last executing test programs: 17.449816007s ago: executing program 2 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x1215040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2001000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 17.399479869s ago: executing program 2 (id=654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0f02b, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000080000000006bd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="40004e060a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x44) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="5bf25e0eb0cae5d22ffb1f476e8703430a7e53eb02f2e944bcb55b90dc9e4aa505c5c86093c0c0018faec4982f2339", 0x2f}], 0x1, &(0x7f00000003c0)=[{0x50, 0x0, 0x1, "64942d9f9f882ab8194421a92c6f0ce90f5aa89f8fff8682cfcfecce51189ae94ec1372490329613376f51d39ce85f02d93f70423db88b3531b5889ee0df77"}, {0x50, 0xff, 0xf, "f2f7cdef50f8db0356f5d76cb7ebdde1d7f1805b00d7597d3168673999d2a6493ea7aa65231b11770de67b9b1a2b516099977c8d8ac03af4d4"}], 0xa0}, 0x800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000180)=@arm64={0x9, 0x3, 0x5, '\x00', 0x8}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xf, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20004080) 17.03210648s ago: executing program 2 (id=658): r0 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/184) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x500) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x1, 0x7, 0x1, 0x3ad30076, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, {[@noop, @timestamp_addr={0x44, 0x14, 0x53, 0x1, 0x7, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0xfffffffe}]}, @ra={0x94, 0x4}, @generic={0x82, 0x10, "c6c3e99079790e540ca0a958d10f"}, @end]}}}}}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @private=0xa010101, r2}, 0xc) 17.030177744s ago: executing program 2 (id=659): getrusage(0x1, &(0x7f0000000340)) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) (async) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000004c0)=@multiplanar_overlay={0x2, 0x2, 0x4, 0x80, 0x1, {0x0, 0x2710}, {0x0, 0xc, 0x1, 0x1, 0x98, 0xd, "0ba02d7a"}, 0x2, 0x3, {&(0x7f0000000400)=[{0x80000001, 0xb, {0xfffffffb}, 0x6}, {0x481, 0xfffffffe, {0x1}}]}, 0x9, 0x0, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x20044800) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r6, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x20001000) (async) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '\x00', 0x0, 0x32, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @mcast2}}}}, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x57ee}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 16.960489243s ago: executing program 2 (id=660): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x8000, 0xffbcfb22aacb2427) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, 0x0, &(0x7f0000000140)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={r1, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000020500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04140606"], 0x9) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchown(r3, 0x0, 0x0) syz_usbip_server_init(0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 16.643775664s ago: executing program 2 (id=666): syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x167e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000140)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random='\x00\x00\x00\b\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x700, 0xa3, 0x6, 0x0, @remote, @loopback}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x4000}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltaction={0x24, 0x31, 0x38ac2e76ffe355d7, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x90) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) 16.603990497s ago: executing program 32 (id=666): syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x167e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000140)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) syz_clone3(&(0x7f0000000540)={0x200103000, &(0x7f0000000140), 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random='\x00\x00\x00\b\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x700, 0xa3, 0x6, 0x0, @remote, @loopback}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1, 0x0, 0x4000}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@deltaction={0x24, 0x31, 0x38ac2e76ffe355d7, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x90) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)) 5.344378912s ago: executing program 3 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=@polexpire={0xd0, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@private2, @in6=@private2, 0x4e21, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x120, 0x21, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x6, 0x8000000000000001, 0x3, 0x8, 0x10007}, {0x3e47332a, 0x4c67, 0x9, 0x449f}, 0x48, 0x0, 0x2, 0x0, 0x2, 0x1}, 0x10}, [@replay_val={0x10, 0xa, {0x70bd29, 0x70bd29}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000300)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e643000000000000000000000001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004084}, 0x100) 4.778244333s ago: executing program 1 (id=879): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGPHYS(r2, 0x4008c001, &(0x7f0000000800)) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.335854217s ago: executing program 1 (id=892): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xffffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x8, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x5, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket(0xa, 0x5, 0x35400000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x6, 0x5}) 1.495515628s ago: executing program 1 (id=904): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x6001, 0x1, @loopback, 0x43}, 0x1c) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd755, 0x80c00) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x7fff, 0x1, 0x3, 0xd59f80, 0xb488ab32, 0x7, 0x19ef, 0x3, 0x6, 0x8027ff, 0x2800, 0x101, 0xbb6, 0x9, 0x0, {0x8, 0xfffffffb}, 0xd0, 0xc}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0xc, 0xfb, 0x8, @local, @local, 0x40, 0x1, 0x13a, 0x20000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x700, 0x1, 0xfffffffa, 0x6, {{0x4c, 0x4, 0x0, 0x3, 0x130, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0x98, [@multicast2, @multicast1]}, @timestamp_addr={0x44, 0x4c, 0xd3, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@private=0xa010100}, {@multicast1, 0x7ff}, {@multicast1, 0x80}, {@loopback, 0x9}, {@empty, 0x3ff}, {@local, 0x2c46eb0b}, {@multicast1}, {@multicast1, 0x5}]}, @lsrr={0x83, 0x23, 0xad, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @private=0xa010101, @multicast1, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x22}]}, @timestamp_addr={0x44, 0x1c, 0x69, 0x1, 0x2, [{@rand_addr=0x64010102, 0x8001}, {@loopback, 0xb20}, {@loopback, 0xe34}]}, @timestamp_prespec={0x44, 0x54, 0x55, 0x3, 0x2, [{@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010102, 0x7}, {@local, 0x89}, {@broadcast, 0x2}, {@multicast1, 0x1}, {@multicast1, 0xb}, {@multicast1, 0x401}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x74}, {@broadcast, 0x800}, {@multicast1, 0x8}]}, @timestamp={0x44, 0x10, 0xd9, 0x0, 0x2, [0x7, 0x4, 0x2]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0x8, [{@empty, 0x6}]}, @timestamp_addr={0x44, 0x14, 0x36, 0x1, 0x3, [{@local, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xb4, 0x8, 0xa, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x1, 0x7, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x4, 0xb, 0x81, 0x9, 0x1d, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x1, 0xfffffff7, 0xffff}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x58, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x17, 0xfffffff9, {{0x26, 0x4, 0x0, 0x18, 0x98, 0x66, 0x0, 0x5, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x1f, 0x44, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @rand_addr=0x64010100, @remote, @broadcast]}, @generic={0x88, 0x5, "9588d0"}, @end, @noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x21, 0x0, 0x4, [0x2, 0x4, 0x3bc5]}, @timestamp_prespec={0x44, 0x34, 0xd5, 0x3, 0x1, [{@empty, 0x1}, {@multicast1, 0xa}, {@remote, 0x9}, {@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x9}, {@multicast2, 0x94}]}, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x3, [{@broadcast, 0x6}, {@empty, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x7, 0x60e, {{0x21, 0x4, 0x3, 0x6, 0x84, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x8, "2b613aaf92ae"}, @rr={0x7, 0x2b, 0xa4, [@local, @remote, @remote, @private=0xa010102, @local, @local, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010100]}, @noop, @ssrr={0x89, 0x1f, 0xc2, [@dev={0xac, 0x14, 0x14, 0x39}, @local, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1}, @private=0xa010101, @remote]}, @rr={0x7, 0x1b, 0x81, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010101, @broadcast, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x5, 0x7, 0x4d, @dev={0xfe, 0x80, '\x00', 0x40}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x7800, 0x8, 0x9}}) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r16, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x44, 0x18, 0x1, 0x1000000, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r17}, @CGW_SRC_IF={0x8, 0x9, r18}, @CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x0, 0x3, 0x0, 0x0, "4505a8b9e859abc0"}, 0x1}}, @CGW_MOD_UID={0x8, 0xe, r19}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c00)={0x400, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0xd, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x462}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x400}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xc}, 0x0) r20 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r20, 0x400452c8, &(0x7f0000000100)) r21 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r21, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 1.419265039s ago: executing program 4 (id=907): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001900010028bd7000000000000a140000000000020024000008001e000000000008000400", @ANYRES32=0x0, @ANYBLOB="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"], 0x2c}}, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYRES32=r4], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x9, 0xffffff61}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x64}}, 0x404c004) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000007c0)={0x14, 0x24, 0x1, 0x70ad26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="96a971ccc236ac5733ec4236a7aa22c49c8a6d02bac854e6416658b122bb4e3e610da35483e7abde302a38b01d39a195bbaef582d383a7946db19d28b4f1e3a5153a392128ecd1a255d99336e4000ead5ebff0fb5cc317ad6ddeb04e83538b83b72054a15f2a51c79f4070d7f3951281b3cc2540e36e877e2d119be0725027085ed12174de71224dc97021175716d98f0f03409b21f591aa49a6a40dfcf82b6e96a073faccf58b86fedcde50607643c85c0d997698a9c9", 0xb7}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1178}, 0x4040042) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20680, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000300)={'dt2815\x00', [0x4f27, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x80008, 0xe, 0x6, 0x2, 0x1, 0x7, 0x1, 0x6, 0x1000, 0xb2, 0x1a44d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe69, 0x3c, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 1.360187449s ago: executing program 1 (id=908): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000540)={{0x1, 0x3, 0x5, 0x80000000, 'syz0\x00', 0x9}, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x2, 0x6, 'syz1\x00', &(0x7f0000000440)=[':\\\\\x00', '&\x00'], 0x6}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000280)) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@delqdisc={0x110, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0x6}, {0x4, 0xa}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd7c8, 0x9, 0x401, 0x5, 0x1ef}, 0x3d6, 0x1, 0xc, 0xfff, 0x6, 0x14, 0x1a, 0x0, 0x1, 0x8, {0x1, 0xfffffffb, 0x101, 0x20000000, 0x43b9, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x9, 0x20000006, 0x0, 0xfd53, 0x9, 0x5}}, {0xe, 0x2, [0x400, 0x5, 0x1ec, 0xa210, 0x1]}}, {{0x1c, 0x1, {0x3, 0x42, 0x4, 0x2, 0x2, 0x5, 0x9, 0x6}}, {0x10, 0x2, [0xc, 0x2, 0x6, 0x0, 0x44, 0x9]}}, {{0x1c, 0x1, {0x3, 0x70, 0x7, 0x3, 0x0, 0x10000, 0xd196, 0x6}}, {0x10, 0x2, [0x0, 0x2, 0x4, 0x659b, 0x6, 0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x32}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000080}, 0x44054) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.359906433s ago: executing program 4 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.289087844s ago: executing program 1 (id=910): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x9, 0x100) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) keyctl$session_to_parent(0x12) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x2) 1.288089049s ago: executing program 4 (id=911): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x98, 0x0, 0x168, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xff, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @loopback, 0x0, 0x0, 'lo\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000480)={0x3, 0x6, 0x9}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) lseek(r3, 0x400003, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626", 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000500)=ANY=[], 0x10) syz_clone(0x81080000, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) getdents(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd59d}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x4048840) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x10, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000001c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffd8e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) 1.2090313s ago: executing program 4 (id=912): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x480801, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/214, 0xd6}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/132, 0x84}], 0x4) syz_emit_ethernet(0x136, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x100, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1b, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601a0b0e6a4c3111b910f0173045fa2141e5b4595c5c99a9e655650a618f1e1b87d92c6bdc8822504781c5a026526818ceac3312187ff298ddd0b51e329a0555c732fabd5572626bc738bf5440cf57f442ac9bd7656e69c22df50f22d2bbe513c01be63f88b0536f418ebe0bf8f7e1c7ec73cf47ec436ed1d6060a46f881e8d701f56440e5259da2369e350ab54d342e18ac1fc323c56eee2eef13fd238914de7816db149570fe8ec5a49f055ba6a24df8c00000000"}]}}}}}}, 0x0) 1.207671797s ago: executing program 1 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4040080) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x58, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000007}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000004}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0xfffeffff, 0x58000, 0xe, 0x9, 0x7f, 0x80, 0xfb, 0x6, 0x0, 0xfa, 0xe, 0x3}, {0xd000, 0x10000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x7f, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x10, 0x81, 0x9, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xe, 0x9, 0x1, 0x40, 0x2, 0x6, 0xfd, 0x29, 0x9, 0x9}, {0xffff1000, 0x7000, 0xe, 0x9, 0x5, 0x1, 0x3, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x3000, 0xffffffff, 0x8, 0x2, 0xad, 0x8, 0x5, 0x5, 0x1, 0xf, 0x6, 0xa}, {0x10000, 0xf000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x0, 0x6, 0xff, 0x6}, {0x9000, 0x6c881088738e8abb, 0xd, 0xe, 0x17, 0x3d, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0xeeef0000, 0xc800}, {0x80a0000, 0x4}, 0xe0000025, 0x0, 0x6000, 0x203, 0x5, 0xa800, 0xffff1000, 0x1, [0x6, 0x4, 0x3, 0x3]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r8, 0x0) write$char_usb(r7, &(0x7f0000006800)="10", 0x1) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r11, 0x1, 0x2070bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f5ff6ef251eea1728223a77bdf"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000) 1.206841955s ago: executing program 4 (id=914): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x0', @ANYRESDEC]) write$UHID_INPUT(r1, &(0x7f00000021c0)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f36006e090890e0878f0e1ac6e7049b3341959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb7ec308320215afcdf190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c8e68ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1e5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d44300000000db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5e10e0513005000000000000003911fab964c2aabb85fd697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x576) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$inet_sctp(r4, &(0x7f0000002140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}], 0x1, 0x4088010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x9ee, 0x7ac, 0x8, 0x8, 0x100, 0xfffffffffffffffd, 0x100fff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) socket(0x10, 0x2, 0x0) 1.097808156s ago: executing program 3 (id=915): sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@delneigh={0x54, 0x1d, 0x100, 0x70bd26, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x2, 0x80, 0x6}, [@NDA_IFINDEX={0x8}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_NH_ID={0x8, 0xd, 0x80000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) (async) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000180)=0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x52}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "66957cbf90bd528f97d327c449653346"}, @NL80211_ATTR_SSID={0x19, 0x34, @random="e8d7a13fc3259f7912d3cb9cbdf2f56b2cbc1564f5"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4aed4a8411d4"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x17}, @NL80211_ATTR_PMKID={0x14, 0x55, "753654c98e2ca34ca110cbe104549984"}]}, 0x78}, 0x1, 0x0, 0x0, 0x82}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x31}, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000080}, 0x800) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@supported_rates={0x1, 0x1, [{0x9, 0x1}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0x40}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="403724d49284"}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x6) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x74}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x42884) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8001) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x24}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff67a5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) (async, rerun: 32) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000a40)={{}, [@remote, @rose, @default, @remote, @default, @rose, @bcast]}, &(0x7f0000000ac0)=0x48, 0x800) (async, rerun: 32) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000b00)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000b40)=r5) close_range(r0, r1, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8e, 0x40}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) (rerun: 32) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000d40)='veth0_to_bond\x00') (async, rerun: 32) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) (rerun: 32) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000001000)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x160, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x160}, 0x1, 0x0, 0x0, 0x140}, 0x80) (async, rerun: 32) sendto(r0, &(0x7f0000001040)="f611e215d6ece9c89248172c5ebe883bd29135c106f29aca2f223438f97950f65f122a4c1a1de38ae2cccdc57728e856564607011df2916604c053371fb50052fd53604e8aa947fc1f38c6befd08a6f8ecafed36a36ddd034fc6f9d2215320c2702d8ae9a55bad14dd9f29f1496e71b6d1e928c0088ee42cec02796026bc5df871f0405c6fa1c82c2d355dd909f3f2315c9177095f6d44747e79175c2d7793453befc68fd54848b4bcdf22520ff3512d56a9", 0xb2, 0x0, &(0x7f0000001100)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x80) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan0\x00'}) (async) ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000001280)={0x2, 0x3, 0x1, 0x0, 0x0, 0x9, 0x0, &(0x7f00000011c0)=[{0x13, 0x1ff, 0x6}, {0x15, 0x1ff, 0x787a}, {0xe, 0x101, 0x7f}, {0x14, 0xfe, 0x8}, {0x10, 0xfe, 0x3}, {0x2f, 0x1ff, 0x1}, {0x1b, 0x1ff, 0x1ff}, {0x12, 0x1ff}, {0x6, 0x101, 0x6}]}) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x2) (async, rerun: 32) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000012c0), &(0x7f0000001300)=0x40) (rerun: 32) 1.097279908s ago: executing program 3 (id=916): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) 965.735103ms ago: executing program 3 (id=917): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0xa, 0x5, &(0x7f0000000100)={0xb, "b6f5eac76e436afb93e063ed9db4f9bf42fd27e6a154034b28a38d7b6ef7ffe7e6"}}) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x10, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x12021, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000040)={r3, 0x1}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1000000, @loopback}, 0x1c) 963.658159ms ago: executing program 4 (id=918): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x0, 0x8, 0x62, {0x62, 0xf, "dc555ab11f31fbfb2906ad7c6026092a0bf20d62f18ec931751d2fdb41a7a512046ee898b437096802377a75f0dfac3d23107c50dadfa46dcd5060c6592b74096237722ed30a09160d2e7bb5e3a951d3ab69a0550740a18fd32147acdf6cf86b"}}, &(0x7f0000000180)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "9eb5fcf4dd2f5edfcd42a05d3027961c4b93d06ccd2dffaa2e247a0f229dcad810c3ebf43140a9aa135d2b"}}, &(0x7f00000001c0)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x9, "91320a38"}, @local=@item_4={0x3, 0x2, 0x3, "ceea8766"}, @main=@item_4={0x3, 0x0, 0xc, "c6002bcd"}, @local=@item_012={0x2, 0x2, 0x4, "34ba"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x1, 0x1, {0x22, 0xf18}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x20, 0x0, 0xfc, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0xa4, "5aa15412836b3d231fcb07845f0de0c82649a3f36f5addc0735a5d023a9d0b7e489137124abc6434f38a149cf4bf23e9679cd7b2335069374a8f36712618550850c2f4515270f87fa1c197acf443b366dc5045b12bfbf445b8aa5df8464c6d3e3ba61b5abb257546b72b62ae671b663d62a56dda87b152311b8b51f9e5cab2d20172e54c79005134e4a713c270ec47922d92d6446b74538b2c5cb39fd01c42abac730f54"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xd4}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1f8, 0x20a, 0x278, 0x1f8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x5}, {0xffffffffffffffff, 0x7, 0x4}, {0x1, 0x0, 0x5}, 0xfbfb, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r3, 0x29, 0x4e, 0x0, 0x3a) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x202001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 906.137852ms ago: executing program 3 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x4000) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f0000000080)={0x9, 0x0, 0x2019, 0x2, 0x0, {0x2, 0x4}, 0x1}) r6 = socket$rds(0x15, 0x5, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x2, 0x2, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x10002, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x3) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002d80)={r6, &(0x7f0000001d40)="49aca7c27357165428a0d20d98eed19ab69f50d3fec52e4a82dea174e819434c0578de9d332e47361078157542004acb1b8a47e0c7e2a578589a8a8e8c48b5c8b2a81d857dda3ebb53795343dac4e9a7757c47468778d47437472f22e5a73d9d5e30700bdce57bb316e4d7b67641d09db8b31bec3096981069f12a99db3169c1b856816b9877696e9769bba71235f3bedeb5374cd99f433926db1066e547a3443b00bf2a44c804a07d9e84cc681c4706461fbdfded033c88a014d7e9c4bc93df9a13e7c516b1f4fb752e29f41284173945598dfc940a73b349f822ddba6181d1db2ac7ae3a87acea417e6dc97030d8b1c45c07236fdda245866847923acd2b2e0b621b91d264cb93a650090158f066192fb5646be72da023524b1705047e4fcda9099a981268c625c861f1cb2e63fc4d0e46c24cf9652e84d2fb0176f0423e079f96c50a0e293b563e367784490154ca224c26106c9b6c96542b2ce6f151ba6836c44229e68986a8c879afded6a09344b5764fea1ab8ae563201a706dbcd995740b8d6322cd3244d901374f4dcf21dee3c99beb3a57920647c982aa9ebb65460cdc933e42f914daa50a0dfaa94824a3e326ac36ebb07c2da9a84ad6ccae8346c26ae64a7ae953838ca449f2710f8b322b6a11c2a6e49a007ed64469ab97fc0d74aea2fa0a2dbf9ff524a494998988545f64f3f0a3799458747dffd92904d2945cb9f93debd6d8e25b93d410b1f701864746bf9bb1544df7f65f6c48e9d7b4bdc6c6d377ddf2a7fc0c78c9238e6da140b84f836a504f0bcc0876c6cbd3ce99a01d9ca83f292bdac41ceae96c9a01573967316cc180b5509ab5fdfb17654d8049d76ca0e9a6882ef94362739c4d4c2eb7008879841ef15d4088669ed97f819ec98bc9414831862efbfce4777ea072699b5e288989e14d14b7de81aa2013c92bad096591f3b8de43573ddcfdb056dd45dc9dd1410ba5d030585f280c3c452d220a96fa375a05336bbd9be723a24ad9a86ec20419a953e47a5a22af4dd7a5979b96c79380db4a2d8b73771a90b59cfac3d9f8c8136083fe6151fdb62b12f913cddc146b57a83d33c39c226ccac66afd7547065889c81e2f9f62e39902605c7b34fb2785c30106c094054ae8eebd712b5b49136fa6acc8753ddc9b8ea694d9a68abf0364ba7702cb1dafd3ef435dcee159a5e5ee1eef3cf350333aa1540d196cb437ef98fa79e7dd6e9affb69e00a66bbf23453da35f6c709a541df4d2c3d42248f957aa220aaa9b53a9d6977351cfaf567fbdf7fe10de846e6c1bacfbe682c452e394ba892a7c74f2789b35f9eeb02915cdd1cbd6a8cd7f97a8a9f09b5cd56283c948e203df644e3abceffa15e9965e516d620be8d9058028ceedb667815f247f2c7a5f674c768629535b59ee9ba6d7667f60637ebb22ec33c34d09c52f610240d0a68bf6666998d9066c0ba0d45b2dc7b0f2c0924358b9516d447d438764ee3437a1fca304b161b31c073d8b837fd7bd6065494879f590c112eb8f429a456d38cfe7b659a0da880533014023402e620ada2407556df09723922dd3c87c62a185b66fdf1c0ab615d5abc70eb216041af30b7e9f24abce25c564ea6c0f77d85b2985fa28a57152147c96dce728612185730148db048259a6575c20ad535720695f641c6627174cb9588b57051995e7da0dba24f17c09dfcd1fa876865d5f3c4072ed3a82b57d30ec78eb1b1d8ce8a8f4298451b26622c0b19eb3238ec3857b3517ed36a3541a6f248c15b3653507f3c8bfcd44f3e948899b4e07d4f57a0264d2847fe502573799663361a03aca1bfca6eedeb1f787ac3699f1283e6837f5f18d286eab2a1a9776c466fd54681f8e511d5d063bcb95f6e93bbbd5bb5515211b0b7e74f3e61492978114483d7c34ef95194721880b26edaf3bda02e92c532c53fc3e2f458baf9291b43345fee89a2369e7e88c0ee9a72a2a5578c934c97f1e8149161a9141a03b6c622b104dd91970a333943ce590c57df68ff11825838c0217bc348665f342074d67563b4b640b22388a1f45422b45541a9cec832cbb122302ac11ed531f6b63e74e681f6f0496f3caeb63c82adde221fdcb4086dffde1611ae1fd713e83bd10be146b654aa6e09334c1b4d5d524b4329edd9097c2af4bb7dc46ac4487ce2e55cd7c03e93dded43a3b7aa0663bbbab14a7211edd624b979f7e707027c0c5c6fbea6156e1124451de4452fa8a7a840320279f8354a3bbf97ea2c039c755a3081c8d128f072fa9e0cc08818aeee872a1377ecb445141f29ba5e1d5f9fdbd8e7180768842361e99f0be4a2bbd20efd7cf084bf32187b342700f11ae2f9a78b1fe689bdd717006b05ceef64ea98b53e9bb95cc2d75069f90736eedebf38bf33f41aff5fbb2f25858d3ba641286688dcb5132ae60f9841f03e06dc3ce307f246e360b79e038b381eec1164df5b7908c87cb3999acb3427b7e8c6f4ef4715df0d05f44367a622d7e085f02e69df3364c330606c715708c02ae0e010c9425c13c0c4c00fbf758f79cdc453391da00c145f3d7fe22dd248a7f8b3e008abe67dae8f128ec01100c29eaef3440939804c1ea26e897ad79248a7fe5d9cd036c30213dceae7254a3b536b9d8c3ed37629d7ebb4efb81a7db1a640ca9bc459e8cf16fe13faa3aadb23cf49c1c1e985cc0b4abe5452aa82a77a070ae469ff23b728a685b0a7f45ccb2e085efd2c0c11c6ea45b561ea8e79447a33cd51be167ea74c39d61787c4326e075b272d4700888351d8b972a1cf0dbd00eac2ebb8537a69231cbe42d6df2f6e1b6f87cb9375a45bc5a4f68db985050e2b96d8cf10d526f641048d22cb327abb4bd012b94ff3fa2e33156eeb64e45d4378297b0fa0a76bf2b1459399e4a437e2d50bbf00dd0468b1bd967fc7160569dd88a85a2af0f47efa3c753e0b167bf4c8afc939f068f08fbee7682a8db1326b751a6ec17dc505f2281093345a74796bc18de7f2150890e8ec8321555e2014d4ff54b77e605909033e3b7153cd994c90dbbb45842e0e3e7b03ee33d2b9c54516bbc8f9f3023ab8d18cce87561bc4115198168c2b4f014d44535fcf4fc6e2aa6e550179441d941739156260a0e6e3b35fa135ed2e6b5d7e9e97553ac0002affb1e6b31b7a51e8a51ee7232cb0a08aa93791e161d462f79cf5363c311a3b335b9e628697a4aecb858f86556c2f15734243dd262b01dd9dff39118ef64228dc28f5520cb5c919f03ed1b966f2486306644419729eae084b47e89458392249ad0f8b477a16fcfe06ba404cb8b0dd6227cda46c68c0c7463c54d4da74443dbabfaf15c0fdd68121b75cdfd6d3c6753082f5991197f24f476df46ed15c755765bae0ebc2c94e12d2f618592b4897e11a1f2fd34a8ece8543b49326a44b4fd1914d7c7a6323623e370f16e961809dc2e4478657177e67a8e74644f251d9ec2ac4a53ee9e4e0bd8b88ecd284075572ac39ad08f5a9a96c17d05c688d62ec4e14909efd30114876b8c930b7666eae534dbba4d5dad5b6fddd3c3a6d712931e281034b0d51b299eb453d611b541edcc1e1c22f9027cd6be494d1bbdd4b7acc0ace1aa3ec87be10f37cbff31ca6854a640dcaed0e96fcad34e2111a78c122922064ea3213224503348a675bc6b00cb1177cf828dd7da6b702e18f73ab1505f0af3d96e82ddcd0024190d71c634a15de016709ed396b61901090d015b18a12ec42b2da15df38123a1202f0eed9e62017ef0f3b09f2c3c0ce894eefd65eca17c2c85ef81f880c5bf3e9f97538328e621a8a5be70c4244292c5c53a6279ed5d0caab2a7317b2fb71853fe46eec396c03e50e469f3e110077cbd3d39319d5be0729aad1cc4d8107496127cd70d960a7c8d3401caedd2fd8ec56cca4c607abba54a1800c1300ba91a3cfa9ff18f40bfa40b188fd45159ca5673fc53b478ba66eb3ed2b87c46c9de62846af0229e8f5f2aedb6df0b1ce038ebdac3e5fda3d92b4fcbf0b6538ca9ff54a182885cab6385fe44f43c0ef946aa503a6d896810350fcec3dcb52b053c640033e5bb1ac1403316a7220c4b0d82b0a02fb041e2ed75574d90c21294431e28c7716592a800fe66bf10535a6b83e5af8aab1e91b4d37d76e3f5a3a38bd4a95393ed6ca8755a917ab82c89f2a86c6c4f4751cba3035ca0c0c02a758441a9722024200ae7e0a030775a9973fdbac69b0c49364d58752625a0bc9793c7401802ad4cac5dda6c9ac7300079f0bc4f0fb21cc9517e66a82030005f318a5d1692a5792fc4e9403b3ddf00d3bf16365549958d10f0a7890465ce75dd42ddc4da384fe808625ca4e271a0faec3269a6534cd61478f955d7f5f927658defdeffd8faffe14d63364078f91a40062500cc7090ea475ab47f564c038286191c7d1460bfce51d3feeec15f89c586ed9ae1f8d82407a94abe8d32c6c8a607dfe75403b689d60ea1bf678c4124b7edabf3d1aec1752c8de39acf96a44f8d009fd116a1fd8cc609ffcdf3b507613e8e31f56d732619ac83cf040b85afa01bf1c9c31053513b4a294f7b7ad924c991522eb030e61315402839252907f93bb8e1a61eb4a19f18ca1c3fea666c5752c487b23b888787df343eaa25314cc7d28768bc2cffe03e479087dbf7e105ca2b591621f7d738cddab6f81bf59a13a2b52b2c1d7e61cd77c0694c9574fefe67d80c9ea42e3747c8cb484754c59f85d67fdd917d76df767b3b6d4aaa8b662cd59c03a3f2c1f199edbbf88ea6aa2d72b0f3b4cf8a2e35c20c8c49f474455470d59cb3369131ac4165ba8a24d5c042934a19e0a0b5c0436e4fa2026a2da5aebfd14617c0f596b66f2096b2c1d9659555302a4ff7a99cba353b6b64813f76132c4217c58b55940d25ab343726345d476bc54c70fd521eba9878528dacb7a4bf1656ffe332a8ebdf6b60e3fbfa590fcd5db69a10dee2e0d2d529314e07a9aec7c118e7a277f20969203584b844c74e8c1b3fd4c9a87d55df145c3132d81c16cda697694d3f95361fa84caa96d7e9a7aae4626afc2940a77c28e23ffaeb2816dd8ac3e33c75b5917c2c9402dca272d2cd64148d88c92637f5775fcb6884e3a29ffc20adafde1b6e232e862d4836ac28f21e4d159c52d57d1f183c832528439ffa68a08004987ea0548b0b92095af52bde68e6a40280797f067689b5a2928732652514eb04ccd31f76a6bb15b67b53738d94b908bba5b0c4869f6a1087f0250fb61e4e5a6a562caa692ad615b2bf45becc6f2fd4adeea7c2a87de569960b15232ea6e59ac36e98441792bc800bc85b44e775eefcf7c319fcff85e546e29da9b08c0e726e77bcc2c48fa44a55bf219269457c00a5e8424918ab66bcfb9ea812cb03938c7e530badead9052e08b4f1dc279c6d56a35b06f2b59970d396c3d6535470cfadf3cd1ad9719d9f3e22683400412ec6b68cc4d2947a331b355e2f1c9ce94f24b6e9153af4aecf8d5693fa12ba24ef67dea8066c0b0b4e617616b5242e9d3ebc49963bbe5abcb5ecf2e38b311dedb3ad2dcbbc1216e07ddc5b74eeaedfe41a4640e332b6bea0b6cf31d1fcf75816c84ba4e27c8243b295e1d2286060f6c9a06320bcacae67b25e744b529f3eaa527267020319f474527c65a7100a3704aa2fa1fbd30b4f1044141e386f8e7bcb57c668b0d63b893edba26734befa396e09f4b8cc06bdfd59d06c102ca808bc033f05bc38b26611497cf9bb0fbee6ee97b5858793d6214dd6563e46aae411d3055a26d8effd7bb51a68734157bba57ca69b3de36d49d5f3f2c210fa5", &(0x7f0000002d40)=@tcp=r1, 0x4}, 0x20) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r10, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r9, 0x0) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) 725.463364ms ago: executing program 0 (id=924): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2120, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) 724.766515ms ago: executing program 0 (id=925): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x1a, 0x4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%pK \x00'}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x9e, 0xe, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0x9, 0x5}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x6, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0xe]}}, &(0x7f0000001380)=""/4096, 0x28, 0x1000, 0x0, 0xfffffff7}, 0x28) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x9, 0x10}, 0xfffffffffffffcb3) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002580)={{0x1, 0xffffffffffffffff}, &(0x7f0000002500), &(0x7f0000002540)='%pK \x00'}, 0x20) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x624040, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x32}, 0x5, 0x1, 0x0, 0x5, 0xfffc, 0x3}, 0x20) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002600)=@generic={&(0x7f00000025c0)='./file0\x00'}, 0x18) r11 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$BSG_SET_RESERVED_SIZE(r11, 0x2275, &(0x7f0000000200)=0x1) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=@bloom_filter={0x1e, 0x7, 0x7, 0x9, 0x1, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x11, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1ff}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xbc}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x565}, @initr0={0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0x539, 0x0, 0x0, 0x41000, 0x1, '\x00', r3, @fallback, r4, 0x8, &(0x7f00000023c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x2, 0x10, 0x8000, 0x1}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f00000026c0)=[r6, r7, 0xffffffffffffffff, r8, r9, r10, r11, r12], &(0x7f0000002700)=[{0x2, 0x1, 0x2, 0xb}], 0x10, 0x5331}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r13 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0x7005, 0x0) readv(r13, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 563.913755ms ago: executing program 0 (id=926): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ppoll(&(0x7f0000000a00)=[{r0, 0x8010}], 0x1, &(0x7f0000000a80)={0x0, 0x3938700}, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) lseek(r1, 0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1', [{0x20, '-'}, {0x20, '{).#'}, {0x20, '#/\xeb'}, {0x20, 'syz\x00'}, {0x20, '%@]-${('}, {}], 0xa, "5007968c4b42ac667591e6f7f650a20ac472d8d01827692426fd4c7e79544577a23123c35311600684da8dba803119c7dcf21e06e8b371c7bfd0aee06b80708282b9313f3f8078ea7258f90875f8e0d357c40c3f6cc18c14ad7f5d91333c4276"}, 0x84) pwritev2(r2, &(0x7f00000003c0), 0x0, 0x5, 0x8, 0x10) 392.462401ms ago: executing program 0 (id=927): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x1, 0x19f}) io_uring_enter(r1, 0x7fd1, 0xc125, 0x4, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x2) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) syz_io_uring_setup(0x4963, &(0x7f0000000280)={0x0, 0xfad6, 0x800, 0x1, 0x3, 0x0, r1}, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)}}], 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c733917"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 191.081929ms ago: executing program 3 (id=928): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0xf080000) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x9, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0xaf, &(0x7f0000000540)=""/175, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x200, 0xffffffff}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000680)=[r2, r2, r2, r2], &(0x7f00000006c0)=[{0x3, 0x3, 0x9, 0xa}], 0x10, 0xfffffffc}, 0x94) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r5, 0x49d3c000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="240000004000070126bd700000000000047c00000c00c28008000900", @ANYRES32=0x0, @ANYBLOB="380047c0"], 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000475f3c2cb5a8a0a8340406c289bc54ce87ec07d6e9c76e090c3c03924fe083ddbc6cac80785eb4366e468bc780eae004b5f78594c5bacac946064f924e1b3fba848d063c516e00d62430315a0c83e2259d8d42db5b6ff69534a3f8ebed3671df68bd5ea3bc09b17a203ae37d8a3bffd15234edd3915464e8287ccdc75cd064", @ANYRES16=r9, @ANYRES8=r5], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 55.723411ms ago: executing program 0 (id=929): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='environ\x00') (rerun: 64) read$FUSE(r1, 0x0, 0xa00) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x2, {0x0, 0xf0}, 0xfd}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x20000000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x2, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@local, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 0 (id=930): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r4, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') pread64(r5, &(0x7f0000000000)=""/57, 0x39, 0x9) kernel console output (not intermixed with test programs): T41] kauditd_printk_skb: 31 callbacks suppressed [ 76.263727][ T41] audit: type=1400 audit(1775226575.582:224): avc: denied { write } for pid=6260 comm="syz.1.76" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.277199][ T41] audit: type=1400 audit(1775226575.592:225): avc: denied { execute } for pid=6260 comm="syz.1.76" dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.277352][ T6261] process 'syz.1.76' launched '/dev/fd/4' with NULL argv: empty string added [ 76.286984][ T41] audit: type=1400 audit(1775226575.602:226): avc: denied { execute_no_trans } for