer: syz [ 118.931531][ T60] usb 8-1: SerialNumber: syz [ 118.935986][ T60] usb 8-1: config 0 descriptor?? [ 118.942310][ T60] hub 8-1:0.0: bad descriptor, ignoring hub [ 118.944748][ T60] hub 8-1:0.0: probe with driver hub failed with error -5 [ 118.950973][ T60] usb 8-1: selecting invalid altsetting 0 [ 119.170606][ T9021] team0: Port device team_slave_1 removed [ 119.244696][ T60] usb 8-1: USB disconnect, device number 14 [ 119.433913][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.435922][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.438315][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.668751][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 119.668760][ T40] audit: type=1400 audit(1766171700.561:34521): avc: denied { mounton } for pid=9066 comm="syz.3.878" path="/162" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 119.678591][ T40] audit: type=1400 audit(1766171700.571:34522): avc: denied { mount } for pid=9066 comm="syz.3.878" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.685944][ T40] audit: type=1400 audit(1766171700.581:34523): avc: denied { module_request } for pid=9066 comm="syz.3.878" kmod="crypto-gcm_base(ctr(aes-aesni),ghash-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.694166][ T40] audit: type=1400 audit(1766171700.591:34524): avc: denied { setopt } for pid=9066 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.725572][ T40] audit: type=1400 audit(1766171700.591:34525): avc: denied { accept } for pid=9066 comm="syz.3.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.731850][ T40] audit: type=1400 audit(1766171700.591:34526): avc: denied { module_request } for pid=9066 comm="syz.3.878" kmod="crypto-gcm_base(ctr(aes-aesni),ghash-generic)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 119.740499][ T40] audit: type=1400 audit(1766171700.611:34527): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.759174][ T40] audit: type=1400 audit(1766171700.621:34528): avc: denied { create } for pid=9075 comm="syz.2.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.761975][ T9076] binder: 9075:9076 ioctl c018480d 200000000080 returned -22 [ 119.765651][ T40] audit: type=1400 audit(1766171700.621:34529): avc: denied { setopt } for pid=9075 comm="syz.2.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.765673][ T40] audit: type=1400 audit(1766171700.651:34530): avc: denied { bind } for pid=9075 comm="syz.2.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.849970][ T9086] x_tables: ip_tables: osf match: only valid for protocol 6 [ 120.005173][ T9099] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 120.008005][ T9099] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 120.010965][ T9099] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 120.028459][ T9102] : Can't lookup blockdev [ 120.036392][ T5942] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 120.039358][ T5942] Bluetooth: hci0: unexpected event for opcode 0x203e [ 120.113794][ T60] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 120.267204][ T60] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 120.270118][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.272605][ T60] usb 8-1: Product: syz [ 120.274286][ T60] usb 8-1: Manufacturer: syz [ 120.277172][ T60] usb 8-1: SerialNumber: syz [ 120.285202][ T60] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 120.300208][ T60] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 120.362554][ T9130] netem: invalid attributes len -22 [ 120.364474][ T9130] netem: change failed [ 120.513088][ T9091] syz.3.883 uses old SIOCAX25GETINFO [ 120.518484][ T6023] usb 8-1: USB disconnect, device number 15 [ 120.591445][ T7428] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.675847][ T9152] lo speed is unknown, defaulting to 1000 [ 120.781870][ T8944] syz.0.846 (8944) used greatest stack depth: 18728 bytes left [ 120.818712][ T9164] lo speed is unknown, defaulting to 1000 [ 121.103765][ T9025] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 121.152483][ T5942] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 121.154725][ T9199] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 121.157438][ T9199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.159996][ T9199] vhci_hcd vhci_hcd.0: Device attached [ 121.162357][ T9200] vhci_hcd: connection closed [ 121.162563][ T7428] vhci_hcd vhci_hcd.2: stop threads [ 121.166105][ T7428] vhci_hcd vhci_hcd.2: release socket [ 121.168208][ T7428] vhci_hcd vhci_hcd.2: disconnect device [ 121.229858][ T9205] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.268289][ T9025] usb 5-1: device descriptor read/64, error -71 [ 121.343813][ T60] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 121.346847][ T60] ath9k_htc: Failed to initialize the device [ 121.351949][ T6023] usb 8-1: ath9k_htc: USB layer deinitialized [ 121.370850][ T9210] can0: slcan on ttyS3. [ 121.408249][ T9215] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.410024][ T9214] __nla_validate_parse: 6 callbacks suppressed [ 121.410033][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'. [ 121.445747][ T9205] can0 (unregistered): slcan off ttyS3. [ 121.503967][ T9025] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.505317][ T5936] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.508962][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.616269][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.913'. [ 121.653912][ T9025] usb 5-1: device descriptor read/64, error -71 [ 121.742671][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'. [ 121.773942][ T9025] usb usb5-port1: attempt power cycle [ 121.796254][ T9269] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 121.798711][ T9269] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 121.867272][ T9268] [U] ^H [ 121.935572][ T9282] netlink: 'syz.1.925': attribute type 9 has an invalid length. [ 121.935586][ T9283] netlink: 'syz.1.925': attribute type 9 has an invalid length. [ 121.937903][ T9282] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.925'. [ 121.956716][ T9283] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.925'. [ 122.074490][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 122.077791][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.928'. [ 122.099620][ T9295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.108230][ T9295] bond3: (slave batadv1): Opening slave failed [ 122.123887][ T9025] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.145054][ T9025] usb 5-1: device descriptor read/8, error -71 [ 122.247614][ T9302] netlink: 'syz.3.931': attribute type 11 has an invalid length. [ 122.250300][ T9302] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.931'. [ 122.386910][ T9316] comedi comedi2: comedi_config --init_data