last executing test programs: 2m12.31142712s ago: executing program 1 (id=545): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x6bee, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff, 0x2}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) 2m12.289622078s ago: executing program 1 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 2m11.72619691s ago: executing program 1 (id=553): r0 = socket$netlink(0x10, 0x3, 0xb) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x2201) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001010242cabe24d980200"/26, @ANYRES32=0x0, @ANYBLOB="000000004c2401005800128008000100767469004c000280080004000a010101080005000a0100fe080004006401010208000600456b612d08000100", @ANYRES32=0x0, @ANYBLOB="0800020005000000080006000e00000008000600040000000800020009000000"], 0x78}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001010242cabe24d980200"/26, @ANYRES32=0x0, @ANYBLOB="000000004c2401005800128008000100767469004c000280080004000a010101080005000a0100fe080004006401010208000600456b612d08000100", @ANYRES32=0x0, @ANYBLOB="0800020005000000080006000e00000008000600040000000800020009000000"], 0x78}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x420400, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000140)={0x9, 0x3}) 2m11.664652859s ago: executing program 1 (id=556): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000440), 0x103000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000070500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r4, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r5, @ANYBLOB="040046000a0034000101010101010000080026006c0900008000518020000080090001"], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x74, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044000}, 0x804) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(r6, r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x83, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x40000) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000016c0)={&(0x7f0000001000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000107000000890704ac13f6bb00"], 0x18}, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@type=0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000400007010000000003000000047c00000400d9804d9a3a72d4f7d135790da1eeb23e1bfff9a29117363a31ba6beb3fedd21620cadbd3455bcd458c1cc3c71dcd7d55cc6d52f5c89d34fe17356ddc0600000018767d5f21789f60f37e9fd16e272376e2019b20ac74e6c52f40a60146ac5ee725fe08e79c68235f2b717e19532843b898d677a492749bafacbaaac6c212fd52ceee0b647900"], 0x9c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) 2m11.466098421s ago: executing program 1 (id=559): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x47f, &(0x7f0000001080)={0x0, 0xa065, 0x3180, 0x22, 0x31a}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x628, 0xc88d, 0x43, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 2m10.644914691s ago: executing program 1 (id=562): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x1, 0x1, 0x56555958, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}}) (async) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x101681, 0x0) read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) 2m10.36707568s ago: executing program 32 (id=562): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x1, 0x1, 0x56555958, 0x9, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xf, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a34277310, 0x1}}) (async) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x101681, 0x0) read$FUSE(r1, &(0x7f00000006c0)={0x2020}, 0x2020) 2m9.71193836s ago: executing program 2 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x100}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='bond0\x00') (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='bond0\x00') sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="000000000a0002", @ANYRES16=r2, @ANYBLOB="bcfbe077e980ac95cd93bb87007cfd5588200b9d66d80f1a5193aaa4de0257699c97b4c539ba711f9b69fadca592a9873946436ecaa1479d245856b08f56b517f03468aed4bed96c57944c70846c0b167018ceaeea6b05666917a668b29d7fa2170e61d2764d9284489c40b77cc33998a2b1ad2b979739248a98fb6fb17fb0c636bc69b3eeadb9dbd1e0a41ea431604b624eeb2f44f709f6de7c1c8294a20dab596ff51b439d35be62e2b6bce28e8ea83a70008e0856f3ad6907e2a2ef9b919d93b9"], 0x28}}, 0x0) 2m9.625439953s ago: executing program 2 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) userfaultfd(0x801) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000004c0)={0x8f, 0x0, 