pid=6260 comm="syz.1.76" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.398548][ T41] audit: type=1400 audit(1775226575.712:227): avc: denied { read append } for pid=6274 comm="syz.2.82" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.411352][ T6275] erspan0: entered promiscuous mode [ 76.413421][ T41] audit: type=1400 audit(1775226575.722:228): avc: denied { ioctl open } for pid=6274 comm="syz.2.82" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 76.426556][ T41] audit: type=1400 audit(1775226575.742:229): avc: denied { create } for pid=6274 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.429476][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 76.436788][ T6275] erspan0: left promiscuous mode [ 76.438219][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.441291][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.498067][ T41] audit: type=1400 audit(1775226575.812:230): avc: denied { append } for pid=6281 comm="syz.2.84" name="cec2" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.510774][ T41] audit: type=1400 audit(1775226575.822:231): avc: denied { read write } for pid=6281 comm="syz.2.84" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.528151][ T41] audit: type=1400 audit(1775226575.822:232): avc: denied { open } for pid=6281 comm="syz.2.84" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 76.548820][ T41] audit: type=1400 audit(1775226575.852:233): avc: denied { sqpoll } for pid=6286 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.631484][ T6295] Bluetooth: MGMT ver 1.23 [ 76.635148][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 76.638161][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.2.89'. [ 76.893163][ T6019] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 77.065285][ T6019] usb 5-1: not running at top speed; connect to a high speed hub [ 77.069665][ T6019] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 77.072710][ T6019] usb 5-1: can't read configurations, error -22 [ 77.078697][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 77.223120][ T6019] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 77.375774][ T6019] usb 5-1: not running at top speed; connect to a high speed hub [ 77.382231][ T6019] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 77.385399][ T6019] usb 5-1: can't read configurations, error -22 [ 77.387783][ T6019] usb usb5-port1: attempt power cycle [ 77.492192][ T6357] openvswitch: netlink: IP tunnel dst address not specified [ 77.634445][ T6386] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.110'. [ 77.683863][ T6375] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 77.687437][ T6391] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.691115][ T6375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.108'. [ 77.695756][ T6391] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 77.744572][ T6019] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 77.766533][ T6401] Bluetooth: hci0: load_link_keys: too big key_count value 11008 [ 77.794805][ T6019] usb 5-1: not running at top speed; connect to a high speed hub [ 77.796572][ T6404] xt_hashlimit: size too large, truncated to 1048576 [ 77.800696][ T6019] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 77.805157][ T6019] usb 5-1: can't read configurations, error -22 [ 77.898866][ T6412] binder: 6411:6412 ioctl c018620c 200000001140 returned -1 [ 77.943123][ T6019] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 77.949096][ T6419] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.995651][ T6019] usb 5-1: not running at top speed; connect to a high speed hub [ 77.999314][ T6019] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 78.002120][ T6019] usb 5-1: can't read configurations, error -22 [ 78.004499][ T6019] usb usb5-port1: unable to enumerate USB device [ 78.006372][ T6422] netlink: 80 bytes leftover after parsing attributes in process `syz.3.118'. [ 78.198446][ T6435] fuse: blksize only supported for fuseblk [ 78.250756][ T6444] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 78.322693][ T6454] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.326254][ T6456] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.395453][ T6463] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 78.398393][ T6463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.400815][ T6463] vhci_hcd vhci_hcd.0: Device attached [ 78.409240][ T6464] vhci_hcd: connection closed [ 78.409550][ T216] vhci_hcd vhci_hcd.2: stop threads [ 78.414317][ T216] vhci_hcd vhci_hcd.2: release socket [ 78.416651][ T216] vhci_hcd vhci_hcd.2: disconnect device [ 79.214893][ T6488] xt_HMARK: spi-set and port-set can't be combined [ 79.264576][ T6490] syzkaller0: entered promiscuous mode [ 79.266517][ T6490] syzkaller0: entered allmulticast mode [ 79.275130][ T6490] 0: reclassify loop, rule prio 0, protocol 800 [ 79.472091][ T6499] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 79.477206][ T6499] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 79.566713][ T6512] openvswitch: netlink: Duplicate or invalid key (type 0). [ 79.570359][ T6512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.133103][ T1471] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 80.373161][ T1471] usb 6-1: Using ep0 maxpacket: 32 [ 80.376530][ T1471] usb 6-1: too many configurations: 110, using maximum allowed: 8 [ 80.381745][ T1471] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.382846][ T6530] Invalid option length (1048180) for dns_resolver key [ 80.384821][ T1471] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 195 [ 80.390480][ T1471] usb 6-1: can't read configurations, error -22 [ 80.524526][ T1471] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.691179][ T1471] usb 6-1: Using ep0 maxpacket: 32 [ 80.701517][ T1471] usb 6-1: too many configurations: 110, using maximum allowed: 8 [ 80.705639][ T1471] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.708512][ T1471] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 195 [ 80.721778][ T1471] usb 6-1: can't read configurations, error -22 [ 80.724646][ T1471] usb usb6-port1: attempt power cycle [ 81.073234][ T1471] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.103764][ T1471] usb 6-1: Using ep0 maxpacket: 32 [ 81.105969][ T1471] usb 6-1: too many configurations: 110, using maximum allowed: 8 [ 81.109453][ T1471] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.112223][ T1471] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 195 [ 81.115799][ T1471] usb 6-1: can't read configurations, error -22 [ 81.243205][ T1471] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.273989][ T1471] usb 6-1: Using ep0 maxpacket: 32 [ 81.276114][ T1471] usb 6-1: too many configurations: 110, using maximum allowed: 8 [ 81.279556][ T1471] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.282770][ T1471] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 195 [ 81.292427][ T1471] usb 6-1: can't read configurations, error -22 [ 81.294841][ T1471] usb usb6-port1: unable to enumerate USB device [ 81.555158][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 82.433609][ T5937] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 82.566375][ T6521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.664019][ T41] kauditd_printk_skb: 102 callbacks suppressed [ 82.664031][ T41] audit: type=1400 audit(1775226581.982:336): avc: denied { write } for pid=6522 comm="syz.0.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.709823][ T6545] netlink: 'syz.3.153': attribute type 15 has an invalid length. [ 82.712500][ T6545] __nla_validate_parse: 1 callbacks suppressed [ 82.712510][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 82.724827][ T269] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 82.727780][ T269] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 82.730719][ T269] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 82.733415][ T6545] netlink: 'syz.3.153': attribute type 15 has an invalid length. [ 82.735139][ T269] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 82.736516][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 82.743130][ T6545] ata1.00: invalid cdb length 1 [ 82.745683][ T6545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6545 comm=syz.3.153 [ 82.777313][ T41] audit: type=1400 audit(1775226582.092:337): avc: denied { ioctl } for pid=6549 comm="syz.3.154" path="socket:[13354]" dev="sockfs" ino=13354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.825652][ T6554] netlink: 'syz.0.156': attribute type 63 has an invalid length. [ 82.828856][ T6554] netlink: 5 bytes leftover after parsing attributes in process `syz.0.156'. [ 82.832389][ T6554] gretap0: entered allmulticast mode [ 82.839534][ T6554] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 82.873093][ T41] audit: type=1400 audit(1775226582.182:338): avc: denied { unlink } for pid=5935 comm="syz-executor" name="file0" dev="tmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.968122][ T6569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=6569 comm=syz.0.159 [ 82.994173][ T41] audit: type=1400 audit(1775226582.312:339): avc: denied { bind } for pid=6568 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.028201][ T6571] veth0_to_bond: entered allmulticast mode [ 83.138852][ T6580] netlink: 'syz.0.162': attribute type 11 has an invalid length. [ 83.232632][ T6587] capability: warning: `syz.0.166' uses 32-bit capabilities (legacy support in use) [ 83.284067][ T41] audit: type=1400 audit(1775226582.602:340): avc: denied { write } for pid=6588 comm="syz.0.167" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 83.356271][ T41] audit: type=1400 audit(1775226582.672:341): avc: denied { write } for pid=6591 comm="syz.0.168" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.366312][ T41] audit: type=1400 audit(1775226582.672:342): avc: denied { open } for pid=6591 comm="syz.0.168" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.388420][ T41] audit: type=1400 audit(1775226582.672:343): avc: denied { sqpoll } for pid=6591 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.394732][ T41] audit: type=1400 audit(1775226582.682:344): avc: denied { ioctl } for pid=6591 comm="syz.0.168" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 83.422217][ T6603] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 83.425011][ T6603] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 83.432704][ T6603] vhci_hcd vhci_hcd.0: Device attached [ 83.436329][ T6605] vhci_hcd: connection closed [ 83.437173][ T1172] vhci_hcd vhci_hcd.0: stop threads [ 83.441270][ T1172] vhci_hcd vhci_hcd.0: release socket [ 83.443248][ T1172] vhci_hcd vhci_hcd.0: disconnect device [ 83.820255][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 83.981581][ T41] audit: type=1400 audit(1775226583.292:345): avc: denied { ioctl } for pid=6612 comm="syz.3.173" path="socket:[14470]" dev="sockfs" ino=14470 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.992618][ T6616] ALSA: mixer_oss: invalid OSS volume '' [ 84.043139][ T5942] Bluetooth: hci3: command 0x0406 tx timeout [ 84.167342][ T6622] can: request_module (can-proto-0) failed. [ 84.257392][ T6633] new mount options do not match the existing superblock, will be ignored [ 84.283120][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.303384][ T6638] autofs: Bad value for 'fd' [ 84.327358][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6640 comm=syz.1.181 [ 84.332364][ T6640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6640 comm=syz.1.181 [ 84.454869][ T29] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.458700][ T29] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 84.462945][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.467010][ T29] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.472314][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 84.477578][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.488796][ T29] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.492970][ T29] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.496698][ T29] usb 5-1: Product: syz [ 84.498550][ T29] usb 5-1: Manufacturer: syz [ 84.504493][ T6620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.510535][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 84.512932][ T29] cdc_wdm 5-1:1.0: skipping garbage [ 84.520698][ T29] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 84.523501][ T29] cdc_wdm 5-1:1.0: Unknown control protocol [ 84.603090][ T831] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.711199][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 84.713573][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 84.715729][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 84.717838][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 84.720098][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 84.722335][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 84.724218][ T6620] cgroup: release_agent respecified [ 84.724607][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 84.727770][ T9] usb 5-1: USB disconnect, device number 7 [ 84.728387][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 84.728398][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 84.753154][ T831] usb 8-1: Using ep0 maxpacket: 32 [ 84.762045][ T831] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.768274][ T831] usb 8-1: string descriptor 0 read error: -22 [ 84.770596][ T831] usb 8-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 84.774386][ T831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.013907][ T6642] sp0: Synchronizing with TNC [ 85.086288][ T6019] usb 8-1: USB disconnect, device number 6 [ 85.279360][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 85.574136][ T6661] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 85.587902][ T6661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 85.598391][ T6661] bond2: (slave veth0_to_bond): making interface the new active one [ 85.602805][ T6661] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.608971][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 85.657447][ T6661] bond3: (slave vlan0): Enslaving as a backup interface with an up link [ 85.740416][ T6677] netlink: 192 bytes leftover after parsing attributes in process `syz.3.191'. [ 85.751520][ T6681] capability: warning: `syz.1.193' uses deprecated v2 capabilities in a way that may be insecure [ 85.778221][ T1471] IPVS: starting estimator thread 0... [ 85.824810][ T6691] netlink: 1 bytes leftover after parsing attributes in process `syz.3.197'. [ 85.828208][ T6691] block nbd0: not configured, cannot reconfigure [ 85.841970][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 85.882401][ T6688] team0: Port device team_slave_0 removed [ 85.883424][ T6685] IPVS: using max 44 ests per chain, 105600 per kthread [ 85.917900][ T6705] IPVS: set_ctl: invalid protocol: 60 100.1.1.0:20000 [ 86.050885][ T6727] /dev/nullb0: Can't open blockdev [ 86.052949][ T6724] /dev/nullb0: Can't open blockdev [ 86.108100][ T6742] netlink: 'syz.1.211': attribute type 58 has an invalid length. [ 86.138511][ T6743] syzkaller0: entered promiscuous mode [ 86.139635][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 86.140563][ T6743] syzkaller0: entered allmulticast mode [ 86.247203][ T6762] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 86.249346][ T6762] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.252289][ T6763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 86.254380][ T6763] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.257596][ T6762] vhci_hcd vhci_hcd.0: Device attached [ 86.258197][ T6763] vhci_hcd vhci_hcd.0: Device attached [ 86.265466][ T6764] netlink: 'syz.1.218': attribute type 1 has an invalid length. [ 86.296045][ T6766] vhci_hcd: connection closed [ 86.297160][ T12] vhci_hcd vhci_hcd.1: stop threads [ 86.303104][ T12] vhci_hcd vhci_hcd.1: release socket [ 86.306021][ T6765] vhci_hcd: connection closed [ 86.313175][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 86.323380][ T12] vhci_hcd vhci_hcd.1: stop threads [ 86.325375][ T12] vhci_hcd vhci_hcd.1: release socket [ 86.327271][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 86.374731][ T6784] devtmpfs: Cannot change global quota limit on remount [ 86.445603][ T6793] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 86.451709][ T6793] geneve2: entered promiscuous mode [ 86.455521][ T6793] geneve2: entered allmulticast mode [ 86.550828][ T6803] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 86.567997][ T6803] team0: Port device dummy0 added [ 86.572591][ T6803] netlink: 'syz.0.228': attribute type 10 has an invalid length. [ 86.585303][ T6803] team0: Port device dummy0 removed [ 86.591338][ T6803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.606459][ T6801] mmap: syz.3.227 (6801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.611990][ T6803] geneve2: entered promiscuous mode [ 86.614852][ T6803] geneve2: entered allmulticast mode [ 86.866653][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.007539][ T6827] bond2: (slave bond_slave_1): Device is not our slave [ 87.010206][ T6827] bond2: option active_slave: invalid value (bond_slave_1) [ 87.013855][ T6827] bond2 (unregistering): Released all slaves [ 87.173232][ T1026] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 87.346073][ T1026] usb 8-1: Using ep0 maxpacket: 8 [ 87.351194][ T1026] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 87.355332][ T1026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.357058][ T6837] block nbd0: Unsupported socket: should be TCP or UNIX. [ 87.367586][ T1026] pvrusb2: Hardware description: Terratec Grabster AV400 [ 87.370746][ T1026] pvrusb2: ********** [ 87.372555][ T1026] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 87.376888][ T1026] pvrusb2: Important functionality might not be entirely working. [ 87.380189][ T1026] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 87.386004][ T1026] pvrusb2: ********** [ 87.393195][ T1471] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.543084][ T1471] usb 6-1: Using ep0 maxpacket: 32 [ 87.547156][ T1471] usb 6-1: unable to get BOS descriptor or descriptor too short [ 87.550877][ T1471] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 87.556595][ T1471] usb 6-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 87.560197][ T1471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.562865][ T1471] usb 6-1: Product: syz [ 87.564489][ T1471] usb 6-1: Manufacturer: syz [ 87.566443][ T1471] usb 6-1: SerialNumber: syz [ 87.570371][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.574621][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.580563][ T2493] pvrusb2: Invalid write control endpoint [ 87.607877][ T2493] pvrusb2: Invalid write control endpoint [ 