is deprecated [ 122.390405][ T9318] binder: 9317:9318 ioctl c00c620f 200000000240 returned -22 [ 122.400601][ T9318] vlan0: entered promiscuous mode [ 122.403430][ T9318] vlan0: entered allmulticast mode [ 122.403747][ T9025] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 122.405941][ T9318] hsr_slave_1: entered allmulticast mode [ 122.412782][ T9318] 9pnet_virtio: no channels available for device syz [ 122.424154][ T9025] usb 5-1: device descriptor read/8, error -71 [ 122.536458][ T9025] usb usb5-port1: unable to enumerate USB device [ 122.574843][ T9333] fuse: Bad value for 'fd' [ 122.813881][ T53] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 122.963785][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 122.968280][ T53] usb 6-1: config 75 has an invalid interface number: 49 but max is 3 [ 122.971594][ T53] usb 6-1: config 75 has an invalid interface number: 191 but max is 3 [ 122.975288][ T53] usb 6-1: config 75 has an invalid interface number: 213 but max is 3 [ 122.978742][ T53] usb 6-1: config 75 has an invalid interface number: 143 but max is 3 [ 122.981531][ T53] usb 6-1: config 75 has no interface number 0 [ 122.983980][ T53] usb 6-1: config 75 has no interface number 1 [ 122.986630][ T53] usb 6-1: config 75 has no interface number 2 [ 122.989267][ T53] usb 6-1: config 75 has no interface number 3 [ 122.991893][ T53] usb 6-1: config 75 interface 49 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 122.996711][ T53] usb 6-1: config 75 interface 49 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 123.000189][ T53] usb 6-1: config 75 interface 49 altsetting 7 endpoint 0x1 has an invalid bInterval 209, changing to 7 [ 123.004995][ T53] usb 6-1: config 75 interface 49 altsetting 7 endpoint 0x3 has an invalid bInterval 64, changing to 10 [ 123.008646][ T53] usb 6-1: config 75 interface 49 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 123.011991][ T53] usb 6-1: config 75 interface 191 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 123.015690][ T53] usb 6-1: config 75 interface 191 altsetting 13 has a duplicate endpoint with address 0x3, skipping [ 123.019517][ T53] usb 6-1: config 75 interface 191 altsetting 13 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 123.023011][ T53] usb 6-1: config 75 interface 191 altsetting 13 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 123.027700][ T53] usb 6-1: config 75 interface 191 altsetting 13 has a duplicate endpoint with address 0xC, skipping [ 123.031959][ T53] usb 6-1: config 75 interface 191 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 123.035546][ T53] usb 6-1: config 75 interface 191 altsetting 13 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 123.039630][ T53] usb 6-1: config 75 interface 191 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 123.044333][ T53] usb 6-1: config 75 interface 191 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 123.048887][ T53] usb 6-1: config 75 interface 213 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 123.052952][ T53] usb 6-1: config 75 interface 213 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 123.056729][ T53] usb 6-1: config 75 interface 49 has no altsetting 0 [ 123.059544][ T53] usb 6-1: config 75 interface 191 has no altsetting 0 [ 123.062433][ T53] usb 6-1: config 75 interface 213 has no altsetting 0 [ 123.065440][ T53] usb 6-1: config 75 interface 143 has no altsetting 0 [ 123.069788][ T53] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0800, bcdDevice=3d.25 [ 123.072656][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.075432][ T53] usb 6-1: Product: 䒜佯廊ˣᷥ⹨ᭆî¢äŒ•ä¦ªí—”༅簄涽贙햛匛鑺ꇛ忊魖漢틦ꦥ訬î²ï¬ºâ®†È蠤æ¸ç¢¸èŽŒçŒ–ë豻ᳪ鞠댠ì¬á¡¿è¼—瞱绥稫爯蜖䈩뺟᭓٥Ꭱ⃛⮼ꌇí€ï¢‘䞴帉䖥䆫ëšå‹§éŽ»â’ªâ¼Œé‰‘쬥罆觭ꃶ̊ [ 123.083888][ T53] usb 6-1: Manufacturer: 푡ꢎ考⥋椳儴鸢劥Óႀ⋱㫓㒷뽅æ°ê½·ï¸‹æ½½æ©˜Ã„륄瘃äµâŠïŠ å¤ì»éš‘é°’êšã±•âŒµí–»é°¾â—ªî·¹è ï›”煉ï¸ã»Žâ¦‹ìœ—檨쒾묶뮵뮶꼗චì´à«½ë´±ì¾·å¬ªï³›è¹é©ï€•ïš‡î”…ꬪ涆횹튼켑℗쓡淽⿄Ꙟ瘵癪㥒賖Ⲽ [ 123.094499][ T53] usb 6-1: SerialNumber: 뺽䜂么ㇺ鼆ڜ纗鿠咳괯ᒄ앮ᔾ௥è´î肸楨㲹rūꇂ㛀㙞ä¶ê©£ê‡í†´í† â‘‹Ö™éš¸ç—箾㬣孀罥䵂㯃ঀä…鶞á›éŽë‚ŒíŠºì³•ê¥æ«æ¿¶ç„„è¡ä€êŽé±…ߓ셸䅥看á¬ã¶“ç¨ì£äœ¼ç‘ƒç°§ä†à±­ì¨‡í…¿í—‘륻壪౮䅙è£ã©¾ç¯Šè¬’걲隿ކæ®ë¼žî¾å“«éª‚á‘ [ 123.321991][ T9335] trusted_key: encrypted_key: insufficient parameters specified [ 123.329346][ T53] option 6-1:75.49: GSM modem (1-port) converter detected [ 123.344757][ T53] usb 6-1: USB disconnect, device number 18 [ 123.351498][ T53] option 6-1:75.49: device disconnected [ 123.593981][ T5937] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.596939][ T5936] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.811766][ T9338] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 52 [ 123.830254][ T9338] syz_tun: entered allmulticast mode [ 123.832658][ T9337] syz_tun: left allmulticast mode [ 124.022791][ T9360] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 124.074824][ T9364] 9pnet_virtio: no channels available for device syz [ 124.075489][ T5942] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 124.085808][ T5942] Bluetooth: hci0: Injecting HCI hardware error event [ 124.090483][ T5937] Bluetooth: hci0: hardware error 0x00 [ 124.134015][ T9026] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 124.261038][ T9380] tipc: Started in network mode [ 124.262740][ T9380] tipc: Node identity ac14140f, cluster identity 4711 [ 124.266300][ T9380] tipc: New replicast peer: 255.255.255.255 [ 124.269055][ T9380] tipc: Enabled bearer , priority 10 [ 124.271460][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'. [ 124.275370][ T9380] tipc: Disabling bearer [ 124.296340][ T9026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.300867][ T9026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.305950][ T9026] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.311245][ T9026] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.315146][ T9026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.320634][ T9026] usb 8-1: config 0 descriptor?? [ 124.370771][ T9388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.373166][ T9388] IPv6: NLM_F_CREATE should be set when creating new route [ 124.376963][ T9388] netlink: 'syz.0.961': attribute type 21 has an invalid length. [ 124.587551][ T9397] ip6t_rpfilter: unknown options [ 124.691986][ T40] kauditd_printk_skb: 377 callbacks suppressed [ 124.691996][ T40] audit: type=1400 audit(1766171705.581:34908): avc: denied { create } for pid=9402 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.701497][ T40] audit: type=1400 audit(1766171705.591:34909): avc: denied { bind } for pid=9402 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.707659][ T40] audit: type=1400 audit(1766171705.591:34910): avc: denied { setopt } for pid=9402 comm="syz.0.