0xd}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) userfaultfd(0x801) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000004c0)={0x8f, 0x0, 0xd}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) 2m9.057548985s ago: executing program 2 (id=574): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) preadv2(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/143, 0x8f}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x2, 0xffffff32, 0xd) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000001180)) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000011c0), 0x4) syncfs(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x44010) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), r2) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001400)={@private1, 0x0}, &(0x7f0000001440)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000014c0)=[0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000001540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0x83, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000001840)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x74, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x20000080) r8 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r9 = dup(r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r1, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000018c0)=[0x0, 0x0], &(0x7f0000001900)=[0x0], 0x0, 0x4b, &(0x7f0000001940)=[{}, {}], 0x10, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e40)={r8, 0xe0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f0000001c40)=[{}, {}], 0x10, 0x10, &(0x7f0000001c80), &(0x7f0000001cc0), 0x8, 0x87, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4) io_setup(0xa7, &(0x7f0000001f00)=0x0) r11 = eventfd2(0x3, 0x80801) io_cancel(r10, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000001f40)="6fe3ceaad07c12c7ce41280b6cb2af37fa2b93e8058d8306471537acde9a5f2e529b", 0x22, 0x75, 0x0, 0x1, r11}, &(0x7f0000001fc0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r8, 0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000002000)) sendmsg$NL80211_CMD_GET_SURVEY(r9, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xe0, 0x23}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x1) ioctl$KVM_GET_EMULATED_CPUID(r8, 0xc008ae09, &(0x7f0000002300)={0x2, 0x0, [{0xb, 0x7f, 0x7, 0xc32, 0x4, 0x9, 0x4}, {0xc0000001, 0x7, 0x3, 0x8000, 0x1, 0x5, 0x80000001}]}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r12, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x3c, r13, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4060850}, 0x24040081) sendto$inet6(0xffffffffffffffff, &(0x7f0000002500)="20c8a55cd40e49b5bb30e6d88b552a46957d9cdad5cfb8fd5b2cf21ed3fd2140e559f7cae17a12475d8aee67c8156427447b9939a650bd6c047a48660d59fcfddbe8fbada9f530dc083270e3d2aec43cdff193eb9ca2ec938ec293da720e906a11fae3c1ec1a0e1e0ffc70dfbf935e3ccfcb381182a12e1ef3468e35eb44ce07a3e11edc195be32a2b7bb0a3d2b2af183d0d50b52ff47ba0b6147bc861de2cada30a05fa5c5787f9039aacaecd3861e5e96d37dd0ce5bfce384c2baa9573e737ab6f30aae1f5d26598251507e8ed", 0xce, 0xd574e2acebdf9bff, 0x0, 0x0) 2m8.747143051s ago: executing program 2 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8) write$sysctl(r0, &(0x7f0000000040)='1\x00', 0x2) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000), 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) read$FUSE(r6, &(0x7f0000002480)={0x2020}, 0x2020) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r8 = accept(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6", 0x11}], 0x1}], 0x1, 0x0) recvmsg(r8, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r9, 0x0, 0x0, 0x40020022, 0x0, 0x0) 2m7.796163453s ago: executing program 2 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x4}}}, 0x24}}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r5, &(0x7f0000000740)=""/384, 0x200008c0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f00000000c0)={0x12}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m2.503806266s ago: executing program 2 (id=583): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24010010}, 0x4000890) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 2m2.330294955s ago: executing program 33 (id=583): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24010010}, 0x4000890) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 49.770925038s ago: executing program 5 (id=1071): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b18010000000009043200019740a40009058203ff03"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001580)="deed1c9b7ca0b42d0175e810d20d0ec3aa74bca1a3ab0500ba602b1cc5755dd9fc910300c9fbafa48a82d6a5a48ca4b1ed92b2f7f4caadf3f6b6153222f3a873944eff2d4f1f4845daf749", 