87.610439][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.618739][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.622080][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.630456][ T2493] pvrusb2: Device being rendered inoperable [ 87.635698][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 87.640790][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.646319][ T2493] pvrusb2: Attached sub-driver cx25840 [ 87.649081][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.654318][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.675560][ T41] kauditd_printk_skb: 47 callbacks suppressed [ 87.675572][ T41] audit: type=1400 audit(1775226586.992:393): avc: denied { setattr } for pid=6853 comm="syz.2.246" name="/" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.759835][ T6861] vcan1: entered allmulticast mode [ 87.779485][ T1026] usb 8-1: USB disconnect, device number 7 [ 87.794737][ T41] audit: type=1400 audit(1775226587.112:394): avc: denied { nlmsg_write } for pid=6864 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.801223][ T41] audit: type=1400 audit(1775226587.112:395): avc: denied { getopt } for pid=6864 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.819863][ T41] audit: type=1400 audit(1775226587.132:396): avc: denied { bind } for pid=6866 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.826044][ T6867] overlay: filesystem on ./file1 not supported [ 87.828393][ T41] audit: type=1400 audit(1775226587.132:397): avc: denied { mount } for pid=6866 comm="syz.0.252" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.836895][ T41] audit: type=1400 audit(1775226587.132:398): avc: denied { unmount } for pid=6866 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.843676][ T41] audit: type=1400 audit(1775226587.142:399): avc: denied { mount } for pid=6866 comm="syz.0.252" name="/" dev="autofs" ino=12089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 87.851946][ T41] audit: type=1400 audit(1775226587.142:400): avc: denied { mounton } for pid=6866 comm="syz.0.252" path="/bus" dev="autofs" ino=12091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 87.862944][ T41] audit: type=1400 audit(1775226587.172:401): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.904293][ T6872] __nla_validate_parse: 8 callbacks suppressed [ 87.904304][ T6872] netlink: 212116 bytes leftover after parsing attributes in process `syz.0.253'. [ 88.024343][ T6879] netlink: 64 bytes leftover after parsing attributes in process `syz.0.255'. [ 88.321664][ T6890] program syz.3.259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.340547][ T6892] validate_nla: 1 callbacks suppressed [ 88.340562][ T6892] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 88.354466][ T6892] macvlan0: entered allmulticast mode [ 88.359819][ T6892] veth1_vlan: entered allmulticast mode [ 88.365815][ T6892] team0: Port device macvlan0 added [ 88.556892][ T6901] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 88.566635][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 88.626855][ T6905] loop6: detected capacity change from 0 to 524288000 [ 88.637607][ T41] audit: type=1400 audit(1775226587.952:402): avc: denied { bind } for pid=6906 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.720349][ T6914] 9pnet_fd: p9_fd_create_unix (6914): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 88.908524][ T6929] SELinux: ebitmap: map size 327680 does not match my size 64 (high bit was 0) [ 88.947878][ T6929] SELinux: failed to load policy [ 88.958765][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.963426][ T6935] openvswitch: netlink: Tunnel attr 282 out of range max 16 [ 89.017884][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.416956][ T6960] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 89.421436][ T6960] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 89.537238][ T6974] openvswitch: netlink: Missing valid actions attribute. [ 89.542070][ T6974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.813417][ T6009] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 89.905235][ T6986] tipc: Enabling of bearer rejected, failed to enable media [ 89.935325][ T6991] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 89.940140][ T6991] netlink: 32 bytes leftover after parsing attributes in process `syz.2.287'. [ 90.006201][ T6986] sp0: Synchronizing with TNC [ 90.185064][ T7008] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.189825][ T7009] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.190926][ T7011] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.254990][ T5937] kernel write not supported for file /audio1 (pid: 5937 comm: kworker/1:3) [ 90.295676][ T1471] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.298509][ T1471] usb 6-1: MIDIStreaming interface descriptor not found [ 90.323274][ T39] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 90.371545][ T1471] usb 6-1: USB disconnect, device number 6 [ 90.386463][ T7026] input: syz0 as /devices/virtual/input/input6 [ 90.400285][ T7026] netlink: 'syz.0.296': attribute type 5 has an invalid length. [ 90.408694][ T7031] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 90.411394][ T7031] SELinux: failed to load policy [ 90.414566][ T7031] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.455460][ T7033] udevd[7033]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.475055][ T39] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 90.477969][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.481400][ T39] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.487080][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.492135][ T7038] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 90.495833][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.501143][ T39] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 90.503997][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.505372][ T7036] bond4: Unable to set down delay as MII monitoring is disabled [ 90.508523][ T39] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.518515][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.519343][ T7036] bond4 (unregistering): Released all slaves [ 90.522975][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.529817][ T39] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 90.532360][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 90.536115][ T39] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.540709][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 90.544456][ T39] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 90.546303][ T7042] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 3, id = 0 [ 90.550106][ T39] usb 7-1: string descriptor 0 read error: -22 [ 90.553104][ T39] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 90.555993][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.562911][ T39] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 90.688718][ T7052] netlink: 56 bytes leftover after parsing attributes in process `syz.1.301'. [ 90.692574][ T7049] comedi comedi3: comedi_config --init_data is deprecated [ 90.926329][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.099877][ T6998] syzkaller0: entered promiscuous mode [ 91.102484][ T6998] syzkaller0: entered allmulticast mode [ 91.167207][ T7080] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 91.189787][ T7082] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 91.192364][ T7082] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 91.778052][ T7125] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 92.427921][ T7131] netlink: 'syz.1.327': attribute type 5 has an invalid length. [ 92.434311][ T7131] tipc: Enabling not permitted [ 92.437096][ T7131] tipc: Enabling of bearer rejected, failed to enable media [ 92.455145][ T7133] (syz.2.328,7133,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 92.457825][ T7133] (syz.2.328,7133,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 92.460146][ T7133] (syz.2.328,7133,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 92.466009][ T7133] (syz.2.328,7133,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 92.588266][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 92.592288][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 92.680123][ T7144] ALSA: seq fatal error: cannot create timer (-22) [ 92.771174][ T41] kauditd_printk_skb: 26 callbacks suppressed [ 92.771184][ T41] audit: type=1400 audit(1775226592.086:429): avc: denied { getopt } for pid=7145 comm="syz.1.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.911981][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.336'. [ 92.928372][ T7151] syzkaller0: entered promiscuous mode [ 92.930166][ T7151] syzkaller0: entered allmulticast mode [ 93.073100][ T9] IPVS: starting estimator thread 0... [ 93.113233][ T7171] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 93.114987][ T7174] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.116047][ T41] audit: type=1400 audit(1775226592.436:430): avc: denied { write } for pid=7172 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.125578][ T7171] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 93.168257][ T7183] netlink: 'syz.3.343': attribute type 7 has an invalid length. [ 93.183876][ T7167] IPVS: using max 45 ests per chain, 108000 per kthread [ 93.188352][ T7185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.190830][ T7185] IPv6: NLM_F_CREATE should be set when creating new route [ 93.194617][ T7186] lo: entered allmulticast mode [ 93.197183][ T41] audit: type=1400 audit(1775226592.516:431): avc: denied { mount } for pid=7191 comm="syz.3.345" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.199984][ T7192] devtmpfs: Cannot change global quota limit on remount [ 93.211533][ T7186] tunl0: entered allmulticast mode [ 93.213277][ T41] audit: type=1400 audit(1775226592.516:432): avc: denied { remount } for pid=7191 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.222455][ T7186] gre0: entered allmulticast mode [ 93.222671][ T41] audit: type=1400 audit(1775226592.536:433): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.240053][ T7186] erspan0: entered allmulticast mode [ 93.245653][ T7186] ip_vti0: entered allmulticast mode [ 93.249657][ T7186] ip6_vti0: entered allmulticast mode [ 93.249782][ T7195] fuse: Unknown parameter 'grop_md' [ 93.255800][ T7186] sit0: entered allmulticast mode [ 93.259366][ T7186] ip6tnl0: entered allmulticast mode [ 93.268064][ T7186] ip6gre0: entered allmulticast mode [ 93.278973][ T7186] syz_tun: entered allmulticast mode [ 93.293759][ T7186] ip6gretap0: entered allmulticast mode [ 93.298709][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.302030][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.307645][ T7186] bridge0: entered allmulticast mode [ 93.308760][ T7198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 93.316155][ T7186] vcan0: entered allmulticast mode [ 93.321459][ T7186] bond0: entered allmulticast mode [ 93.324475][ T7186] bond_slave_0: entered allmulticast mode [ 93.326856][ T7186] bond_slave_1: entered allmulticast mode [ 93.329416][ T7186] dummy0: entered allmulticast mode [ 93.332405][ T41] audit: type=1400 audit(1775226592.646:434): avc: denied { setattr } for pid=7199 comm="syz.3.348" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.338652][ T7186] team0: entered allmulticast mode [ 93.345661][ T7186] team_slave_0: entered allmulticast mode [ 93.348098][ T7186] team_slave_1: entered allmulticast mode [ 93.360561][ T7186] nlmon0: entered allmulticast mode [ 93.367937][ T7186] caif0: entered allmulticast mode [ 93.371862][ T7186] batadv0: entered allmulticast mode [ 93.378433][ T7186] vxcan0: entered allmulticast mode [ 93.381604][ T7186] vxcan1: entered allmulticast mode [ 93.388629][ T7186] veth0: entered allmulticast mode [ 93.391653][ T7186] veth1: entered allmulticast mode [ 93.403521][ T7186] wg0: entered allmulticast mode [ 93.424457][ T7186] wg1: entered allmulticast mode [ 93.432181][ T7186] wg2: entered allmulticast mode [ 93.439953][ T7186] veth0_to_bridge: entered allmulticast mode [ 93.447760][ T7186] veth1_to_bridge: entered allmulticast mode [ 93.457360][ T7186] veth0_to_bond: entered allmulticast mode [ 93.462917][ T7186] veth1_to_bond: entered allmulticast mode [ 93.468820][ T7186] veth0_to_team: entered allmulticast mode [ 93.474182][ T7186] veth1_to_team: entered allmulticast mode [ 93.485006][ T7186] veth0_to_batadv: entered allmulticast mode [ 93.490331][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.495487][ T7186] batadv_slave_0: entered allmulticast mode [ 93.501505][ T7186] veth1_to_batadv: entered allmulticast mode [ 93.507760][ T7186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.510832][ T7186] batadv_slave_1: entered allmulticast mode [ 93.515996][ T7186] xfrm0: entered allmulticast mode [ 93.523696][ T7186] veth0_to_hsr: entered allmulticast mode [ 93.530323][ T7186] hsr_slave_0: entered allmulticast mode [ 93.536619][ T7186] veth1_to_hsr: entered allmulticast mode [ 93.541213][ T7186] hsr_slave_1: entered allmulticast mode [ 93.549366][ T7186] hsr0: entered allmulticast mode [ 93.554139][ T7186] veth1_virt_wifi: entered allmulticast mode [ 93.557344][ T7186] veth0_virt_wifi: entered allmulticast mode [ 93.560445][ T7186] virt_wifi0: entered allmulticast mode [ 93.562896][ T7186] veth1_vlan: entered allmulticast mode [ 93.573514][ T7186] veth0_vlan: entered allmulticast mode [ 93.578839][ T7186] vlan0: entered allmulticast mode [ 93.583148][ T7186] vlan1: entered allmulticast mode [ 93.585304][ T7186] macvlan0: entered allmulticast mode [ 93.589992][ T7186] macvlan1: entered allmulticast mode [ 93.592895][ T7186] ipvlan0: entered allmulticast mode [ 93.600244][ T7186] ipvlan1: entered allmulticast mode [ 93.602833][ T7186] veth1_macvtap: entered allmulticast mode [ 93.606696][ T7186] veth0_macvtap: entered allmulticast mode [ 93.613195][ T7186] macvtap0: entered allmulticast mode [ 93.619794][ T7186] macsec0: entered allmulticast mode [ 93.626913][ T7186] geneve0: entered allmulticast mode [ 93.635055][ T7186] geneve1: entered allmulticast mode [ 93.641621][ T7186] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 93.648517][ T7186] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 93.654157][ T7186] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 93.660310][ T7186] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 93.666925][ T7186] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 93.669215][ T7186] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 93.671581][ T7186] bond1: entered allmulticast mode [ 93.673424][ T7186] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode [ 93.676363][ T7186] bond2: entered allmulticast mode [ 93.680568][ T7186] bond3: entered allmulticast mode [ 93.682379][ T7186] erspan1: entered allmulticast mode [ 93.684499][ T7186] sit1: entered allmulticast mode [ 93.699716][ T7186] gtp0: entered allmulticast mode [ 93.711074][ T269] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.720597][ T269] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.724466][ T269] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.727333][ T269] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.730308][ T41] audit: type=1400 audit(1775226593.046:435): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 93.757045][ T41] audit: type=1326 audit(1775226593.076:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7216 comm="syz.2.352" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bc199c819 code=0x0 [ 93.791946][ T41] audit: type=1400 audit(1775226593.106:437): avc: denied { getopt } for pid=7220 comm="syz.0.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.794027][ T9] usb 7-1: USB disconnect, device number 3 [ 93.862428][ T7225] tmpfs: Bad value for 'mpol' [ 94.093830][ T41] audit: type=1400 audit(1775226593.406:438): avc: denied { execute } for pid=7234 comm="syz.3.356" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=15962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 94.209715][ T5292] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 94.219280][ T7237] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 94.688573][ T7250] devpts: Bad value for 'max' [ 94.969513][ T7259] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 95.001784][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 95.385427][ T7274] netlink: 'syz.0.371': attribute type 10 has an invalid length. [ 95.388294][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.371'. [ 95.392519][ T7274] geneve0: left allmulticast mode [ 95.398624][ T7274] geneve0: entered allmulticast mode [ 95.401060][ T7274] team0: Port device geneve0 added [ 95.404046][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.413127][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.416250][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.419071][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.433728][ T7279] kernel profiling enabled (shift: 5) [ 95.483108][ T29] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 95.646297][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.650366][ T29] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 95.653802][ T29] usb 6-1: can't read configurations, error -22 [ 95.665752][ T7294] bond0: entered promiscuous mode [ 95.667417][ T7294] bond_slave_0: entered promiscuous mode [ 95.669360][ T7294] bond_slave_1: entered promiscuous mode [ 95.671292][ T7294] dummy0: entered promiscuous mode [ 95.672132][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.375'. [ 95.674181][ T7294] batadv0: entered promiscuous mode [ 95.679550][ T7294] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 95.682757][ T7294] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 95.687774][ T7294] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 95.700076][ T7294] bond0: left promiscuous mode [ 95.701760][ T7294] bond_slave_0: left promiscuous mode [ 95.705528][ T7294] bond_slave_1: left promiscuous mode [ 95.707513][ T7294] dummy0: left promiscuous mode [ 95.709824][ T7294] batadv0: left promiscuous mode [ 95.757018][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 95.760005][ T7291] netlink: 2 bytes leftover after parsing attributes in process `syz.2.375'. [ 95.789972][ T7291] bridge0: port 3(vlan2) entered blocking state [ 95.795660][ T7291] bridge0: port 3(vlan2) entered disabled state [ 95.798838][ T7291] vlan2: entered allmulticast mode [ 95.801215][ T7291] geneve0: entered allmulticast mode [ 95.813761][ T29] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 95.814484][ T7291] vlan2: entered promiscuous mode [ 95.818316][ T7291] geneve0: entered promiscuous mode [ 95.972045][ T7324] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 95.994752][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.999693][ T29] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 