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.715880][ T40] audit: type=1400 audit(1766171705.611:34911): avc: denied { mount } for pid=9402 comm="syz.0.966" name="/" dev="overlay" ino=1355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 124.725049][ T40] audit: type=1804 audit(1766171705.611:34912): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.966" name="/newroot/254/bus/bus" dev="overlay" ino=1362 res=1 errno=0 [ 124.734738][ T40] audit: type=1400 audit(1766171705.611:34913): avc: denied { execute } for pid=9402 comm="syz.0.966" path="/254/bus/bus" dev="overlay" ino=1362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.741343][ T9026] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 124.745555][ T40] audit: type=1400 audit(1766171705.631:34914): avc: denied { mounton } for pid=9406 comm="syz.2.967" path="/syzcgroup/unified/syz2" dev="ocfs2_dlmfs" ino=16121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.793171][ T9407] XFS (nullb0): Invalid superblock magic number [ 124.793544][ T40] audit: type=1400 audit(1766171705.681:34915): avc: denied { create } for pid=9406 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.848761][ T9416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9416 comm=syz.2.968 [ 124.889831][ T40] audit: type=1400 audit(1766171705.781:34916): avc: denied { append } for pid=9417 comm="syz.2.969" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.890420][ T9418] program syz.2.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.899231][ T40] audit: type=1400 audit(1766171705.781:34917): avc: denied { open } for pid=9417 comm="syz.2.969" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.901191][ T9418] ata1.00: invalid command format 5 [ 125.009648][ T9026] usb 8-1: USB disconnect, device number 16 [ 125.029371][ T9425] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 125.042085][ T9425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.315487][ T9441] team0: left allmulticast mode [ 125.317709][ T9441] team_slave_0: left allmulticast mode [ 125.320006][ T9441] team_slave_1: left allmulticast mode [ 125.322308][ T9441] team0: left promiscuous mode [ 125.324603][ T9441] team_slave_0: left promiscuous mode [ 125.326444][ T9441] team_slave_1: left promiscuous mode [ 125.328599][ T9441] bridge0: port 3(team0) entered disabled state [ 125.331960][ T9441] bridge_slave_1: left allmulticast mode [ 125.333948][ T9441] bridge_slave_1: left promiscuous mode [ 125.335845][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.340792][ T9441] bridge_slave_0: left allmulticast mode [ 125.342730][ T9441] bridge_slave_0: left promiscuous mode [ 125.345421][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.419727][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.976'. [ 125.507954][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.510760][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.550171][ T5942] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 125.585205][ T9454] FAT-fs (nullb0): bogus number of reserved sectors [ 125.588203][ T9454] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 125.664846][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.664871][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.743564][ T5942] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 125.746335][ T9468] netlink: 'syz.0.984': attribute type 3 has an invalid length. [ 125.749025][ T9466] netlink: 'syz.0.984': attribute type 3 has an invalid length. [ 125.810681][ T9482] bridge3: entered promiscuous mode [ 125.812390][ T9482] bridge3: entered allmulticast mode [ 125.877188][ T9492] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 125.944270][ T9484] nbd1: detected capacity change from 0 to 549764202496 [ 125.948949][ T5942] block nbd1: Receive control failed (result -104) [ 125.999592][ T9496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.008149][ T9498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.094207][ T6252] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 126.144271][ T5937] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 126.253851][ T6252] usb 5-1: Using ep0 maxpacket: 8 [ 126.258076][ T6252] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 126.261485][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.268388][ T6252] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.273268][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.278458][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.282647][ T6252] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 126.285332][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.288987][ T6252] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.292818][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.296515][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.300473][ T6252] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 126.302959][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 126.308410][ T6252] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 126.312224][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 126.315887][ T6252] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 126.322757][ T6252] usb 5-1: string descriptor 0 read error: -22 [ 126.324935][ T6252] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 126.327907][ T6252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.335180][ T6252] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 126.541369][ T53] usb 5-1: USB disconnect, device number 18 [ 126.625874][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.629888][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.638985][ T9544] __nla_validate_parse: 4 callbacks suppressed [ 126.638994][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 126.646081][ T9544] netlink: 'syz.2.1009': attribute type 20 has an invalid length. [ 126.690622][ T9545] pvrusb2: Attempted to execute control transfer when device not ok [ 126.765804][ T9548] securityfs: Unknown parameter 'workdir' [ 126.772406][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 126.772418][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 126.775480][ T9549] openvswitch: netlink: Missing key (keys=40, expected=80) [ 126.778612][ T9548] openvswitch: netlink: Missing key (keys=40, expected=80) [ 126.893873][ T53] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 127.063876][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 127.066875][ T53] usb 5-1: config 2 interface 0 has no altsetting 0 [ 127.070781][ T53] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 127.081579][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.084350][ T53] usb 5-1: Product: syz [ 127.085675][ T53] usb 5-1: Manufacturer: syz [ 127.087144][ T53] usb 5-1: SerialNumber: syz [ 127.148375][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 