0x4b) 48.304622886s ago: executing program 5 (id=1080): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x26081, 0x0) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) open_tree(r0, &(0x7f0000000040)='./file0/file0\x00', 0x80001) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000002100), 0x840400, &(0x7f0000000100)=ANY=[]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) io_setup(0x8003, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000753c3e4fe1a579e6921f2298e6f94d227047059500"/41, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) flock(r0, 0x3bb20122a51ee44d) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x4, 0x0) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x2, r4, 0x0, 0x0, 0x100000}]) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0xffffffffffffffda, r2, {0x7, 0x29, 0x0, 0x14d2b48, 0x40, 0x4001, 0xfffffff1, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x14a900, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r8, 0x400454c9, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_WRITE(r9, &(0x7f00000001c0)={0x18, 0x0, r2, {0x8}}, 0x18) r10 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000780)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xc, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10000, 0xd2) 47.895262166s ago: executing program 5 (id=1085): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x5, 0x6, 0x1e05da0d, 0x0, 0x7, 0x4e, 0x1, 0x62, 0x5, 0x2, 0x2], 0x4000, 0x1244}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002980), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000029c0)={0x9, 0xa5a, {0x52, 0x676, 0x5, {0xcb5, 0xc0c}, {0x9, 0x3}, @ramp={0x8, 0x7a, {0x7f5a, 0x752b, 0x0, 0x8}}}, {0x55, 0x4, 0x1551, {0x0, 0x7}, {0x1000, 0xcbf}, @const={0x171, {0xfff8, 0xa, 0x7624, 0x4}}}}) 47.813726449s ago: executing program 5 (id=1087): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) writev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}, {&(0x7f00000012c0)="361880853a70294931a79d1451eaa604703c25909bb1e9fac5d8a149d894f3950f32a11202b51f30d8c727a4ecd53f466a002eb67964e39b014ebbd9228f09", 0x3f}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) preadv2(r4, &(0x7f0000001c80)=[{&(0x7f00000019c0)=""/111, 0x6f}], 0x1, 0x0, 0x10000000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7, 0x80, 0xfff, 0x5, {{0x10, 0x4, 0x0, 0xd, 0x40, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @rr={0x7, 0x27, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @multicast1, @remote, @rand_addr=0x64010102, @multicast1]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getchain={0x0, 0x66, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xf, 0xd}, {0xffff, 0xa}}, [{0x0, 0xb, 0x1a}]}, 0x6c}}, 0x24004004) 41.220912953s ago: executing program 5 (id=1094): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r0, r0, 0x2e7b74, 0xbe00000000000000, 0x9, 0x320859}) unshare(0x20000000) unshare(0x10010000) unshare(0x4000c00) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000340)={0x6, 0xffffffffffffffff, 'id0\x00'}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r5 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x509101, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xb338, 0x400, 0x40000, 0x19a}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x35, 0x0, @fd=r5, 0xdd, 0x0, 0x0, 0xa, 0x0, {0x2}}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0xacba, 0x8}, 0xc) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000600)='.pending_reads\x00', 0x10000, 0x59) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x70, &(0x7f00000002c0)=""/112, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x5, 0x80, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[r2, 0xffffffffffffffff, r3, r4, r5, r6, r9, r10, r11, r12], &(0x7f00000006c0)=[{0x4, 0x2, 0x9, 0x1}, {0x3, 0x1, 0x4, 0x9}, {0x1, 0x1, 0x7, 0xa}, {0x4, 0x4, 0x6, 0xc}, {0x4, 0x4, 0x5, 0x9}, {0x1, 0x4, 0xd, 0x7}, {0x1, 0x4, 0xe, 0x4}, {0x3, 0x1, 0x2, 0xa}], 0x10, 0x7}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b000000eaffffff00000600000008000300040001080c000180"], 0x28}}, 0x8000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r15) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r16, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000) ioctl$NS_GET_PARENT(r14, 0xb702, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 40.88422298s ago: executing program 5 (id=1098): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x80, 0xc7, {}, {0xee01}, 0x5, 0xd36}) (async) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async, rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 64) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000000)) (async) nanosleep(&(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000001c0)) r4 = semget$private(0x0, 0x4, 0x0) semtimedop(r4, &(0x7f0000000200)=[{0x3, 0x94, 0x1000}, {0x1, 0x8, 0x800}, {0x2, 0x2, 0x1000}, {0x1, 0x3, 0x800}, {0x0, 0xf615, 0x3000}], 0x5, &(0x7f0000000280)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYRES16=r6, @ANYRES32=r1], 0x6f4}}, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000e10f001fff000000008000000000000000f9df703d434db52804ba14943defbe78ecbd46fccfea487118f3aad08d0377dfd6d3cc8ed4ea6a8abccd52f4438bfd72c5cde5d5bf3b330ffed3da61", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800b00010062726964676500000c0002800600270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r9, &(0x7f00000003c0)={0x18, 0x0, r10, {0x7}}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000500)="66baf80cb8c0fe7f84ef66bafc0c66b8e06866ef0f796a9566baf80cb828481f80ef66bafc0cb000ee65480fc725aa000000420f01ca6567f3450fbc7903c443fd00c003c7442400fa000000c744240283961f30ff1c24f346ac6766440f135d0a"}], 0xaaaaaaaaaaaabc1, 0x40, 0x0, 0x5b) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xeeee0000, 0x10000, 0x7}}, "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", "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"}) (async, rerun: 64) ioctl$KVM_RUN(r0, 0xae80, 0x0) (rerun: 64) 25.452630683s ago: executing program 34 (id=1098): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x80, 0xc7, {}, {0xee01}, 0x5, 0xd36}) (async) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async, rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x2, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async, rerun: 64) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000000)) (async) nanosleep(&(0x7f0000000580)={0x0, 0x989680}, &(0x7f00000001c0)) r4 = semget$private(0x0, 0x4, 0x0) semtimedop(r4, &(0x7f0000000200)=[{0x3, 0x94, 0x1000}, {0x1, 0x8, 0x800}, {0x2, 0x2, 0x1000}, {0x1, 0x3, 0x800}, {0x0, 0xf615, 0x3000}], 0x5, &(0x7f0000000280)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYRES16=r6, @ANYRES32=r1], 0x6f4}}, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000e10f001fff000000008000000000000000f9df703d434db52804ba14943defbe78ecbd46fccfea487118f3aad08d0377dfd6d3cc8ed4ea6a8abccd52f4438bfd72c5cde5d5bf3b330ffed3da61", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800b00010062726964676500000c0002800600270000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r9, &(0x7f00000003c0)={0x18, 0x0, r10, {0x7}}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000500)="66baf80cb8c0fe7f84ef66bafc0c66b8e06866ef0f796a9566baf80cb828481f80ef66bafc0cb000ee65480fc725aa000000420f01ca6567f3450fbc7903c443fd00c003c7442400fa000000c744240283961f30ff1c24f346ac6766440f135d0a"}], 0xaaaaaaaaaaaabc1, 0x40, 0x0, 0x5b) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xeeee0000, 0x10000, 0x7}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826571ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adb41456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1c9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa86ec82a9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed5859b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df543127ded78de1ec3501841308c7c9f752aa06927fd1fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e259ce021216b731de25e1245401010000de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d744bbdba7d282aac778b7ec1dcaf984527c81273eaf9bab774d1598d98100000000e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07f8ff2e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d095862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d23f3054cc791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf40334f3bba1a9aa76c5ab0b8819fe6efe3fbeb899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e1549d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4061d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async, rerun: 64) ioctl$KVM_RUN(r0, 0xae80, 0x0) (rerun: 64) 6.271242661s ago: executing program 3 (id=1265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007b00), 0xffffffffffffffff) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r5, r5, 0x0, 0x24002de8) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10a, 0x0, 