96.002563][ T29] usb 6-1: can't read configurations, error -22 [ 96.011473][ T29] usb usb6-port1: attempt power cycle [ 96.153431][ T7341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.259222][ T7349] tmpfs: Bad value for 'mpol' [ 96.354553][ T29] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 96.376668][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.386079][ T29] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 96.393501][ T29] usb 6-1: can't read configurations, error -22 [ 96.543130][ T29] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 96.571906][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 96.576390][ T29] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 96.579067][ T29] usb 6-1: can't read configurations, error -22 [ 96.581488][ T29] usb usb6-port1: unable to enumerate USB device [ 96.603124][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 96.730663][ T7378] netlink: 'syz.0.388': attribute type 21 has an invalid length. [ 96.734294][ T7378] netlink: 'syz.0.388': attribute type 6 has an invalid length. [ 96.737119][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.388'. [ 96.764573][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.768054][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.771285][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 96.775263][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.779923][ T9] usb 7-1: config 0 descriptor?? [ 96.847578][ T7380] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.194132][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 97.196659][ T9] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 97.204646][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0002/input/input7 [ 97.222451][ T9] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 98.193612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.443973][ T6159] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 100.043176][ T7389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.126343][ T7415] dvmrp0: entered allmulticast mode [ 100.155002][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 100.155014][ T41] audit: type=1400 audit(1775226599.476:459): avc: denied { read } for pid=7417 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.181138][ T41] audit: type=1326 audit(1775226599.496:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.397" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24dcf9c819 code=0x0 [ 100.191145][ T41] audit: type=1326 audit(1775226599.496:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7416 comm="syz.1.397" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24dcf9c819 code=0x0 [ 100.240170][ T41] audit: type=1400 audit(1775226599.556:462): avc: denied { read } for pid=7432 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.291793][ T41] audit: type=1400 audit(1775226599.606:463): avc: denied { create } for pid=7432 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.313348][ T41] audit: type=1400 audit(1775226599.626:464): avc: denied { connect } for pid=7432 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.321799][ T41] audit: type=1400 audit(1775226599.636:465): avc: denied { ioctl } for pid=7432 comm="syz.3.401" path="socket:[17743]" dev="sockfs" ino=17743 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.332741][ T41] audit: type=1400 audit(1775226599.636:466): avc: denied { write } for pid=7432 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.564301][ T41] audit: type=1400 audit(1775226599.876:467): avc: denied { map } for pid=7464 comm="syz.1.411" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.575168][ T41] audit: type=1400 audit(1775226599.876:468): avc: denied { lock } for pid=7457 comm="syz.0.410" path="/dev/vmci" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.796292][ T7489] netlink: 'syz.0.416': attribute type 10 has an invalid length. [ 100.798879][ T7489] vxcan1: left allmulticast mode [ 100.802336][ T7489] vxcan1: entered allmulticast mode [ 100.806907][ T7489] team0: Device vxcan1 is of different type [ 100.843257][ T6019] usb 7-1: USB disconnect, device number 4 [ 100.876560][ T7492] random: crng reseeded on system resumption [ 100.904429][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.417'. [ 100.919576][ T7492] sp0: Synchronizing with TNC [ 100.929380][ T7492] Hibernate inconsistent memory map detected! [ 100.932540][ T7492] PM: hibernation: Image mismatch: architecture specific data [ 100.935927][ T7491] [U] [ 100.993337][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.046289][ T7505] netlink: 'syz.0.420': attribute type 4 has an invalid length. [ 101.054520][ T7505] netlink: 'syz.0.420': attribute type 4 has an invalid length. [ 101.169694][ T7524] SELinux: failed to load policy [ 101.232594][ T7538] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 101.268552][ T7538] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.272767][ T7538] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 101.315405][ T7544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7544 comm=syz.0.429 [ 101.329080][ T7544] bond4: (slave gretap1): making interface the new active one [ 101.332356][ T7544] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 101.340723][ T7544] macvlan2: entered promiscuous mode [ 101.342851][ T7544] macvlan2: entered allmulticast mode [ 101.349804][ T7544] bond4: entered promiscuous mode [ 101.352235][ T7544] gretap1: entered promiscuous mode [ 101.353642][ T7542] EXT4-fs (nbd2): unable to read superblock [ 101.356160][ T7544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.365134][ T7544] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 101.371628][ T7544] bond4: left promiscuous mode [ 101.374473][ T7544] gretap1: left promiscuous mode [ 101.454849][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 101.530008][ T7552] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 101.791864][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 101.791894][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 101.935732][ T7570] loop2: detected capacity change from 0 to 7 [ 101.947697][ T6044] Dev loop2: unable to read RDB block 7 [ 101.949928][ T6044] loop2: unable to read partition table [ 101.952363][ T6044] loop2: partition table beyond EOD, truncated [ 101.960827][ T7570] Dev loop2: unable to read RDB block 7 [ 101.962899][ T7570] loop2: unable to read partition table [ 101.965590][ T7570] loop2: partition table beyond EOD, truncated [ 101.967832][ T7570] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 102.078361][ T7577] netlink: 104 bytes leftover after parsing attributes in process `syz.3.441'. [ 102.193405][ T1471] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.333147][ T1471] usb 5-1: device descriptor read/64, error -71 [ 102.347502][ T7586] sock: sock_timestamping_bind_phc: sock not bind to device [ 102.352977][ T7586] (syz.3.445,7586,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 102.355797][ T7586] (syz.3.445,7586,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 102.358785][ T7586] (syz.3.445,7586,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 102.362927][ T7586] (syz.3.445,7586,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 102.593524][ T1471] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.733094][ T1471] usb 5-1: device descriptor read/64, error -71 [ 102.865847][ T1471] usb usb5-port1: attempt power cycle [ 102.994260][ T5942] Bluetooth: hci4: command 0x1003 tx timeout [ 103.000465][ T5292] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.161224][ T7601] loop6: detected capacity change from 0 to 2640 [ 103.165676][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.168878][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.171662][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.174442][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.176812][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.179393][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.182031][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.185654][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.188491][ T5936] ldm_validate_partition_table(): Disk read failed. [ 103.190691][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.193563][ T5936] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.196465][ T5936] Dev loop6: unable to read RDB block 0 [ 103.199046][ T5936] loop6: unable to read partition table [ 103.206555][ T7601] ldm_validate_partition_table(): Disk read failed. [ 103.209656][ T7601] Dev loop6: unable to read RDB block 0 [ 103.213190][ T1471] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 103.214567][ T7601] loop6: unable to read partition table [ 103.218551][ T7601] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 103.245514][ T1471] usb 5-1: device descriptor read/8, error -71 [ 103.255816][ T7611] tmpfs: Group quota inode hardlimit too large. [ 103.266934][ T7611] xt_l2tp: v2 tid > 0xffff: 2031748 [ 103.388088][ T7615] netlink: 'syz.1.454': attribute type 12 has an invalid length. [ 103.503244][ T1471] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 103.534507][ T1471] usb 5-1: device descriptor read/8, error -71 [ 103.656052][ T1471] usb usb5-port1: unable to enumerate USB device [ 103.746202][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 103.758772][ T7629] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 103.763115][ T6008] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 103.924693][ T6008] usb 6-1: Using ep0 maxpacket: 16 [ 103.932387][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.935494][ T7645] input: syz1 as /devices/virtual/input/input8 [ 103.940789][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.951340][ T6008] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 103.956646][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.967826][ T6008] usb 6-1: config 0 descriptor?? [ 104.213274][ T29] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 104.378960][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.416789][ T6008] usbhid 6-1:0.0: can't add hid device: -71 [ 104.418833][ T6008] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 104.424089][ T6008] usb 6-1: USB disconnect, device number 11 [ 104.533153][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 104.663232][ T9] usb 7-1: device descriptor read/64, error -71 [ 104.903288][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 105.043754][ T9] usb 7-1: device descriptor read/64, error -71 [ 105.051921][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 105.153499][ T9] usb usb7-port1: attempt power cycle [ 105.493132][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 105.513603][ T9] usb 7-1: device descriptor read/8, error -71 [ 105.753155][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 105.773876][ T9] usb 7-1: device descriptor read/8, error -71 [ 105.883217][ T9] usb usb7-port1: unable to enumerate USB device [ 105.928313][ T7657] bond2 (unregistering): Released all slaves [ 105.991148][ T41] kauditd_printk_skb: 19 callbacks suppressed [ 105.991204][ T41] audit: type=1400 audit(1775226605.306:488): avc: denied { map } for pid=7665 comm="syz.0.468" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.998844][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 106.001125][ T41] audit: type=1400 audit(1775226605.306:489): avc: denied { execute } for pid=7665 comm="syz.0.468" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 106.046028][ T7673] SQUASHFS error: Failed to read block 0x0: -5 [ 106.049659][ T7673] unable to read squashfs_super_block [ 106.099471][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.471'. [ 106.102421][ T7676] openvswitch: netlink: Flow key attr not present in new flow. [ 106.857329][ T29] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 106.859791][ T29] usb 8-1: can't read configurations, error -71 [ 106.892677][ T41] audit: type=1400 audit(1775226606.206:490): avc: denied { create } for pid=7690 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.903075][ T41] audit: type=1400 audit(1775226606.206:491): avc: denied { read } for pid=7690 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.909277][ T41] audit: type=1400 audit(1775226606.206:492): avc: denied { getopt } for pid=7690 comm="syz.3.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.023210][ T41] audit: type=1400 audit(1775226606.346:493): avc: denied { accept } for pid=7695 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.059820][ T41] audit: type=1400 audit(1775226606.376:494): avc: denied { setopt } for pid=7699 comm="syz.3.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.070348][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.478'. [ 107.106222][ T41] audit: type=1400 audit(1775226606.426:495): avc: denied { write } for pid=7703 comm="syz.2.479" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.118309][ T41] audit: type=1400 audit(1775226606.426:496): avc: denied { ioctl } for pid=7703 comm="syz.2.479" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 107.199095][ T7716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'. [ 107.411733][ T41] audit: type=1400 audit(1775226606.726:497): avc: denied { map } for pid=7722 comm="syz.1.484" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.666351][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 107.764538][ T7744] random: crng reseeded on system resumption [ 107.977214][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 107.980767][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 107.984687][ T7761] netlink: 'syz.2.492': attribute type 12 has an invalid length. [ 107.991856][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 107.996332][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 107.999248][ T7761] netlink: 'syz.2.492': attribute type 12 has an invalid length. [ 108.204711][ T7779] netlink: 'syz.3.498': attribute type 10 has an invalid length. [ 108.221395][ T7779] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 108.226840][ T7779] team0: Failed to send options change via netlink (err -105) [ 108.230225][ T7779] team0: Port device netdevsim0 added [ 108.232852][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 108.233138][ T7779] netlink: 'syz.3.498': attribute type 18 has an invalid length. [ 108.236901][ T7780] netlink: 'syz.3.498': attribute type 18 has an invalid length. [ 108.240654][ T13] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 108.351950][ T7792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7792 comm=syz.3.502 [ 108.389596][ T7790] syzkaller0: entered promiscuous mode [ 108.391434][ T7790] syzkaller0: entered allmulticast mode [ 108.514529][ T7804] QAT: failed to copy from user cfg_data. [ 108.564149][ T7792] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 108.607676][ T7792] bond1: (slave bridge1): making interface the new active one [ 108.612006][ T7792] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 109.146087][ T7824] /dev/sr0: Can't open blockdev [ 109.413137][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 109.453100][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 109.566522][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 109.570154][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.574307][ T24] usb 6-1: Product: syz [ 109.575877][ T24] usb 6-1: Manufacturer: syz [ 109.577360][ T24] usb 6-1: SerialNumber: syz [ 109.580450][ T24] usb 6-1: config 0 descriptor?? [ 109.601509][ T7839] xt_TCPMSS: Only works on TCP SYN packets [ 109.603145][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 109.607261][ T9] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 109.611361][ T9] usb 8-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 109.621763][ T9] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 109.625666][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.628884][ T9] usb 8-1: Product: syz [ 109.630565][ T9] usb 8-1: Manufacturer: syz [ 109.632429][ T9] usb 8-1: SerialNumber: syz [ 109.640790][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 109.646422][ T9] imon 8-1:155.0: unable to initialize intf0, err -19 [ 109.649122][ T9] imon:imon_probe: failed to initialize context! [ 109.651793][ T9] imon 8-1:155.0: unable to register, err -19 [ 109.786472][ T6019] usb 6-1: USB disconnect, device number 12 [ 110.200100][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.205364][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.222140][ T7853] gtp0: left promiscuous mode [ 111.253487][ T7908] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.297315][ T41] kauditd_printk_skb: 9 callbacks suppressed [ 111.297326][ T41] audit: type=1400 audit(1775750898.610:507): avc: denied { listen } for pid=7914 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.310126][ T41] audit: type=1400 audit(1775750898.630:508): avc: denied { accept } for pid=7914 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.316488][ T41] audit: type=1400 audit(1775750898.630:509): avc: denied { read } for pid=7914 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.322736][ T41] audit: type=1400 audit(1775750898.640:510): avc: denied { listen } for pid=7914 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.403862][ T7918] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 111.425102][ T7925] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 111.903334][ T7941] bond5: ARP target 9.0.0.0 is already present [ 111.905631][ T7941] bond5: option arp_ip_target: invalid value (9) [ 111.908754][ T7941] bond5 (unregistering): Released all slaves [ 112.193123][ T7953] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 112.195318][ T29] usb 8-1: USB disconnect, device number 10 [ 112.212219][ T41] audit: type=1400 audit(1775750899.513:511): avc: denied { name_bind } for pid=7944 comm="syz.0.553" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.276575][ T7958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.280937][ T7958] bond2: (slave bond3): making interface the new active one [ 112.285596][ T7958] bond2: (slave bond3): Enslaving as an active interface with an up link [ 112.301433][ T7953] __nla_validate_parse: 5 callbacks suppressed [ 112.301455][ T7953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.555'. [ 112.302811][ T7947] infiniband syz2: set down [ 112.309189][ T7947] infiniband syz2: added bridge_slave_1 [ 112.310780][ T7953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.347056][ T7947] RDS/IB: syz2: added [ 112.348870][ T7947] smc: adding ib device syz2 with port count 1 [ 112.351614][ T7947] smc: ib device syz2 port 1 has no pnetid [ 112.359309][ T41] audit: type=1400 audit(1775750899.649:512): avc: denied { ioctl } for pid=7956 comm="syz.3.556" path="mnt:[4026533839]" dev="nsfs" ino=4026533839 