127.151575][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 127.308435][ T9489] block device autoloading is deprecated and will be removed. [ 127.309031][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 127.334627][ T9577] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.356088][ T9581] usb usb8: usbfs: process 9581 (syz.3.1018) did not claim interface 0 before use [ 127.386954][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 127.714592][ T9613] hub 9-0:1.0: USB hub found [ 127.716413][ T9613] hub 9-0:1.0: 1 port detected [ 127.727090][ T9613] hub 9-0:1.0: USB hub found [ 127.728709][ T9613] hub 9-0:1.0: 1 port detected [ 127.792096][ T9620] x_tables: duplicate underflow at hook 1 [ 127.797811][ T9620] xt_ecn: cannot match TCP bits for non-tcp packets [ 127.845476][ T53] usb 5-1: USB disconnect, device number 19 [ 127.877606][ T9631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9631 comm=syz.3.1034 [ 127.945937][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 127.949048][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 127.959166][ T9641] ntfs3(sr0): Primary boot signature is not NTFS. [ 127.962564][ T9641] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 128.007027][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 128.009090][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 128.214358][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 128.216405][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 128.264030][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 128.266458][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 128.734731][ T6252] libceph: connect (1)[c::]:6789 error -101 [ 128.738138][ T6252] libceph: mon0 (1)[c::]:6789 connect error [ 128.764275][ T9638] ceph: No mds server is up or the cluster is laggy [ 128.768221][ T9644] ceph: No mds server is up or the cluster is laggy [ 128.919739][ T9665] tmpfs: Bad value for 'huge' [ 129.011262][ T9677] usb usb8: usbfs: process 9677 (syz.2.1047) did not claim interface 0 before use [ 129.019323][ T9677] hugetlbfs: Bad value 'k' for mount option 'size' [ 129.019323][ T9677] [ 129.272833][ T9699] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.283828][ T6023] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 129.443856][ T6023] usb 5-1: Using ep0 maxpacket: 32 [ 129.446778][ T6023] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 129.449463][ T6023] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 129.452867][ T6023] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 129.456703][ T6023] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 129.459838][ T6023] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 129.459845][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.464030][ T6023] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.469198][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.472685][ T6023] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 129.477181][ T6023] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 129.478347][ T9710] ip6t_REJECT: ECHOREPLY is not supported [ 129.479807][ T6023] usb 5-1: Product: syz [ 129.483010][ T6023] usb 5-1: Manufacturer: syz [ 129.484056][ T9710] netlink: 'syz.2.1057': attribute type 4 has an invalid length. [ 129.484637][ T6023] usb 5-1: SerialNumber: syz [ 129.489865][ T6023] usb 5-1: config 0 descriptor?? [ 129.494812][ T6023] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 129.495394][ T9710] netlink: 'syz.2.1057': attribute type 4 has an invalid length. [ 129.499044][ T6023] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 129.505642][ T53] lo speed is unknown, defaulting to 1000 [ 129.507829][ T5988] lo speed is unknown, defaulting to 1000 [ 129.566489][ T9719] syzkaller1: entered promiscuous mode [ 129.568718][ T9719] syzkaller1: entered allmulticast mode [ 129.653845][ T9719] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 129.660225][ T9719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.665994][ T9719] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.696604][ T40] kauditd_printk_skb: 317 callbacks suppressed [ 129.696616][ T40] audit: type=1400 audit(1766171710.591:35235): avc: denied { read } for pid=9680 comm="syz.0.1049" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.710322][ T9681] binder: 9680:9681 ioctl 4018620d 200000000100 returned -22 [ 129.716740][ T6023] usb 5-1: USB disconnect, device number 20 [ 129.720603][ T6023] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 129.730626][ T40] audit: type=1400 audit(1766171710.591:35236): avc: denied { open } for pid=9680 comm="syz.0.1049" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.738650][ T40] audit: type=1400 audit(1766171710.601:35237): avc: denied { ioctl } for pid=9680 comm="syz.0.1049" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.747065][ T40] audit: type=1400 audit(1766171710.621:35238): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.755460][ T40] audit: type=1400 audit(1766171710.651:35239): avc: denied { create } for pid=9724 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.761527][ T40] audit: type=1400 audit(1766171710.651:35240): avc: denied { read } for pid=9724 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.807911][ T40] audit: type=1400 audit(1766171710.701:35241): avc: denied { write } for pid=9724 comm="syz.2.1060" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.817706][ T40] audit: type=1400 audit(1766171710.701:35242): avc: denied { open } for pid=9724 comm="syz.2.1060" path="/dev/input/event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.826731][ T40] audit: type=1400 audit(1766171710.701:35243): avc: denied { read } for pid=9724 comm="syz.2.1060" name="media8" dev="devtmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.833860][ T40] audit: type=1400 audit(1766171710.701:35244): avc: denied { open } for pid=9724 comm="syz.2.1060" path="/dev/media8" dev="devtmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.952653][ T9731] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.955780][ T9731] block device autoloading is deprecated and will be removed. [ 129.961330][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 129.965047][ T9730] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 130.130392][ T9741] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.1065'. [ 130.133291][ T9741] netlink: 3696 bytes leftover after parsing attributes in process `syz.3.1065'. [ 130.182384][ T9743] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 130.252371][ T9747] 9pnet_virtio: no channels available for device syz [ 130.286846][ T9751] xt_l2tp: missing protocol rule (udp|l2tpip) [ 