0x80000000}]}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000007b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010038bd7000fddbdf2508000000100600800900010900797a3100000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000001300)="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", 0xd02, 0x40045, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000012c0)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f00000000c0)={0x0, 0x8e}) 6.085510542s ago: executing program 0 (id=1266): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x22) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x12, 0x6e9, 0x5, 0x6}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000038ffffffffffffff00cbeb04f549cac102", @ANYRES32=0x0, @ANYBLOB="8842000000000000280012800b00010067656e65766500001800028014000700fc0100000000000000000000000000001400030067656e65766531000000000000000000"], 0x5c}}, 0x26040090) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb) r5 = syz_clone(0x2000000, &(0x7f0000000340)="060d47f1e7e07bcf10318022a84532f217da9c48de7ab7da61cf43e15815aeff01c4adb659f8be43206db2aca4024cb76e915867f34f141aabbabf57e671e87f567b0533bcbf687ee8af1ad5e9884195a75aa0d16c69837a0b6a68a095779b3c1aa9c5eb167ee4ff5a4145f95ea2d2b936c6758091ffac4e3b12f2a4a3b7047fa0d3ef3d820a7d8ac7629f0b647bf71b1032c897ab8733a012a182339ff1fad1851a136a9ea5adff6a22734b67e41b8e252a01e6ca53884e8e0d97d119395d9360b0aecab1604023ce396db501fc149740f74d26f96db26ce49f57ea054e9dd0bd0de03ba8", 0xe5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000600)="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") r6 = getpgrp(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x30, 0x5, @val=@iter={&(0x7f0000000140)=@task={r5, r6, r0}, 0x10}}, 0x20) 5.833529006s ago: executing program 0 (id=1267): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r5}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r6}, 0x10) io_uring_enter(r2, 0x2dbe, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r8 = syz_io_uring_complete(0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r10, 0x1, 0x70bd2d, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r10, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r11 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000340)={r11}) r13 = socket$packet(0x11, 0x3, 0x300) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r14, 0x400455c8, 0x4) ioctl$TIOCSTI(r14, 0x5412, &(0x7f0000000040)=0x34) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r12, &(0x7f00000005c0)={0x2d, 0x0, r15, 0xc}, 0x10) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r1) sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) r16 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r16, 0x10e, 0xc, &(0x7f0000000280)={0x81, 0x1, 0x5}, 0x10) 5.16221723s ago: executing program 3 (id=1271): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000400)=""/163) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000003c0)='(', 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='rpc_clnt_new_err\x00', r3, 0x0, 0xf5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x8, 0x8, 0x9, 0x402, 0x43}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000001c0)="59093d4709256a4217a8dcc04725cfec6f03a0fbac7cd9e460378a3e6faf9689d228b0ebbd06", 0x26) close_range(r1, 0xffffffffffffffff, 0x0) 4.106899799s ago: executing program 3 (id=1275): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b18010000000009043200019740a40009058203ff03"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001580)="deed1c9b7ca0b42d0175e810d20d0ec3aa74bca1a3ab0500ba602b1cc5755dd9fc910300c9fbafa48a82d6a5", 0x2c) 3.704050128s ago: executing program 6 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0xf8, 0x2, 0x5, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='C\x00'], 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_delrule={0x40, 0x21, 0x800, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x40, 0x8, 0x0, 0x0, 0x4, 0x1001c}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10001}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet_nvme_pdu(r2, &(0x7f00000001c0)=@data_c2h={{0x7, 0x9, 0x18, 0x40, 0xffffff00}, 0x522, 0x14, 0x8, 0x9297, "5516ae82"}, 0x80, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0xf8, 0x2, 0x5, 0x2}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='C\x00'], 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_delrule={0x40, 0x21, 0x800, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x40, 0x8, 0x0, 0x0, 0x4, 