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.376168][ T41] audit: type=1400 audit(1775750899.659:513): avc: denied { bind } for pid=7956 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.605461][ T7968] netlink: 168 bytes leftover after parsing attributes in process `syz.2.559'. [ 112.617460][ T41] audit: type=1400 audit(1775750899.901:514): avc: denied { connect } for pid=7967 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.688031][ T41] audit: type=1400 audit(1775750899.969:515): avc: denied { read } for pid=7976 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.810055][ T41] audit: type=1400 audit(1775750900.095:516): avc: denied { write } for pid=7988 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.874316][ T7995] IPVS: Unknown mcast interface: syzkaller1 [ 112.983658][ T7997] qrtr: Invalid version 0 [ 112.988485][ T5942] Bluetooth: hci2: Malformed Event: 0x13 [ 112.993671][ T7998] qrtr: Invalid version 0 [ 112.995723][ T5942] Bluetooth: hci2: Malformed Event: 0x13 [ 113.273751][ T8022] xt_hashlimit: size too large, truncated to 1048576 [ 113.404426][ T8034] bridge_slave_1: left allmulticast mode [ 113.407126][ T8034] bridge_slave_1: left promiscuous mode [ 113.409047][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.432419][ T8034] bridge_slave_0: left allmulticast mode [ 113.434662][ T8034] bridge_slave_0: left promiscuous mode [ 113.439099][ T8035] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 113.439844][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.551676][ T8038] netlink: 'syz.2.580': attribute type 4 has an invalid length. [ 113.578174][ T8043] netem: change failed [ 113.582433][ T8043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.581'. [ 113.593839][ T8044] netem: change failed [ 113.707007][ T8054] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 113.775178][ T8067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.588'. [ 113.797853][ T8040] syz.3.582 (8040): drop_caches: 2 [ 113.832460][ T8074] sit0: entered promiscuous mode [ 113.834521][ T8074] sit0: left allmulticast mode [ 113.846108][ T8074] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 113.856016][ T8074] netlink: 1 bytes leftover after parsing attributes in process `syz.0.590'. [ 113.874700][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 113.911516][ T8077] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 113.911676][ T8077] nbd: must specify at least one socket [ 114.255347][ T8102] netlink: 'syz.3.602': attribute type 4 has an invalid length. [ 115.011622][ T8132] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.035265][ T8134] netlink: 104 bytes leftover after parsing attributes in process `syz.2.608'. [ 115.039997][ T8134] 9p: Bad value for 'dfltuid' [ 115.041906][ T8134] 9p: Bad value for 'dfltuid' [ 115.373168][ T8162] tmpfs: Unknown parameter 'nodeb ' [ 115.686959][ T8196] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.693857][ T8196] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 115.703835][ T8196] xt_HMARK: spi-set and port-set can't be combined [ 115.774486][ T8207] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.817795][ T8216] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 115.864760][ T8216] bond5: entered promiscuous mode [ 115.866683][ T8216] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.874461][ T8221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.888580][ T8216] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.891180][ T8216] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.895330][ T8216] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 115.903431][ T8216] bond5: (slave vxcan3): making interface the new active one [ 115.906133][ T8216] vxcan3: entered promiscuous mode [ 115.913884][ T8216] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 115.924759][ T8225] MINIX-fs: blocksize too small for device [ 115.952704][ T8219] syzkaller0: entered promiscuous mode [ 115.957515][ T8219] syzkaller0: entered allmulticast mode [ 116.090091][ T8235] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 116.105559][ T8235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.128152][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 116.230650][ T39] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.284653][ T24] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 116.288447][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.299620][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.304034][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.308513][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.320325][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.329618][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.340103][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.344039][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.348004][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.351487][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.356839][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.363593][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.367757][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.371716][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.377514][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.381688][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.385630][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.390324][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.395472][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.399674][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.404176][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.407409][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 116.411428][ T24] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.415643][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.420801][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 116.424053][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.428493][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.431690][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 116.436156][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 116.440513][ T39] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 116.443687][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.447353][ T24] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.450312][ T24] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.453058][ T24] usb 8-1: Product: syz [ 116.454544][ T24] usb 8-1: Manufacturer: syz [ 116.456312][ T24] usb 8-1: SerialNumber: syz [ 116.463232][ T24] usb 8-1: config 0 descriptor?? [ 116.470489][ T39] hub 5-1:1.0: bad descriptor, ignoring hub [ 116.472951][ T39] hub 5-1:1.0: probe with driver hub failed with error -5 [ 116.482751][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 116.484566][ T39] cdc_wdm 5-1:1.0: skipping garbage [ 116.494519][ T24] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 116.498082][ T39] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 116.500049][ T39] cdc_wdm 5-1:1.0: Unknown control protocol [ 116.794514][ T39] usb 5-1: USB disconnect, device number 13 [ 117.142168][ T831] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 117.296486][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 117.319587][ T831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.323790][ T831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.327643][ T831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 117.332552][ T831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 117.337481][ T831] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 117.341474][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.358594][ T831] hub 5-1:1.0: bad descriptor, ignoring hub [ 117.366822][ T831] hub 5-1:1.0: probe with driver hub failed with error -5 [ 117.377311][ T831] cdc_wdm 5-1:1.0: skipping garbage [ 117.380030][ T831] cdc_wdm 5-1:1.0: skipping garbage [ 117.388623][ T831] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 117.391497][ T831] cdc_wdm 5-1:1.0: Unknown control protocol [ 117.421757][ T40] usb 8-1: USB disconnect, device number 11 [ 117.431614][ T40] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 117.556294][ T8271] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 117.563648][ T41] kauditd_printk_skb: 24 callbacks suppressed [ 117.563667][ T41] audit: type=1400 audit(1775750904.721:541): avc: denied { accept } for pid=8268 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 117.666160][ T39] usb 5-1: USB disconnect, device number 14 [ 117.686275][ T8278] EXT4-fs (nbd2): unable to read superblock [ 117.712476][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 117.943056][ T8296] overlayfs: missing 'workdir' [ 117.969958][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 117.974876][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 118.141503][ T41] audit: type=1400 audit(1775750905.279:542): avc: denied { ioctl } for pid=8308 comm="syz.0.657" path="socket:[24632]" dev="sockfs" ino=24632 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 118.371013][ T8306] nbd0: detected capacity change from 0 to 128 [ 118.375158][ T5942] block nbd0: Receive control failed (result -32) [ 118.375189][ T5292] block nbd0: Receive control failed (result -32) [ 118.375770][ T6044] block nbd0: Send control failed (result -32) [ 118.376151][ T6044] block nbd0: Request send failed, requeueing [ 118.381861][ T5441] block nbd0: Send control failed (result -32) [ 118.389060][ T5441] block nbd0: Request send failed, requeueing [ 118.394272][ T5441] block nbd0: Dead connection, failed to find a fallback [ 118.396928][ T5441] block nbd0: shutting down sockets [ 118.399344][ T5441] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.404426][ T5441] buffer_io_error: 27 callbacks suppressed [ 118.404440][ T5441] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.411501][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.415079][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.417818][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.420985][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.423584][ T8320] lo speed is unknown, defaulting to 1000 [ 118.423746][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.425840][ T8320] lo speed is unknown, defaulting to 1000 [ 118.429291][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.429349][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.432487][ T8320] lo speed is unknown, defaulting to 1000 [ 118.433895][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.438738][ T8320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.438895][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.448902][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.451385][ T8320] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 118.455398][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.458788][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.461573][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.464915][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.467601][ T6044] ldm_validate_partition_table(): Disk read failed. [ 118.469906][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.473541][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.476645][ T6044] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.479183][ T8320] lo speed is unknown, defaulting to 1000 [ 118.480054][ T6044] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.480139][ T6044] Dev nbd0: unable to read RDB block 0 [ 118.486156][ T8320] lo speed is unknown, defaulting to 1000 [ 118.487895][ T6044] nbd0: unable to read partition table [ 118.491500][ T8320] lo speed is unknown, defaulting to 1000 [ 118.495893][ T6044] ldm_validate_partition_table(): Disk read failed. [ 118.497114][ T8320] lo speed is unknown, defaulting to 1000 [ 118.498874][ T6044] Dev nbd0: unable to read RDB block 0 [ 118.504395][ T6044] nbd0: unable to read partition table [ 118.549101][ T41] audit: type=1400 audit(1775750905.680:543): avc: denied { map } for pid=8324 comm="syz.3.661" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.560243][ T41] audit: type=1400 audit(1775750905.690:544): avc: denied { call } for pid=8324 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.615070][ T8331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.665'. [ 118.653967][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.716347][ T41] audit: type=1400 audit(1775750905.846:545): avc: denied { execute } for pid=8333 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 118.737118][ T41] audit: type=1400 audit(1775750905.856:546): avc: denied { execute_no_trans } for pid=8333 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 118.744116][ T8337] loop6: detected capacity change from 0 to 8 [ 118.785824][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.805896][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.810699][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.813967][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.818467][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.822686][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.870049][ T41] audit: type=1400 audit(1775750905.993:547): avc: denied { execute } for pid=8335 comm="syz.3.668" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 118.887895][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.902813][ T8337] Dev loop6: unable to read RDB block 8 [ 118.904628][ T8337] loop6: unable to read partition table [ 118.906505][ T8337] loop6: partition table beyond EOD, truncated [ 118.908677][ T8337] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 118.911472][ T8345] loop6: detected capacity change from 8 to 7 [ 118.989844][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 119.017908][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.073367][ T8357] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 119.079598][ T41] audit: type=1400 audit(1775750906.199:548): avc: denied { bind } for pid=8356 comm="syz.3.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.107706][ T8344] lo speed is unknown, defaulting to 1000 [ 119.171040][ T8361] misc userio: Begin command sent, but we're already running [ 119.228159][ T61] vlan2: left allmulticast mode [ 119.230660][ T61] geneve0: left allmulticast mode [ 119.232744][ T61] vlan2: left promiscuous mode [ 119.234816][ T61] geneve0: left promiscuous mode [ 119.238729][ T61] bridge0: port 3(vlan2) entered disabled state [ 119.244100][ T61] bridge_slave_1: left allmulticast mode [ 119.246284][ T61] bridge_slave_1: left promiscuous mode [ 119.248324][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.253109][ T61] bridge_slave_0: left allmulticast mode [ 119.255011][ T61] bridge_slave_0: left promiscuous mode [ 119.256958][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.480372][ T41] audit: type=1400 audit(1775750906.591:549): avc: denied { create } for pid=8374 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 119.489621][ T41] audit: type=1400 audit(1775750906.591:550): avc: denied { bind } for pid=8374 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 119.541969][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.550710][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.557052][ T61] bond0 (unregistering): Released all slaves [ 119.636056][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 119.660152][ T61] tipc: Disabling bearer [ 119.677751][ T61] tipc: Left network mode [ 119.772995][ T61] IPVS: stopping master sync thread 6082 ... [ 119.776645][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.779856][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.783214][ T8344] bridge_slave_0: entered allmulticast mode [ 119.788272][ T8344] bridge_slave_0: entered promiscuous mode [ 119.791870][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.794230][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.796516][ T8344] bridge_slave_1: entered allmulticast mode [ 119.801463][ T8344] bridge_slave_1: entered promiscuous mode [ 119.863194][ T8396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=8396 comm=syz.1.681 [ 119.923044][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.931533][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.955350][ T8344] team0: Port device team_slave_0 added [ 119.960802][ T8344] team0: Port device team_slave_1 added [ 120.059388][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.061996][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.075020][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.081455][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.084961][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.098207][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.154824][ T8344] hsr_slave_0: entered promiscuous mode [ 120.157431][ T8344] hsr_slave_1: entered promiscuous mode [ 120.159621][ T8344] debugfs: 'hsr0' already exists in 'hsr' [ 120.161478][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 120.161624][ T8344] Cannot create hsr debugfs directory [ 120.165416][ T8423] netlink: 'syz.0.687': attribute type 21 has an invalid length. [ 120.365016][ T8344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.375827][ T8436] loop2: detected capacity change from 0 to 7 [ 120.378906][ T8436] Dev loop2: unable to read RDB block 7 [ 120.384035][ T8344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.386395][ T8436] loop2: AHDI p2 [ 120.388257][ T8436] loop2: partition table partially beyond EOD, truncated [ 120.406957][ T8344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.449794][ T8344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.491123][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.494177][ T8344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.496589][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.499047][ T8344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.585269][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.618190][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.623646][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.638686][ T8458] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.645346][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.681093][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.683655][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.693867][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.696320][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.868336][ T61] hsr_slave_0: left promiscuous mode [ 120.881751][ T61] hsr_slave_1: left promiscuous mode [ 120.888166][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.897592][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.899962][ T5292] Bluetooth: hci1: command tx timeout [ 