130.291852][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.298306][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.301261][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.304568][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.307723][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.310658][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.313601][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.316046][ T9753] lo speed is unknown, defaulting to 1000 [ 130.318226][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.321169][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.324230][ T6252] hid-generic 0008:0000:0000.0005: unknown main item tag 0x0 [ 130.332811][ T6252] hid-generic 0008:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 130.365999][ T9754] fido_id[9754]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.423184][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.794703][ T9783] QAT: Invalid ioctl -2144835806 [ 130.911082][ T9799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.928116][ T9810] xt_hashlimit: max too large, truncated to 1048576 [ 131.047520][ T9826] Bluetooth: MGMT ver 1.23 [ 131.048981][ T9826] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 131.074655][ T9827] batman_adv: batadv0: Adding interface: gretap1 [ 131.076744][ T9827] batman_adv: batadv0: Interface activated: gretap1 [ 132.033980][ T9879] vlan1: entered allmulticast mode [ 132.035662][ T9879] bond0: entered allmulticast mode [ 132.037321][ T9879] bond_slave_0: entered allmulticast mode [ 132.039276][ T9879] bond_slave_1: entered allmulticast mode [ 132.041133][ T9879] syz_tun: entered allmulticast mode [ 132.110347][ T9877] SELinux: failed to load policy [ 132.246213][ C2] ata1: illegal qc_active transition (00000000->40000000) [ 132.263812][ T9891] __nla_validate_parse: 1 callbacks suppressed [ 132.263823][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'. [ 132.268724][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 132.568487][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 132.575888][ T1111] ata1.00: configured for UDMA/100 [ 132.603881][ T9923] input: syz0 as /devices/virtual/input/input21 [ 132.667551][ T9925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 132.669795][ T9925] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 132.672666][ T9925] vhci_hcd vhci_hcd.0: Device attached [ 132.676054][ T9927] vhci_hcd: connection closed [ 132.676219][ T12] vhci_hcd vhci_hcd.2: stop threads [ 132.679538][ T12] vhci_hcd vhci_hcd.2: release socket [ 132.681390][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 133.182066][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 133.187262][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 133.210675][ T9936] XFS (nbd2): no-recovery mounts must be read-only. [ 133.294433][ T9938] nbd2: detected capacity change from 0 to 63 [ 133.297969][ T7890] block nbd2: Send control failed (result -32) [ 133.297989][ T5937] block nbd2: Receive control failed (result -32) [ 133.300424][ T7890] block nbd2: Request send failed, requeueing [ 133.305550][ T30] block nbd2: Dead connection, failed to find a fallback [ 133.310083][ T7890] blk_print_req_error: 55 callbacks suppressed [ 133.310094][ T7890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.310123][ T30] block nbd2: shutting down sockets [ 133.312054][ T7890] buffer_io_error: 54 callbacks suppressed [ 133.312062][ T7890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 133.317193][ T30] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.320964][ T7890] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.324083][ T30] Buffer I/O error on dev nbd2, logical block 0, async page read [ 133.327035][ T7890] Buffer I/O error on dev nbd2, logical block 2, async page read [ 133.336156][ T7890] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.339288][ T7890] Buffer I/O error on dev nbd2, logical block 3, async page read [ 133.341822][ T7890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.345186][ T7890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 133.347635][ T7890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.350593][ T7890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 133.353704][ T7890] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.357169][ T7890] Buffer I/O error on dev nbd2, logical block 2, async page read [ 133.360456][ T7890] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.363470][ T7890] Buffer I/O error on dev nbd2, logical block 3, async page read [ 133.377498][ T7890] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.380607][ T7890] Buffer I/O error on dev nbd2, logical block 0, async page read [ 133.383477][ T7890] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 133.387061][ T7890] Buffer I/O error on dev nbd2, logical block 1, async page read [ 133.390101][ T7890] ldm_validate_partition_table(): Disk read failed. [ 133.392509][ T7890] Dev nbd2: unable to read RDB block 0 [ 133.394796][ T7890] nbd2: unable to read partition table [ 133.400891][ T7890] ldm_validate_partition_table(): Disk read failed. [ 133.405799][ T7890] Dev nbd2: unable to read RDB block 0 [ 133.407941][ T7890] nbd2: unable to read partition table [ 133.447569][ T9973] cgroup: subsys name conflicts with all [ 134.370000][T10023] lo speed is unknown, defaulting to 1000 [ 134.583722][T10028] ./cgroup: Can't lookup blockdev [ 134.705926][T10037] bond5: (slave bond_slave_1): Device is not our slave [ 134.708194][T10037] bond5: option active_slave: invalid value (bond_slave_1) [ 134.711659][T10037] bond5 (unregistering): Released all slaves [ 134.863042][ T40] kauditd_printk_skb: 297 callbacks suppressed [ 134.863058][ T40] audit: type=1400 audit(1766171715.747:35542): avc: denied { create } for pid=10039 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.884543][ T40] audit: type=1400 audit(1766171715.777:35543): avc: denied { create } for pid=10044 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.893106][ T40] audit: type=1400 audit(1766171715.777:35544): avc: denied { bind } for pid=10044 comm="syz.2.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.901728][ T40] audit: type=1400 audit(1766171715.777:35545): avc: denied { node_bind } for pid=10044 comm="syz.2.1149" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 134.911784][ T40] audit: type=1400 audit(1766171715.777:35546): avc: denied { connect } for pid=10044 comm="syz.2.1149" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 134.920926][ T40] audit: type=1400 audit(1766171715.777:35547): avc: denied { ioctl } for pid=10044 comm="syz.2.1149" path="socket:[30989]" dev="sockfs" ino=30989 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.946392][ T40] audit: type=1400 audit(1766171715.837:35548): avc: denied { mount } for pid=10048 comm="syz.2.1150" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 134.955898][ T40] audit: type=1400 audit(1766171715.837:35549): avc: denied { map_create } for pid=10048 comm="syz.2.