0x1001c}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x10001}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendto$inet_nvme_pdu(r2, &(0x7f00000001c0)=@data_c2h={{0x7, 0x9, 0x18, 0x40, 0xffffff00}, 0x522, 0x14, 0x8, 0x9297, "5516ae82"}, 0x80, 0x0, 0x0, 0x0) (async) 3.404170617s ago: executing program 6 (id=1277): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x101200, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @dev}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000480)={'syztnl0\x00', r1, 0x4, 0x7, 0x1, 0x4, 0x4f, @local, @mcast2, 0x40, 0x8000, 0x9, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000002c0)={0x6, 0x1, {0xffffffffffffffff, 0x0, 0x12f, 0x1, 0xd}, 0x800}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) r3 = inotify_init1(0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getenv(0x4201, r4, 0x4, &(0x7f0000000140)) r5 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r5) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455cb, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c3d62696e643a302d313a312f4e00665497894ffdc8d645485059f21563e3e8ca4a5db04a3cd9e7a94c0a28ffe2c01500f2f18c879adc1cc8202ccc6ef7b38983b1adc19009b0660df8d10c19f4967077f43101439047662e5004ff89dd9f184ab75338cca28ab35e245f707b2c63f0b3c6c2bfe422"]) r6 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000007030000000000000000000a0000090c0006400000000000f8ff070c00024000000000000000050900010073797a30000000000800224000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000080)={0x1, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 2.504329252s ago: executing program 3 (id=1278): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0xfffffffc, 0x63, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 2.153270278s ago: executing program 6 (id=1279): r0 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r0, 0x1) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) r2 = open_tree(r1, &(0x7f0000000100)='./file0\x00', 0x801) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000140)={0x27, 0x1c, 0xd, 0x2, 0x2, 0xfff, 0x4, 0x9f, 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x4e22, 0x3, @remote, 0x10000}], 0x98) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r2, 0x2, 0x0, @void}, 0x10) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0x8004510b, &(0x7f0000000280)) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/bsg/0:0:0:0\x00', 0xc100, 0x0) ioctl$BSG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000300)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) recvmsg$unix(r5, &(0x7f0000000680)={&(0x7f0000000380), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/2, 0x2}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000500)=""/161, 0xa1}], 0x3, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x103) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000006c0)={0x0, 0x1c90, 0x4, [0x9, 0xff, 0x4, 0x7]}, &(0x7f0000000700)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000740)={r6, 0xfff, 0x3, [0x2, 0xe1, 0x1]}, 0xe) fremovexattr(r1, &(0x7f0000000780)=@known='security.selinux\x00') fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000840)={0x1, 0x106000}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mkdir(&(0x7f0000000880)='./file0\x00', 0x4) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) writev(r4, &(0x7f00000010c0)=[{&(0x7f0000000980)="be482398461af519b1b284b5ce284c1e866964bcc1e41844f714a21896884b039dd294ede89ff3c109709993810936a37d6ffa23a4e59b9dc14f3b4e9266f12ffaee261f002bd73f7d1943d73c4cc9c1069f7c1351bc1e4dcb29cc6d87608a14e1b1b1bb29374dcdb017163d3c17e637348a08807d00bc9211a935908b85b0a2a437a2128a5758d0c38eb19fac999a7bc812d0f675cc4140bd18c0bb4fba191b1267eb5809df8fcc4b2354f8c875aff87594e7067213ed208ec83e008d4873b12ae8b90f892b33b3958a5962ab51ad3aafd2f3ea8571edfb593e5d9dde0b6d", 0xdf}, {&(0x7f0000000a80)="0f097b65d03a86c6f323ab837acea30cc0559a249a726c7189e53af34ab5525eb215b530e276f47cd939b5983e63e2986ea9a19f10ba5e3e1ee007459d6c8398fd65fad5a65c2bc478be41fce1ce4c787d67fe9500c827938d88aacf7b29977fb7eee2fb433d1e27666288781b5fc2ddb749a5019f38407e8363a798ec1c6f687f", 0x81}, {&(0x7f0000000b40)="b1f0e940d66cd85deaa5710e7e8d6d823b21e4c2680b1125082ca43c567a9595026bcb69915f9a4f5900cc2af4ec9ce2225bc55115b1ff586c102a82b3ac26144475cd0cd262d70c4e00e0acb250faca6eb4322ea75e70ef1d61a691528d731b0d73648cdcae63f1692ffb4fc6e190b08c00f2cb991a25d6259a9b7b2da99a5848e06e12e2cc2563", 