120.905151][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.907754][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.917966][ T61] veth1_macvtap: left promiscuous mode [ 120.920211][ T61] veth0_macvtap: left promiscuous mode [ 120.922328][ T61] veth1_vlan: left promiscuous mode [ 120.924159][ T61] veth0_vlan: left promiscuous mode [ 121.078910][ T61] team0 (unregistering): Port device team_slave_1 removed [ 121.173485][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.360862][ T8344] veth0_vlan: entered promiscuous mode [ 121.370851][ T8344] veth1_vlan: entered promiscuous mode [ 121.384948][ T8344] veth0_macvtap: entered promiscuous mode [ 121.391676][ T8344] veth1_macvtap: entered promiscuous mode [ 121.404609][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.415687][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.426570][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.431388][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.435613][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.448671][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.579035][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.586678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.621798][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.624773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.691692][ T8498] "syz.1.700" (8498) uses obsolete ecb(arc4) skcipher [ 121.838184][ T8507] 8021q: VLANs not supported on ip6_vti0 [ 122.089847][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 122.113230][ T8546] Unsupported ieee802154 address type: 0 [ 122.162558][ T8555] overlayfs: failed to resolve './bus': -2 [ 122.167968][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 122.176196][ T8555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 122.238986][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 122.476248][ T29] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 122.486225][ T40] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 122.611217][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 122.638593][ T40] usb 9-1: Using ep0 maxpacket: 16 [ 122.642901][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 122.649304][ T40] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.653560][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.657107][ T40] usb 9-1: Product: syz [ 122.659096][ T40] usb 9-1: Manufacturer: syz [ 122.661127][ T40] usb 9-1: SerialNumber: syz [ 122.665963][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 122.669469][ T29] usb 6-1: can't read configurations, error -71 [ 122.672749][ T40] usb 9-1: config 0 descriptor?? [ 122.681864][ T40] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 122.685784][ T40] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 122.750672][ T24] usb 5-1: device descriptor read/64, error -71 [ 122.967317][ T40] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 122.996384][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 123.015036][ T5292] Bluetooth: hci1: command tx timeout [ 123.036588][ T40] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 123.041426][ T40] em28xx 9-1:0.0: board has no eeprom [ 123.116210][ T40] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 123.119667][ T40] em28xx 9-1:0.0: dvb set to bulk mode. [ 123.122561][ T6159] em28xx 9-1:0.0: Binding DVB extension [ 123.137429][ T40] usb 9-1: USB disconnect, device number 2 [ 123.138245][ T24] usb 5-1: device descriptor read/64, error -71 [ 123.154537][ T40] em28xx 9-1:0.0: Disconnecting em28xx [ 123.178780][ T6159] em28xx 9-1:0.0: Registering input extension [ 123.183148][ T40] em28xx 9-1:0.0: Closing input extension [ 123.200963][ T40] em28xx 9-1:0.0: Freeing device [ 123.224570][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 123.232646][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 123.250157][ T24] usb usb5-port1: attempt power cycle [ 123.336975][ T41] kauditd_printk_skb: 13 callbacks suppressed [ 123.336994][ T41] audit: type=1400 audit(1775750910.383:564): avc: denied { read write } for pid=8597 comm="syz.1.731" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.349899][ T41] audit: type=1400 audit(1775750910.383:565): avc: denied { open } for pid=8597 comm="syz.1.731" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.399214][ T41] audit: type=1400 audit(1775750910.442:566): avc: denied { getopt } for pid=8602 comm="syz.1.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.446554][ T8607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3921 sclass=netlink_route_socket pid=8607 comm=syz.1.734 [ 123.458775][ T41] audit: type=1400 audit(1775750910.501:567): avc: denied { map } for pid=8606 comm="syz.1.734" path="socket:[26690]" dev="sockfs" ino=26690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.511651][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.517578][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.524536][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.528161][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.534167][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.537845][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.542417][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.548514][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.559013][ T41] audit: type=1400 audit(1775750910.600:568): avc: denied { set_context_mgr } for pid=8618 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 123.570390][ T8619] binder: 8618:8619 ioctl c0306201 200000000640 returned -14 [ 123.580191][ T8619] binder: 8618:8619 ioctl 3b89 200000000140 returned -22 [ 123.593727][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 123.614552][ T24] usb 5-1: device descriptor read/8, error -71 [ 123.772925][ T8622] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 123.775343][ T8622] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 123.857768][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 123.888799][ T24] usb 5-1: device descriptor read/8, error -71 [ 123.908055][ T8637] netlink: 'syz.1.743': attribute type 30 has an invalid length. [ 124.010170][ T24] usb usb5-port1: unable to enumerate USB device [ 124.047221][ T8643] usb usb8: usbfs: process 8643 (syz.3.745) did not claim interface 0 before use [ 124.146847][ T8643] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 124.150277][ T8655] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.202151][ T8657] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 124.239951][ T41] audit: type=1400 audit(1775750911.270:569): avc: denied { append } for pid=8658 comm="syz.4.750" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 124.766683][ T8681] TCP: TCP_TX_DELAY enabled [ 124.896202][ T8691] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 124.899810][ T41] audit: type=1400 audit(1775750911.920:570): avc: denied { mount } for pid=8690 comm="syz.1.763" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 124.957728][ T8691] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.998618][ T41] audit: type=1400 audit(1775750912.019:571): avc: denied { remount } for pid=8690 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 125.027526][ T41] audit: type=1400 audit(1775750912.048:572): avc: denied { unmount } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 125.138272][ T5292] Bluetooth: hci1: command tx timeout [ 125.162664][ T41] audit: type=1400 audit(1775750912.186:573): avc: denied { setopt } for pid=8704 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.166639][ T8706] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.174743][ T8705] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.177302][ T8705] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 125.180678][ T8705] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.182172][ T8706] xfs: Unknown parameter 'usrquotaH' [ 125.185007][ T8705] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 125.261769][ T8711] tmpfs: Bad value for 'mpol' [ 125.331561][ T8714] sctp: [Deprecated]: syz.3.769 (pid 8714) Use of int in max_burst socket option. [ 125.331561][ T8714] Use struct sctp_assoc_value instead [ 125.431718][ T8726] option changes via remount are deprecated (pid=8725 comm=syz.4.773) [ 125.537162][ T8726] overlayfs: workdir and upperdir must reside under the same mount [ 125.703675][ T40] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 125.724585][ T8736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.727182][ T8736] IPv6: NLM_F_CREATE should be set when creating new route [ 125.729831][ T8736] IPv6: NLM_F_CREATE should be set when creating new route [ 125.732531][ T8736] IPv6: NLM_F_CREATE should be set when creating new route [ 125.735609][ T8736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.876907][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 125.888990][ T40] usb 6-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice= 0.40 [ 125.893624][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.904073][ T40] usb 6-1: Product: ࠕ胐餪价〆痰⾒ [ 125.907506][ T40] usb 6-1: Manufacturer: 隶椘Ƛ쪠愎뇵塌⧚漪⭿垍ᆪ᷂霝뚧馞啖伛祰촎ￋ阈杊惞蝷ᴝ໴䝋傖혹쀵ᓣȂ៴硬膁ꄊᶶ흗㢖ᚌ沗㐢鄘䇸ꮶ≤ኇ뼔⪔삞塖⵨쟰〥瞮 [ 125.915352][ T40] usb 6-1: SerialNumber: Ы syzkaller syzkaller login: [ 126.156581][ T40] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 126.181514][ T8745] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20001 [ 126.199449][ T40] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 126.204268][ T40] usb 6-1: selecting invalid altsetting 1 [ 126.206817][ T40] snd-usb-caiaq 6-1:1.0: can't set alt interface. [ 126.209583][ T40] usb 6-1: unable to init card! (ret=-5) [ 126.213461][ T40] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 126.222528][ T40] usb 6-1: selecting invalid altsetting 1 [ 126.225118][ T40] snd-usb-caiaq 6-1:1.1: can't set alt interface. [ 126.227895][ T40] usb 6-1: unable to init card! (ret=-5) [ 126.230886][ T40] snd-usb-caiaq 6-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 126.238365][ T40] usb 6-1: selecting invalid altsetting 1 [ 126.241853][ T40] snd-usb-caiaq 6-1:1.2: can't set alt interface. [ 126.244643][ T40] usb 6-1: unable to init card! (ret=-5) [ 126.247169][ T40] snd-usb-caiaq 6-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 126.252776][ T40] usb 6-1: USB disconnect, device number 15 [ 126.277117][ T8743] udevd[8743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.865607][ T8782] netlink: 'syz.3.791': attribute type 15 has an invalid length. [ 126.880896][ T8778] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 126.887480][ T8778] geneve2: entered promiscuous mode [ 126.889400][ T8778] geneve2: entered allmulticast mode [ 127.006718][ T8793] program syz.3.793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.092907][ T8751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.202069][ T8820] fuse: Unknown parameter '*;*N~iNU['Z| \A!\2~Pc_we(9QpƊ-7-i v~f'ziD#|dCSrűf)Ќ^B0E2!B웥-owHHRX"V <2sJ5❬jRJY􆕁3m:Bܥ80x0000000000000003' [ 127.243386][ T5292] Bluetooth: hci1: command tx timeout [ 127.317040][ T8828] FAT-fs (sr0): bogus number of reserved sectors [ 127.320393][ T8828] FAT-fs (sr0): Can't find a valid FAT filesystem [ 127.332329][ T8830] new mount options do not match the existing superblock, will be ignored [ 127.332817][ T8828] netlink: 'syz.3.806': attribute type 64 has an invalid length. [ 127.357280][ T8830] cgroup: Unknown subsys name 'wlan0' [ 127.405175][ T831] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 127.428734][ T8837] netlink: 'syz.1.810': attribute type 5 has an invalid length. [ 127.437007][ T8837] cgroup: name respecified [ 127.567056][ T831] usb 5-1: Using ep0 maxpacket: 16 [ 127.570595][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.574585][ T831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.578539][ T831] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 127.581656][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.585806][ T831] usb 5-1: config 0 descriptor?? [ 127.698606][ T5937] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 127.763723][ T8858] netlink: 'syz.3.818': attribute type 39 has an invalid length. [ 127.807231][ T831] corsair 0003:1B1C:1B02.0003: hidraw1: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 127.870663][ T5937] usb 9-1: Invalid ep0 maxpacket: 64 [ 128.012388][ T5937] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 128.022574][ T8876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.028834][ T831] corsair 0003:1B1C:1B02.0003: Failed to get K90 initial state (error -71). [ 128.040191][ T831] usb 5-1: USB disconnect, device number 19 [ 128.068139][ T8883] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 128.121090][ T8890] netlink: 'syz.0.827': attribute type 12 has an invalid length. [ 128.124601][ T8890] netlink: 'syz.0.827': attribute type 12 has an invalid length. [ 128.175081][ T5937] usb 9-1: Invalid ep0 maxpacket: 64 [ 128.177230][ T5937] usb usb9-port1: attempt power cycle [ 128.216509][ T8902] binder: BINDER_SET_CONTEXT_MGR already set [ 128.220131][ T8902] binder: 8901:8902 ioctl 4018620d 2000000000c0 returned -16 [ 128.275054][ T8910] sg_read: process 644 (syz.3.834) changed security contexts after opening file descriptor, this is not allowed. [ 128.285979][ T5292] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.333498][ T8912] usb 2-1: USB disconnect, device number 2 [ 128.539547][ T5937] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 128.569520][ T5937] usb 9-1: Invalid ep0 maxpacket: 64 [ 128.637484][ T8937] netlink: 'syz.1.844': attribute type 62 has an invalid length. [ 128.644184][ T8937] netlink: 'syz.1.844': attribute type 4 has an invalid length. [ 128.654238][ T8937] netlink: 'syz.1.844': attribute type 4 has an invalid length. [ 128.658966][ T8937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=8937 comm=syz.1.844 [ 128.678386][ T41] kauditd_printk_skb: 30 callbacks suppressed [ 128.678401][ T41] audit: type=1400 audit(1775750915.653:604): avc: denied { mount } for pid=8938 comm="syz.3.845" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 128.689006][ T41] audit: type=1400 audit(1775750915.663:605): avc: denied { mounton } for pid=8938 comm="syz.3.845" path="/217/file0" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 128.701466][ T5937] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 128.705781][ T41] audit: type=1400 audit(1775750915.683:606): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 128.715430][ T41] audit: type=1400 audit(1775750915.693:607): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=36034 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 128.726309][ T41] audit: type=1400 audit(1775750915.693:608): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=36034 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 128.736002][ T5937] usb 9-1: Invalid ep0 maxpacket: 64 [ 128.738086][ T5937] usb usb9-port1: unable to enumerate USB device [ 128.756317][ T8949] __nla_validate_parse: 42 callbacks suppressed [ 128.756330][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 128.762955][ T8949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.849'. [ 128.832676][ T41] audit: type=1400 audit(1775750915.811:609): avc: denied { write } for pid=8957 comm="syz.3.853" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.053924][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 129.188586][ T8971] netlink: 'syz.3.856': attribute type 10 has an invalid length. [ 129.198707][ T8971] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.207103][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.210501][ T24] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 129.213950][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.217708][ T24] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.222308][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 129.226608][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.232294][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.235496][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.238439][ T24] usb 5-1: Product: syz [ 129.239937][ T24] usb 5-1: Manufacturer: syz [ 129.244328][ T8958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.249016][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.249553][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 129.253917][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 129.258379][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 129.260300][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 129.452803][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.455001][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.457410][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 129.459794][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 129.462009][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 129.472644][ T831] usb 5-1: USB disconnect, device number 20 [ 129.570915][ T41] audit: type=1400 audit(1775750916.543:610): avc: denied { read write } for pid=8976 comm="syz.1.859" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.581355][ T41] audit: type=1400 audit(1775750916.543:611): avc: denied { open } for pid=8976 comm="syz.1.859" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.702487][ T8977] lo speed is unknown, defaulting to 1000 [ 129.722607][ T41] audit: type=1400 audit(1775750916.692:612): avc: denied { ioctl } for pid=8976 comm="syz.1.859" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 129.842231][ T41] audit: type=1400 audit(1775750916.801:613): avc: denied { getopt } for pid=8986 comm="syz.1.861" lport=32797 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 129.842971][ T8987] sctp: [Deprecated]: syz.1.861 (pid 8987) Use of int in maxseg socket option. [ 129.842971][ T8987] Use struct sctp_assoc_value instead [ 129.896224][ T5292] Bluetooth: hci0: unexpected cc 0x0c7a length: 77 > 1 [ 129.899523][ T5292] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 130.432237][ T9025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.469285][ T9030] Bluetooth: MGMT ver 1.23 [ 130.503993][ T9036] x_tables: duplicate underflow at hook 3 [ 130.549664][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 130.771389][ T5937] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 130.771396][ T6159] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 130.922839][ T6159] usb 6-1: Using ep0 maxpacket: 8 [ 130.922872][ T5937] usb 5-1: device descriptor read/64, error -71 [ 130.926035][ T6159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.931271][ T6159] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.934613][ T6159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.938733][ T6159] usb 6-1: config 0 descriptor?? [ 131.147220][ T6159] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.185434][ T5937] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 131.336756][ T5937] usb 5-1: device descriptor read/64, error -71 [ 131.449396][ T5937] usb usb5-port1: attempt power cycle [ 131.529538][ T9057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.534573][ T9057] bond1: (slave bond2): making interface the new active one [ 131.537444][ T9057] bond1: (slave bond2): Enslaving as an active interface with an up link [ 131.702106][ T9069] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.704641][ T9069] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.755096][ T9069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.764953][ T9069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.800964][ T5937] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 131.823880][ T5937] usb 5-1: device descriptor read/8, error -71 [ 131.843502][ T92] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.851488][ T92] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.857145][ T92] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.860960][ T92] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.083708][ T5937] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 132.114284][ T5937] usb 5-1: device descriptor read/8, error -71 [ 132.240478][ T5937] usb usb5-port1: unable to enumerate USB device [ 132.348375][ T9088] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 132.412550][ T40] usb 6-1: USB disconnect, device number 16 [ 132.443692][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 132.450511][ T9090] vlan2: entered allmulticast mode [ 132.453208][ T9090] vlan0: entered allmulticast mode [ 132.455401][ T9090] veth0_vlan: entered allmulticast mode [ 133.516880][ T9110] /dev/nullb0: Can't open blockdev [ 133.784503][ T41] kauditd_printk_skb: 5 callbacks suppressed [ 133.784514][ T41] audit: type=1400 audit(1775750920.715:619): avc: denied { create } for pid=9123 comm="syz.0.