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 134.982064][ T40] audit: type=1400 audit(1766171715.867:35550): avc: denied { create } for pid=10050 comm="syz.2.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.991244][ T40] audit: type=1400 audit(1766171715.867:35551): avc: denied { write } for pid=10050 comm="syz.2.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.338868][T10057] sp0: Synchronizing with TNC [ 136.347549][T10054] [U] è [ 136.398221][ T9026] hid_parser_main: 73 callbacks suppressed [ 136.398233][ T9026] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 136.405378][ T9026] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 136.405616][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 136.434235][T10062] lo speed is unknown, defaulting to 1000 [ 136.470232][T10062] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.534572][T10073] overlayfs: failed to resolve './file1': -2 [ 136.618123][T10083] Invalid source name [ 136.619445][T10083] UBIFS error (pid: 10083): cannot open "/dev/sg0", error -22 [ 136.646662][T10089] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 136.678632][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 136.841690][T10116] usb usb8: usbfs: process 10116 (syz.3.1169) did not claim interface 0 before use [ 136.848352][T10116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.852338][T10116] overlayfs: failed lookup in lower (newroot/256, name='file0', err=-40): overlapping layers [ 136.863032][T10116] overlayfs: failed lookup in lower (newroot/256, name='file0', err=-40): overlapping layers [ 136.868036][T10119] overlayfs: failed lookup in lower (newroot/256, name='file0', err=-40): overlapping layers [ 136.938138][T10128] netlink: 'syz.3.1171': attribute type 10 has an invalid length. [ 136.940908][T10128] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 136.947513][T10128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.979190][T10133] random: crng reseeded on system resumption [ 137.098846][T10139] Restarting kernel threads ... [ 137.100748][T10139] Done restarting kernel threads. [ 137.227491][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 137.230419][T10153] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1178'. [ 137.238684][T10153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=10153 comm=syz.0.1178 [ 137.244340][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 137.247228][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 137.253325][T10153] netlink: 'syz.0.1178': attribute type 11 has an invalid length. [ 137.260314][T10153] netlink: 'syz.0.1178': attribute type 13 has an invalid length. [ 137.267886][T10153] netlink: 'syz.0.1178': attribute type 4 has an invalid length. [ 137.439268][T10169] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 137.450993][T10169] 9pnet_virtio: no channels available for device syz [ 137.454900][T10169] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 137.454929][T10170] netlink: 'syz.0.1181': attribute type 10 has an invalid length. [ 137.544580][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'. [ 137.556548][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.560226][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.572390][T10175] pvrusb2: Attempted to execute control transfer when device not ok [ 137.666181][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.814164][ T1418] ================================================================== [ 137.816684][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 137.818949][ T1418] Read of size 8 at addr ffff88805b8c9020 by task aoe_tx0/1418 [ 137.822107][ T1418] [ 137.823393][ T1418] CPU: 2 UID: 0 PID: 1418 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.823408][ T1418] Tainted: [L]=SOFTLOCKUP [ 137.823412][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.823419][ T1418] Call Trace: [ 137.823423][ T1418] [ 137.823427][ T1418] dump_stack_lvl+0x116/0x1f0 [ 137.823449][ T1418] print_report+0xcd/0x630 [ 137.823463][ T1418] ? __virt_addr_valid+0x81/0x610 [ 137.823473][ T1418] ? __phys_addr+0xe8/0x180 [ 137.823482][ T1418] ? handle_tx+0x5a5/0x630 [ 137.823496][ T1418] kasan_report+0xe0/0x110 [ 137.823509][ T1418] ? handle_tx+0x5a5/0x630 [ 137.823524][ T1418] handle_tx+0x5a5/0x630 [ 137.823541][ T1418] dev_hard_start_xmit+0x97/0x6e0 [ 137.823559][ T1418] __dev_queue_xmit+0x6d7/0x4650 [ 137.823575][ T1418] ? rcu_is_watching+0x12/0xc0 [ 137.823585][ T1418] ? finish_task_switch.isra.0+0x207/0xbd0 [ 137.823602][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 137.823632][ T1418] ? __lock_acquire+0x436/0x2890 [ 137.823644][ T1418] ? ref_tracker_free+0x37c/0x830 [ 137.823661][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 137.823677][ T1418] ? rcu_is_watching+0x12/0xc0 [ 137.823687][ T1418] tx+0xcc/0x190 [ 137.823699][ T1418] ? __pfx_tx+0x10/0x10 [ 137.823711][ T1418] kthread+0x1e4/0x3e0 [ 137.823721][ T1418] ? find_held_lock+0x2b/0x80 [ 137.823736][ T1418] ? __pfx_kthread+0x10/0x10 [ 137.823746][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 137.823763][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 137.823776][ T1418] ? __kthread_parkme+0x19e/0x250 [ 137.823786][ T1418] ? __pfx_kthread+0x10/0x10 [ 137.823796][ T1418] kthread+0x3c5/0x780 [ 137.823808][ T1418] ? __pfx_kthread+0x10/0x10 [ 137.823820][ T1418] ? rcu_is_watching+0x12/0xc0 [ 137.823829][ T1418] ? __pfx_kthread+0x10/0x10 [ 137.823840][ T1418] ret_from_fork+0x983/0xb10 [ 137.823851][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 137.823863][ T1418] ? __switch_to+0x7af/0x10d0 [ 137.823876][ T1418] ? __pfx_kthread+0x10/0x10 [ 137.823888][ T1418] ret_from_fork_asm+0x1a/0x30 [ 137.823906][ T1418] [ 137.823909][ T1418] [ 137.889033][ T1418] Allocated by task 10133: [ 137.890696][ T1418] kasan_save_stack+0x33/0x60 [ 137.892223][ T1418] kasan_save_track+0x14/0x30 [ 137.893927][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 137.895807][ T1418] alloc_tty_struct+0x96/0x8c0 [ 137.897765][ T1418] tty_init_dev.part.0+0x1e/0x500 [ 137.899840][ T1418] tty_open+0xa4f/0xf90 [ 137.901536][ T1418] chrdev_open+0x234/0x6a0 [ 137.903363][ T1418] do_dentry_open+0x748/0x1590 [ 137.905351][ T1418] vfs_open+0x82/0x3f0 [ 137.907028][ T1418] path_openat+0x2078/0x3140 [ 137.908926][ T1418] do_filp_open+0x20b/0x470 [ 137.910782][ T1418] do_sys_openat2+0x121/0x290 [ 137.912753][ T1418] __x64_sys_openat+0x174/0x210 [ 137.914843][ T1418] do_syscall_64+0xcd/0xf80 [ 137.916603][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.919030][ T1418] [ 137.919964][ T1418] Freed by task 29: [ 137.921307][ T1418] kasan_save_stack+0x33/0x60 [ 137.923198][ T1418] kasan_save_track+0x14/0x30 [ 137.925160][ T1418] kasan_save_free_info+0x3b/0x60 [ 137.927216][ T1418] __kasan_slab_free+0x5f/0x80 [ 137.929230][ T1418] kfree+0x2f8/0x6e0 [ 137.930876][ T1418] process_one_work+0x9ba/0x1b20 [ 137.932984][ T1418] worker_thread+0x6c8/0xf10 [ 137.934897][ T1418] kthread+0x3c5/0x780 [ 137.936607][ T1418] ret_from_fork+0x983/0xb10 [ 137.938584][ T1418] ret_from_fork_asm+0x1a/0x30 [ 137.940694][ T1418] [ 137.941756][ T1418] Last potentially related work creation: [ 137.944216][ T1418] kasan_save_stack+0x33/0x60 [ 137.946263][ T1418] kasan_record_aux_stack+0xa7/0xc0 [ 137.948491][ T1418] insert_work+0x36/0x230 [ 137.950305][ T1418] __queue_work+0x94f/0x10e0 [ 137.952210][ T1418] queue_work_on+0x1a4/0x1f0 [ 137.954176][ T1418] release_tty+0x4de/0x5d0 [ 137.956019][ T1418] tty_release_struct+0xb7/0xe0 [ 137.957785][ T1418] tty_release+0xe2d/0x1470 [ 137.959256][ T1418] __fput+0x402/0xb70 [ 137.960553][ T1418] task_work_run+0x150/0x240 [ 137.962030][ T1418] exit_to_user_mode_loop+0xfb/0x540 [ 137.963713][ T1418] do_syscall_64+0x4ee/0xf80 [ 137.965253][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.967132][ T1418] [ 137.967926][ T1418] The buggy address belongs to the object at ffff88805b8c9000 [ 137.967926][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 137.972392][ T1418] The buggy address is located 32 bytes inside of [ 137.972392][ T1418] freed 2048-byte region [ffff88805b8c9000, ffff88805b8c9800) [ 137.976683][ T1418] [ 137.977462][ T1418] The buggy address belongs to the physical page: [ 137.979503][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b8c8 [ 137.982239][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.984929][ T1418] memcg:ffff888036d1f681 [ 137.986283][ T1418] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 137.988674][ T1418] page_type: f5(slab) [ 137.989944][ T1418] raw: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 137.992640][ T1418] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888036d1f681 [ 137.995400][ T1418] head: 00fff00000000040 ffff88801b44c140 dead000000000100 dead000000000122 [ 137.998140][ T1418] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888036d1f681 [ 138.000879][ T1418] head: 00fff00000000003 ffffea00016e3201 00000000ffffffff 00000000ffffffff [ 138.003591][ T1418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 138.006357][ T1418] page dumped because: kasan: bad access detected [ 138.008400][ T1418] page_owner tracks the page as allocated [ 138.010242][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5928, tgid 5928 (syz-executor), ts 101887738176, free_ts 101794775797 [ 138.016971][ T1418] post_alloc_hook+0x1af/0x220 [ 138.018503][ T1418] get_page_from_freelist+0xd0b/0x31a0 [ 138.020269][ T1418] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 138.022153][ T1418] alloc_pages_mpol+0x1fb/0x550 [ 138.023701][ T1418] new_slab+0x2c3/0x430 [ 138.025202][ T1418] ___slab_alloc+0xe18/0x1c90 [ 138.027061][ T1418] __slab_alloc.constprop.0+0x63/0x110 [ 138.029337][ T1418] __kvmalloc_node_noprof+0x592/0xa40 [ 138.031579][ T1418] alloc_fdtable+0x110/0x2d0 [ 138.033575][ T1418] dup_fd+0x803/0xc70 [ 138.035252][ T1418] copy_process+0x255d/0x7430 [ 138.037219][ T1418] kernel_clone+0xfc/0x910 [ 138.039108][ T1418] __do_sys_clone+0xce/0x120 [ 138.041085][ T1418] do_syscall_64+0xcd/0xf80 [ 138.043032][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.045558][ T1418] page last free pid 7890 tgid 7890 stack trace: [ 138.048232][ T1418] __free_frozen_pages+0x7df/0x1170 [ 138.050446][ T1418] __put_partials+0x130/0x170 [ 138.052474][ T1418] qlist_free_all+0x4c/0xf0 [ 138.054334][ T1418] kasan_quarantine_reduce+0x195/0x1e0 [ 138.056608][ T1418] __kasan_slab_alloc+0x69/0x90 [ 138.058640][ T1418] __kmalloc_noprof+0x2f6/0x910 [ 138.060726][ T1418] security_inode_init_security+0x113/0x370 [ 138.063205][ T1418] shmem_mknod+0x229/0x3b0 [ 138.065080][ T1418] lookup_open.isra.0+0x12dc/0x1780 [ 138.067239][ T1418] path_openat+0xa95/0x3140 [ 138.069138][ T1418] do_filp_open+0x20b/0x470 [ 138.071075][ T1418] do_sys_openat2+0x121/0x290 [ 138.073072][ T1418] __x64_sys_openat+0x174/0x210 [ 138.075061][ T1418] do_syscall_64+0xcd/0xf80 [ 138.076830][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.079277][ T1418] [ 138.080322][ T1418] Memory state around the buggy address: [ 138.082655][ T1418] ffff88805b8c8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 138.085918][ T1418] ffff88805b8c8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 138.089267][ T1418] >ffff88805b8c9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.092604][ T1418] ^ [ 138.094707][ T1418] ffff88805b8c9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.098083][ T1418] ffff88805b8c9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 138.101375][ T1418] ================================================================== [ 138.104825][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 138.107785][ T1418] CPU: 2 UID: 0 PID: 1418 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.111259][ T1418] Tainted: [L]=SOFTLOCKUP [ 138.112650][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 138.115926][ T1418] Call Trace: [ 138.116974][ T1418] [ 138.117951][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 138.119473][ T1418] vpanic+0x640/0x6f0 [ 138.120757][ T1418] panic+0xca/0xd0 [ 138.121968][ T1418] ? __pfx_panic+0x10/0x10 [ 138.123378][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 138.124987][ T1418] check_panic_on_warn+0xab/0xb0 [ 138.126542][ T1418] end_report+0x107/0x160 [ 138.127960][ T1418] kasan_report+0xee/0x110 [ 138.129384][ T1418] ? handle_tx+0x5a5/0x630 [ 138.130805][ T1418] handle_tx+0x5a5/0x630 [ 138.132207][ T1418] dev_hard_start_xmit+0x97/0x6e0 [ 138.133802][ T1418] __dev_queue_xmit+0x6d7/0x4650 [ 138.135368][ T1418] ? rcu_is_watching+0x12/0xc0 [ 138.136888][ T1418] ? finish_task_switch.isra.0+0x207/0xbd0 [ 138.138746][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 138.140451][ T1418] ? __lock_acquire+0x436/0x2890 [ 138.142046][ T1418] ? ref_tracker_free+0x37c/0x830 [ 138.143634][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 138.145237][ T1418] ? rcu_is_watching+0x12/0xc0 [ 138.146856][ T1418] tx+0xcc/0x190 [ 138.148329][ T1418] ? __pfx_tx+0x10/0x10 [ 138.150050][ T1418] kthread+0x1e4/0x3e0 [ 138.151706][ T1418] ? find_held_lock+0x2b/0x80 [ 138.153650][ T1418] ? __pfx_kthread+0x10/0x10 [ 138.155522][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 138.157947][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 138.160084][ T1418] ? __kthread_parkme+0x19e/0x250 [ 138.161738][ T1418] ? __pfx_kthread+0x10/0x10 [ 138.163203][ T1418] kthread+0x3c5/0x780 [ 138.164510][ T1418] ? __pfx_kthread+0x10/0x10 [ 