0x88}, {&(0x7f0000000c00)="87f2b5932a9f0e18f17280f4ed777c360e30069ef61fc0d0d2451429e6e8caf046b9a66f41346ac2e6c711d18a5e471780fb925b0c7075e6ec6f9c25a466c8424bfa5be15e89f436258fee1af327e86af07ec570925fd7804f6019acd8cab9c83162f3bcbc39d26a85acf8020658daa8e575fd649b1b50eac533518cf3b77385d324411b20cda9058b586cf52461887706fc672c604444917d56ea1448c9859c9e60fb603033c4bb06b823c58b7e54eff249f51774229f75082952fec81a72afa69504694461109e9a795ac262202fb19168db8848971ecc486ce475562751ebae12cf8d30ae1f1d991d673414930d66", 0xf0}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)="508ea36a45b4bf51eead6b71a275dc9905f92ece32873f7ef9fddcdffb9422f6ea326ce93af6a4e6ec101d14a2198b17ae880fd3d35c9d9812b3a95643d2a3f5c9f41c4873637ec40e190a6b80044907cab443894da8927ca04a525576c0b1980fbb29493b7195c2caf52b4519ea0a05cb480a349b0cf68e1d177b4718239f332e", 0x81}, {&(0x7f0000000e00)="619040693a72168f169d7456798f09a63b9629603a0b83391f16c27cf86d7e4a9969d6f2ad00f56dfbfc2d296cd81f0500b990716104538c42f7a46e51eb2168409ce1ea4131a73beff6b7ac631df86cd0eaeae589da2edd9d8d1a354b50750651b7ac07913e301ed55ec3697ce134537e0a7d82cc8e4229a765909b7988aef9b7b68e155f375b8afe335b4447a1a4556a9e20d07b70601897b7ba516611cb91a53ed5405ea6af2cdac602d72818daca592a13058c7e62ab88be26ff7b3a64", 0xbf}, {&(0x7f0000000ec0)="c5cc93627a8be6f45ea3e7948d366e4989195f8946b305d84c2a75dc9610afb18f286d283d07e8a05fc0b0012daa3d29e811f8d82531e40f0acbd59e8e1e5e82f4c17e63d122b7595809f514175590ebef8880bb6da8eb230dea3c65fea6cbe0fcf2a28606de1a7d9fb6b21efd6c658d90bf5d9d7ebbde8d5c04a9bb3838b2d983493992674749fe3076d8d797196b46f4bb9227a7a5a08b11079728514af9c4a15e6b5dff6ff9bd5ac43ad6a9e1fc7518347f983a974b36a308fafa371e68c6d3031e6aee", 0xc5}, {&(0x7f0000000fc0)="9954568040d1be4235e204518150a27356fbb94fcbf65333b8937f22066481dc18caf0018b2654075f05f1f00e8bb4225e21a37085be40af5265f13b903238b86c451c1558ccf24b58d33331c4cbc4cf75ae328affd3eb2e9a77c6cbfbe929e1715223a4abc997ee3089264908399c0b9649f21cea68a1e10fd52115edc84a6f27b854e572627bfb1a077428ba14f45a4e21fd125c8ab90fb0fea18b26eead342ad79e80ef4c4e5d5d9d3df4db7c9fcc15af71dc6739defa4f5ab588e397a5e992274db4efd444a967a160b4da7f6be8315ec61c96f9aaac", 0xd8}], 0x9) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000001180), &(0x7f00000011c0)=0x4) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001240)) 1.874820824s ago: executing program 0 (id=1281): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffff"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2}, 0x94) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14001b190a5c000000060a0b04000000000000000002000000300004802c0001800a00010071756f74610000001c0002800c00044000000000000000050c00054000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/132], 0x84}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.873447447s ago: executing program 6 (id=1282): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltfilter={0xca4, 0x2d, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0xffff, 0xfff1}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc78, 0x2, [@TCA_BPF_POLICE={0xc64, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x6, 0xfffffffd, 0x100, {0x81, 0x1, 0x0, 0x81, 0x7, 0x1}, {0x5, 0x2, 0x6, 0x6ab, 0x5, 0x1}, 0x3, 0x8, 0xfffffffd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x200, 0x4, 0x4, 0x8, 0x1d37, 0x8, 0x200, 0x6, 0x1, 0x4, 0x7, 0x769547d, 0xe, 0x60000, 0x3, 0xe, 0xbea, 0x10000, 0xf, 0x1051, 0x3, 0xc, 0x8, 0xf8b, 0x0, 0x1e65, 0x6, 0x0, 0x4, 0xaecb, 0xd, 0xb, 0x101, 0xba5, 0x6e5aad55, 0x8, 0x0, 0x5, 0xb6b, 0x3f800, 0xc12, 0x4, 0x1, 0x2, 0x8, 0x6, 0x8, 0x23, 0x5, 0x2, 0x10, 0x7fffffff, 0xe7b, 0x23, 0x401822d, 0x6, 0x1000, 0x4, 0x3ff0000, 0x8, 0x6, 0x28a7, 0xc, 0x4, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7fff, 0xfffffff8, 0x4, 0x5, 0x1, 0x7, 0x3, 0x9, 0x3, 0x0, 0x1, 0x2, 0x2, 0x800, 0x1, 0x6, 0xc, 0x0, 0x3, 0xfffff389, 0x100, 0x6, 0x0, 0x81, 0x5, 0x950a, 0x9b4, 0x0, 0x0, 0x4, 0xfffffff7, 0x10000, 0xfffffff9, 0xfff, 0x7, 0x6, 0x33f1f629, 0x4, 0x6, 0x8, 0x10, 0x81, 0x70, 0x40, 0x0, 0xfffffffc, 0x8, 0x1, 0x4, 0x4, 0xf6e4, 0x2, 0x0, 0x5, 0x2, 0x2, 0x2, 0xa9, 0x3, 0x3, 0x5251, 0x9, 0x993, 0x9, 0x6d98, 0x1, 0x2, 0x8, 0x83, 0x3, 0x4, 0xfff, 0x10000, 0x4, 0xffff, 0xb9e, 0x8, 0x0, 0x80, 0xffff, 0x8, 0x7, 0x8, 0x5, 0x0, 0xa, 0x8, 0x87, 0x9406, 0x1, 0x9, 0x0, 0xafd, 0xfffff66a, 0x3, 0x101, 0x4, 0x2, 0x1000, 0x4, 0x3, 0x9, 0x7, 0x8, 0x9, 0x8000, 0x6d, 0xf, 0x6, 0x2, 0x2, 0x3, 0x13a1, 0x2, 0x5, 0x40, 0x7, 0x26e, 0x7, 0x8, 0x7, 0x9, 0xa56f, 0x2, 0x90d, 0x7, 0x6, 0x2, 0x1, 0x81, 0x2aea, 0x401, 0x109, 0xf, 0x3, 0xcc90, 0x9, 0x9, 0x5, 0x5, 0x3, 0xebf, 0x5, 0x8, 0x3, 0xfffffff7, 0x0, 0x200, 0x5, 0xe5, 0x200, 0x7, 0x9, 0xa, 0x81, 0x4, 0xb395, 0x2, 0x401, 0xc9, 0x73cb, 0xf0, 0x1000, 0x1, 0xb, 0x1513, 0x9, 0x6, 0x768, 0x400, 0x80000000, 0x5, 