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.792560][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.902'. [ 133.831326][ T41] audit: type=1400 audit(1775750920.765:620): avc: denied { shutdown } for pid=9125 comm="syz.4.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.868675][ T9128] validate_nla: 1 callbacks suppressed [ 133.868687][ T9128] netlink: 'syz.1.904': attribute type 10 has an invalid length. [ 133.873902][ T9128] macvlan0: entered allmulticast mode [ 133.877782][ T9128] veth1_vlan: entered allmulticast mode [ 133.885348][ T9128] team0: Port device macvlan0 added [ 133.966019][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 134.018480][ T9150] Cannot find add_set index 0 as target [ 134.069597][ T9153] /dev/nullb0: Can't open blockdev [ 134.098192][ T9157] 9p: Bad value for 'version' [ 134.322033][ T5937] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 134.370061][ T41] audit: type=1400 audit(1775750921.290:621): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 134.398589][ T41] audit: type=1400 audit(1775750921.320:622): avc: denied { getopt } for pid=9174 comm="syz.0.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.400755][ T9177] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 134.430040][ T9177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.458274][ T9177] bond3: (slave veth5): Enslaving as an active interface with a down link [ 134.473090][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 134.476498][ T5937] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 134.480894][ T5937] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.493246][ T5937] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.497844][ T5937] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 134.505689][ T5937] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 134.509569][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.512958][ T5937] usb 6-1: Product: syz [ 134.514895][ T5937] usb 6-1: Manufacturer: syz [ 134.516890][ T5937] usb 6-1: SerialNumber: syz [ 134.527695][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 134.536339][ T5937] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input11 [ 134.559954][ T9177] vlan2: entered allmulticast mode [ 134.561698][ T9177] bond3: entered allmulticast mode [ 134.573934][ T41] audit: type=1400 audit(1775750921.489:623): avc: denied { bind } for pid=9175 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.684730][ T1026] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 134.755260][ T5937] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 134.759033][ T5937] (id 0x00) [ 134.782651][ T41] audit: type=1400 audit(1775750921.697:624): avc: denied { read } for pid=9175 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.811077][ T41] audit: type=1400 audit(1775750921.737:625): avc: denied { append } for pid=9175 comm="syz.3.920" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 134.820616][ T41] audit: type=1400 audit(1775750921.737:626): avc: denied { read } for pid=9175 comm="syz.3.920" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.825887][ T5937] rc_core: IR keymap rc-imon-pad not found [ 134.829669][ T5937] Registered IR keymap rc-empty [ 134.830415][ T41] audit: type=1400 audit(1775750921.737:627): avc: denied { open } for pid=9175 comm="syz.3.920" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.831689][ T5937] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 134.843921][ T5937] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.849438][ T1026] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 134.853456][ T1026] usb 9-1: config 0 interface 0 has no altsetting 0 [ 134.860703][ T1026] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.864320][ T1026] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.867961][ T1026] usb 9-1: Product: syz [ 134.869422][ T1026] usb 9-1: Manufacturer: syz [ 134.871028][ T1026] usb 9-1: SerialNumber: syz [ 134.874821][ T1026] usb 9-1: config 0 descriptor?? [ 134.880699][ T1026] usb 9-1: selecting invalid altsetting 0 [ 134.969640][ T5937] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 134.975204][ T5937] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input12 [ 134.981369][ T5937] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:17> initialized [ 135.023126][ T41] audit: type=1400 audit(1775750921.945:628): avc: denied { map } for pid=9175 comm="syz.3.920" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 135.051551][ T9177] rdma_op ffff8880581619f0 conn xmit_rdma 0000000000000000 [ 135.220523][ T9201] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x100a7f pfn:0x5d189 [ 135.224788][ T9201] memcg:ffff888058e26a00 [ 135.226210][ T9201] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 135.229009][ T9201] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 135.229967][ T9155] imon:send_packet: packet tx failed (-71) [ 135.230630][ T6008] usb 6-1: USB disconnect, device number 17 [ 135.232760][ T9201] raw: 0000000000100a7f 0000000000000000 00000001ffffffff ffff888058e26a00 [ 135.237446][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 135.239242][ T9201] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 135.249648][ T9201] page_owner tracks the page as allocated [ 135.250472][ T9155] imon:vfd_write: send packet #0 failed [ 135.253307][ T9201] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9201, tgid 9197 (syz.3.928), ts 135220470889, free_ts 135218028882 [ 135.274168][ T9201] post_alloc_hook+0x153/0x170 [ 135.276577][ T9201] get_page_from_freelist+0x111d/0x3140 [ 135.280000][ T9201] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 135.281963][ T9201] alloc_pages_mpol+0x1fb/0x550 [ 135.283795][ T9201] folio_alloc_noprof+0x22/0x330 [ 135.285648][ T9201] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 135.288374][ T9201] filemap_alloc_folio_noprof+0x5e/0x80 [ 135.290927][ T9201] page_cache_ra_order+0x54b/0xf30 [ 135.293040][ T9201] filemap_fault+0x191a/0x2eb0 [ 135.294647][ T9201] __do_fault+0x10d/0x550 [ 135.296027][ T9201] do_fault+0xabb/0x18e0 [ 135.297545][ T9201] __handle_mm_fault+0x1815/0x2b60 [ 135.299954][ T9201] handle_mm_fault+0x36d/0xa20 [ 135.301813][ T9201] __get_user_pages+0xf9c/0x34d0 [ 135.303626][ T9201] populate_vma_page_range+0x267/0x3f0 [ 135.305431][ T9201] __mm_populate+0x107/0x3a0 [ 135.307046][ T9201] page last free pid 9198 tgid 9197 stack trace: [ 135.309133][ T9201] free_unref_folios+0xaea/0x1790 [ 135.311578][ T9201] folios_put_refs+0x53c/0x840 [ 135.313701][ T9201] truncate_inode_pages_range+0x30c/0x1050 [ 135.315812][ T9201] set_blocksize+0x2d1/0x460 [ 135.317525][ T9201] blkdev_bszset+0x19b/0x240 [ 135.319182][ T9201] blkdev_ioctl+0x513/0x6f0 [ 135.322118][ T9201] __x64_sys_ioctl+0x18e/0x210 [ 135.324276][ T9201] do_syscall_64+0x106/0xf80 [ 135.326331][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.331202][ T9201] ------------[ cut here ]------------ [ 135.333267][ T9201] kernel BUG at mm/filemap.c:858! [ 135.335078][ T9201] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 135.337561][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.3.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.343248][ T9201] Tainted: [L]=SOFTLOCKUP [ 135.345237][ T9201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.348419][ T9201] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 135.350986][ T9201] Code: 30 c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 21 30 c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 0a 30 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 fc 2f c5 ff 90 [ 135.358444][ T9201] RSP: 0018:ffffc900037ff3f8 EFLAGS: 00010287 [ 135.361224][ T9201] RAX: 00000000000738c6 RBX: 0000000000112cc0 RCX: ffffc9000d341000 [ 135.364067][ T9201] RDX: 0000000000080000 RSI: ffffffff82560d68 RDI: ffff888027232984 [ 135.366648][ T9201] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 135.369378][ T9201] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 135.372271][ T9201] R13: ffffea0001746240 R14: 0000000000000000 R15: 1ffff920006ffea9 [ 135.374916][ T9201] FS: 00007f67522be6c0(0000) GS:ffff8880d643c000(0000) knlGS:0000000000000000 [ 135.378265][ T9201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.380393][ T9201] CR2: 00007f67522bdff8 CR3: 000000005b89c000 CR4: 0000000000352ef0 [ 135.383462][ T9201] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 135.386383][ T9201] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 135.389228][ T9201] Call Trace: [ 135.390332][ T9201] [ 135.391310][ T9201] ? __pfx___filemap_add_folio+0x10/0x10 [ 135.393825][ T9201] filemap_add_folio+0x1d8/0x690 [ 135.396047][ T9201] ? __lock_acquire+0x4a5/0x2630 [ 135.398218][ T9201] ? __pfx_filemap_add_folio+0x10/0x10 [ 135.400547][ T9201] ? css_rstat_updated+0x1ce/0x5a0 [ 135.402731][ T9201] page_cache_ra_order+0x614/0xf30 [ 135.404910][ T9201] filemap_fault+0x191a/0x2eb0 [ 135.406701][ T9201] ? __pfx_filemap_fault+0x10/0x10 [ 135.408431][ T9201] ? __pfx_filemap_map_pages+0x10/0x10 [ 135.410388][ T9201] __do_fault+0x10d/0x550 [ 135.411901][ T9201] do_fault+0xabb/0x18e0 [ 135.413301][ T9201] __handle_mm_fault+0x1815/0x2b60 [ 135.415044][ T9201] ? mt_find+0x45e/0x8e0 [ 135.416624][ T9201] ? __pfx___handle_mm_fault+0x10/0x10 [ 135.418700][ T9201] ? __pfx_mt_find+0x10/0x10 [ 135.420322][ T9201] handle_mm_fault+0x36d/0xa20 [ 135.422389][ T9201] __get_user_pages+0xf9c/0x34d0 [ 135.424270][ T9201] ? __pfx___get_user_pages+0x10/0x10 [ 135.426113][ T9201] populate_vma_page_range+0x267/0x3f0 [ 135.427894][ T9201] ? __pfx_populate_vma_page_range+0x10/0x10 [ 135.430186][ T9201] ? __pfx_find_vma_intersection+0x10/0x10 [ 135.432218][ T9201] ? do_mmap+0x93f/0x12f0 [ 135.433912][ T9201] __mm_populate+0x107/0x3a0 [ 135.435623][ T9201] ? __pfx___mm_populate+0x10/0x10 [ 135.437949][ T9201] ? up_write+0x290/0x4f0 [ 135.440029][ T9201] vm_mmap_pgoff+0x37f/0x470 [ 135.441734][ T9201] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 135.443655][ T9201] ? __fget_files+0x215/0x3d0 [ 135.445257][ T9201] ? __fget_files+0x21f/0x3d0 [ 135.447102][ T9201] ksys_mmap_pgoff+0x3c8/0x650 [ 135.449184][ T9201] ? kcov_ioctl+0x16a/0x720 [ 135.451225][ T9201] ? kfree+0x2ec/0x6b0 [ 135.452969][ T9201] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 135.455133][ T9201] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.457559][ T9201] __x64_sys_mmap+0x125/0x190 [ 135.459714][ T9201] do_syscall_64+0x106/0xf80 [ 135.461938][ T9201] ? clear_bhb_loop+0x40/0x90 [ 135.464151][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.466728][ T9201] RIP: 0033:0x7f675139c819 [ 135.468623][ T9201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.476351][ T9201] RSP: 002b:00007f67522be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 135.480007][ T9201] RAX: ffffffffffffffda RBX: 00007f6751616090 RCX: 00007f675139c819 [ 135.483349][ T9201] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 135.486752][ T9201] RBP: 00007f6751432c91 R08: 0000000000000004 R09: 000000000f080000 [ 135.489611][ T9201] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 135.492870][ T9201] R13: 00007f6751616128 R14: 00007f6751616090 R15: 00007fff623e3a78 [ 135.495959][ T9201] [ 135.496997][ T9201] Modules linked in: [ 135.498907][ T9201] ---[ end trace 0000000000000000 ]--- [ 135.501909][ T9212] --map-set only usable from mangle table [ 135.508906][ T9201] RIP: 0010:__filemap_add_folio+0xfcf/0x1280 [ 135.511313][ T9201] Code: 30 c5 ff 48 c7 c6 e0 39 bd 8b 4c 89 ef e8 e9 3f 12 00 90 0f 0b e8 21 30 c5 ff 48 c7 c6 40 3a bd 8b 4c 89 ef e8 d2 3f 12 00 90 <0f> 0b e8 0a 30 c5 ff 90 0f 0b 90 e9 4b fe ff ff e8 fc 2f c5 ff 90 [ 135.518629][ T9201] RSP: 0018:ffffc900037ff3f8 EFLAGS: 00010287 [ 135.521036][ T9201] RAX: 00000000000738c6 RBX: 0000000000112cc0 RCX: ffffc9000d341000 [ 135.524000][ T9201] RDX: 0000000000080000 RSI: ffffffff82560d68 RDI: ffff888027232984 [ 135.527280][ T9201] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 135.530026][ T9201] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000004 [ 135.534142][ T9201] R13: ffffea0001746240 R14: 0000000000000000 R15: 1ffff920006ffea9 [ 135.537469][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.928'. [ 135.537509][ T9201] FS: 00007f67522be6c0(0000) GS:ffff8880d643c000(0000) knlGS:0000000000000000 [ 135.545261][ T9201] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.548027][ T9201] CR2: 00007f675225aff8 CR3: 000000005b89c000 CR4: 0000000000352ef0 [ 135.551733][ T9201] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 135.554738][ T9201] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 135.558371][ T9201] Kernel panic - not syncing: Fatal exception [ 135.561766][ T9201] Kernel Offset: disabled [ 135.563609][ T9201] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:30:34 Registers: info registers vcpu 0 CPU#0 RAX=000000533e2b9c5e RBX=ffff88806a423f80 RCX=00000000000006e0 RDX=0000000000000053 RSI=ffff88806a423f80 RDI=0000000000000145 RBP=0000000000000145 RSP=ffffc9000ca979b8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000019 R14=0000000000000000 R15=ffffed100d4847f5 RIP=ffffffff81b563a5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556d132500 ffffffff 00c00000 GS =0000 ffff8880d633c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffbb157a00 CR3=000000005d368000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857a7b55 RDI=ffffffff9b4aa040 RBP=ffffffff9b4aa000 RSP=ffffc900037fecd8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=7a7973203a6d6d43 R12=0000000000000000 R13=0000000000000050 R14=0000000000000010 R15=ffffffff857a7af0 RIP=ffffffff857a7b7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f67522be6c0 ffffffff 00c00000 GS =0000 ffff8880d643c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f67522bdff8 CR3=000000005b89c000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=00000000000c0000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557fe81ba600 0000557fe81ba600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff59052930 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59535f7972746e65 20205d3130323954 205b5d3133333632 332e35333120205b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7374202c29383239 2e332e7a79732820 3739313920646967 74202c3130323920 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646970202c294c4c 4157445241485f50 46475f5f7c504d4f 435f5046475f5f7c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59525445524f4e5f 5046475f5f7c4e52 41574f4e5f504647 5f5f7c53464f4e5f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000533e872070 RBX=ffff88806a623f80 RCX=00000000000006e0 RDX=0000000000000053 RSI=ffff88806a623f80 RDI=00000000000383ca RBP=00000000000383ca RSP=ffffc90000648ed0 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc90000648ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000019 R15=ffff88806a6284c0 RIP=ffffffff81b563a5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2fbdeea6c0 ffffffff 00c00000 GS =0000 ffff8880d653c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2fbdd4da08 CR3=000000005d368000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbb1593d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbb1593d6 00007fffbb1593dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fbd033274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fbd0332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fbd033418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fbd0332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2fbd1ec5f8 00007f2fbd1ec5c8 00007f2fbd1ec600 00007f2fbd1ec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a73c3c0 RCX=ffffffff81fcb48e RDX=0000000000000001 RSI=0000000000000000 RDI=ffff88801ea88000 RBP=ffffc90000157cd8 RSP=ffffc90000157b78 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a633ce0 R12=1ffff9200002af78 R13=ffffed100d4e7879 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff8208f650 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d663c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000020000006b000 CR3=000000002e3cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000002082001 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555888a018c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005558889fe360 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f16e3ff1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffff00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373262bfbedf3c3 7373262bfbeda9e3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737322 7373737343041201 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7475706e692f7475 706e692f302e3535 313a312d362f312d 362f366273752f31 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316573756f6d2f31 317475706e692f74 75706e692f302e35 35313a312d362f31 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d362f366273752f 312e6463685f796d 6d75642f6d726f66 74616c702f736563 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c4339 312c3739312c3938 312c3838312c3538 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000