138.165969][ T1418] ? rcu_is_watching+0x12/0xc0 [ 138.167481][ T1418] ? __pfx_kthread+0x10/0x10 [ 138.169010][ T1418] ret_from_fork+0x983/0xb10 [ 138.170457][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 138.172156][ T1418] ? __switch_to+0x7af/0x10d0 [ 138.173642][ T1418] ? __pfx_kthread+0x10/0x10 [ 138.175081][ T1418] ret_from_fork_asm+0x1a/0x30 [ 138.176604][ T1418] [ 138.178293][ T1418] Kernel Offset: disabled [ 138.179682][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:15:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff88802ed8a4c0 RSI=ffffffff816bdc71 RDI=ffffffff8bf2b380 RBP=ffff888035bb4540 RSP=ffffc90001aef628 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9088b3d7 R11=ffff88802ed8aff0 R12=0000000000000003 R13=0000000000000003 R14=ffff88806a43bbc0 R15=ffffed1006b768a8 RIP=ffffffff8b77fdcf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3e7a37 CR3=00000000345dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d015050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d01505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d015057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d01506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d0150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d0151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d1ba4a8 00007f3f0d1ba4a0 00007f3f0d1ba498 00007f3f0d1ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0dd1d100 00007f3f0d1ba460 00007f3f0d1b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f0d1ba4b8 00007f3f0d1ba4b0 00007f3f0d1ba4a8 00007f3f0d1ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00d1bcd072e29351 69f7dfd3c9215e24 89959e8d00d74094 1cb9ce4303cfec23 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 426009aa4fa03e73 3f71d4f5a8bc0d79 5afa4cfe03a32844 a07bacae0d3e08c4 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f7c86bcd9606d28b c10f7b01a656a380 9c137696d9f5063d e31c37afe3a5bbe6 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e1f840b29272060 a36600cb27762b75 12eaf3eeb9fff425 a54c36f7a9ab049b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=00000000001085b9 RDX=0000000000000000 RSI=0000000000000201 RDI=ffff888033dd39e0 RBP=ffff888033dd24c0 RSP=ffffc900032279d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=ffff888033dd2ff0 R12=ffff88803b6c01c8 R13=0000000000000040 R14=ffffc90003227a78 R15=0000000000000000 RIP=ffffffff817dc870 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557e0f2500 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8d38983d58 CR3=00000000266c0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557e1199e7 000055557e119740 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f407a1bad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557e11edea 000055557e1199f0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557e105678 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 dffbc9bbcb30bc0e 357de01796cba89a 532fc16310e037eb a94c2179f571ab64 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000890030fffffff ffffff0408800300 0800061000201000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf00134000002cc7 3c51bc48c228080b 80030b8004078003 07800408a0030008 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101a01000088004 0100000408060601 68e000080008e003 00100008d0030010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008c00302100008 b003581000079003 8001000480040018 801a000c00000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000028080bb0 030100000208060b a8031e0000000000 04cf00134000002c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c73c51bc48c22808 0b80030b80040780 0307800408a00300 08000890030fffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0606017688018010 0008800401000002 080606015dbe0480 8681a0080008e003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666666666666660a 343430315f6f666e 69646f6d5f44495f 455551494e555f5f ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6f666e69646f6d 5f44495f45555149 4e555f5f20722063 3731633533623966 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 455551494e555f5f 2072206661316335 3362396666666666 6666660a33343031 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f455551494e555f 5f20722065373264 3533623966666666 666666660a313539 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2065623264353362 3966666666666666 660a3035395f6f66 6e69646f6d5f4449 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6666666666660a39 34395f6f666e6964 6f6d5f44495f4555 51494e555f5f2072 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f666e69646f6d5f 44495f455551494e 555f5f2072206566 3264353362396666 info registers vcpu 2 CPU#2 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85326665 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000746f3d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=000000000000005b R14=ffffffff9aeedbc0 R15=ffffffff85326600 RIP=ffffffff8532668f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055557740d808 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5d525470 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d37c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d37c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d37c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d37c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d37c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d37c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000000 RBX=000000000000008f RCX=ffffffff821f6da8 RDX=ffff8880314524c0 RSI=ffffffff821f6db6 RDI=0000000000000007 RBP=ffffea000131a580 RSP=ffffc90005d1f2a8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffff888031452ff0 R12=dffffc0000000000 R13=ffff888037e3f488 R14=ffffea000131a580 R15=0000000000000000 RIP=ffffffff81bee6a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8d37b73460 CR3=00000000345dd000 CR4=00352ef0 DR0=0000000000800003 DR1=00000000000001f5 DR2=0000000000000483 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000004 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055b177cf0600 000055b177cf0600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffff2411c70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e726562696820 3a4d50205d323331 3031545b5d323838 3730382e37333120 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 383731312e302e7a 79733d6d6d6f6320 33353130313d6469 702074656b636f73 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f6574756f725f6b 6e696c74656e3d73 73616c6373203430 33323d657079745f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67736d6c6e20303d 6c6f636f746f7270 203a656761737365 6d206b6e696c7465 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2064657a696e67 6f6365726e75203a 78756e694c455320 5d3335313031545b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000