0xa9d, 0x364, 0x9, 0xffffffff, 0xa6a1, 0x3, 0x8, 0xe5d7195, 0x7, 0x4, 0x6947, 0x81, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x9ea7, 0x6, 0x6, 0x5, 0x5, 0x1, 0xb, 0x200, 0x7, 0x1, 0x7, 0x4, 0x3, 0x77f0, 0x7, 0x0, 0x9d, 0x69, 0x4, 0x6, 0xffff, 0x7, 0x6, 0x1, 0x7, 0x8, 0x5, 0xe, 0x8, 0x4, 0x3, 0x8, 0x5, 0x800, 0x1000, 0x3, 0x5, 0xe233, 0xa, 0x6, 0x8, 0x7, 0x6, 0x6, 0x39d, 0x3, 0xffffff3e, 0x9, 0x5, 0x5, 0x1c, 0x10, 0x1, 0xc, 0x5, 0x3, 0x1ff, 0x200, 0x4, 0x4, 0x10000, 0x8, 0xfffff76f, 0x8, 0x7ff, 0xffffb083, 0x448, 0x90ef, 0x9, 0x3, 0x42, 0x9, 0x0, 0x8, 0x1, 0x6, 0x8, 0x8, 0x8, 0x51e1, 0x3, 0x1, 0x6, 0x4, 0x8, 0x0, 0xb, 0x3af, 0x9, 0xc969, 0x6, 0x3, 0x3, 0xe2, 0x0, 0x4, 0x2, 0xb, 0x401, 0xd, 0x19, 0x7, 0x0, 0x7, 0x8, 0x151, 0x66, 0x7, 0x44, 0xfffff7c4, 0x10001, 0x2, 0x1, 0x1, 0x3, 0x9, 0x1d4, 0x1000, 0x7f, 0x937, 0x6, 0xa8c, 0x6, 0x6, 0xff37, 0x2, 0x3, 0xffff19a5, 0x409, 0x2, 0x0, 0x4083, 0x6, 0xdea, 0xf, 0xde5, 0xb, 0x7f, 0x5, 0x1, 0xa9, 0x6, 0x5, 0x0, 0x8, 0x0, 0x800, 0x9, 0xc, 0x400, 0x8, 0xa00e, 0x7, 0x4, 0x9, 0x804, 0x4, 0x101, 0x0, 0x6, 0x2, 0x9, 0x8f92, 0x2, 0x5, 0x2, 0x4, 0x7, 0x8, 0x0, 0x6, 0x7, 0x8, 0x8, 0x0, 0x7ff, 0x6, 0x80000001, 0x7ff, 0xc0000, 0x50000000, 0x7, 0xf68, 0x80, 0xa4a, 0x2, 0x80, 0x9, 0x46, 0x401, 0x10, 0xfffffc8d, 0x101, 0x6, 0x5, 0x0, 0x2, 0x5, 0x3, 0x2, 0x17, 0x6, 0x4, 0x55, 0x5b, 0x4, 0x40, 0x0, 0x1, 0x3f, 0x4, 0x1, 0x17, 0xd, 0x3800, 0x7, 0x2fd6, 0x0, 0xffffff01, 0xca0, 0x3, 0xffffffff, 0x3, 0x1, 0x3, 0x93dfb65, 0xffff, 0x6, 0xfb, 0xff, 0x7, 0x7, 0x0, 0x7, 0x9, 0x6, 0x1010, 0x6, 0x8, 0x9, 0x9, 0x4, 0x6, 0xfffffff8, 0x5, 0x0, 0x7, 0xd6, 0xb4, 0x8, 0xf, 0x0, 0x3909, 0xcbb2, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xc, 0xe, 0x200, 0x5, 0x8, 0x101, 0x0, 0x4, 0xfce, 0x4, 0x1, 0x1, 0x7d, 0x9, 0x24000000, 0x0, 0x5, 0x4, 0x2, 0x7, 0x5, 0x9, 0x100, 0x8, 0x80, 0x71e2, 0x1, 0x96, 0x4, 0x1, 0x80000001, 0xcb, 0x3, 0x3ff, 0xffff, 0x9, 0x2, 0xf2a, 0x6, 0x8, 0x83, 0x5, 0x6, 0xc808, 0x6, 0x0, 0x0, 0x2, 0x3, 0x7b, 0x1, 0x80000000, 0x6, 0x1, 0x5, 0x4, 0xc3e, 0x1, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffff8c1, 0x2, 0x1, 0xff, 0x4, 0x10, 0x1ff, 0x1000, 0x0, 0x8, 0x5, 0xc0000000, 0x8, 0x4, 0x2, 0x4, 0xfffffff7, 0x0, 0x80, 0x400, 0x128832a, 0x9, 0x4, 0x1, 0x101, 0x7ff, 0x100, 0x6, 0xb58, 0xfffffffa, 0x1, 0x9, 0x1, 0x8, 0x0, 0x7, 0x10000, 0x3, 0x8, 0xfffffffa, 0x80000000, 0x3, 0xc, 0x8, 0xc0a0, 0x5, 0x4, 0x8, 0x4, 0x8, 0x4, 0x1db, 0x0, 0x7b2b, 0xfffffffe, 0x7, 0x1, 0xa, 0xcef2, 0x3, 0x9ae5, 0x0, 0x2161af8f, 0x5c52, 0x9, 0x4, 0x2, 0x5, 0xfffffff9, 0x8, 0x800, 0x5, 0x9, 0xd, 0xffff, 0x4, 0x2, 0x400, 0x5, 0x4, 0x40, 0x3, 0x8000, 0x10, 0x7f, 0x0, 0x100, 0x800, 0x0, 0x3, 0x0, 0x5, 0x1, 0xba9f, 0xc3, 0xcd6c, 0x8, 0x7, 0x36b, 0xfffff52f, 0x0, 0x6, 0x4, 0x1, 0x7fffffff, 0x1, 0x2, 0x2, 0x43a7b574, 0xfffffffa, 0x101, 0xe, 0x3, 0x5, 0x4, 0xffff0001, 0x0, 0x9, 0x2, 0x9, 0x100, 0x6, 0x6, 0x9, 0x100, 0x2, 0x1, 0xf, 0x4c28f409, 0x4, 0x10000, 0x7ff, 0x2, 0xfffffff8, 0xffffffc8, 0x1, 0x9, 0x1, 0xe, 0x5b7d6b02, 0x5, 0x9, 0x4, 0x80000001, 0x8, 0x4, 0x3dfd, 0x155, 0x7, 0x8, 0x4, 0x3, 0x7ff, 0x0, 0x4, 0x6, 0xffff, 0x0, 0x7, 0xf, 0x7, 0x7, 0x7, 0xaa1, 0x198, 0x80000001, 0x7, 0x8, 0x6, 0x80000001, 0x6a, 0x4, 0x9, 0x172, 0x8, 0x5, 0x7, 0x4f2f, 0x8, 0x9, 0xfffffffd, 0x6, 0x3, 0x7c14, 0x401, 0x4, 0x2, 0xa4, 0xc347, 0x5, 0xff, 0xc]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xfff1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x6}}]}}]}, 0xca4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2a, 0x3, "9ae2e03d0b52a147e80a52ae6a5cc36a62e207fad392798b66037407d82369854d7e9e52e35f"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20000000) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x1000000000000025, &(0x7f0000008640), 0x1000000000000081, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000010}, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltfilter={0xca4, 0x2d, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0xffff, 0xfff1}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc78, 0x2, [@TCA_BPF_POLICE={0xc64, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x6, 0xfffffffd, 0x100, {0x81, 0x1, 0x0, 0x81, 0x7, 0x1}, {0x5, 0x2, 0x6, 0x6ab, 0x5, 0x1}, 0x3, 0x8, 0xfffffffd}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x200, 0x4, 0x4, 0x8, 0x1d37, 0x8, 0x200, 0x6, 0x1, 0x4, 0x7, 0x769547d, 0xe, 0x60000, 0x3, 0xe, 0xbea, 0x10000, 0xf, 0x1051, 0x3, 0xc, 0x8, 0xf8b, 0x0, 0x1e65, 0x6, 0x0, 0x4, 0xaecb, 0xd, 0xb, 0x101, 0xba5, 0x6e5aad55, 0x8, 0x0, 0x5, 0xb6b, 0x3f800, 0xc12, 0x4, 0x1, 0x2, 0x8, 0x6, 0x8, 0x23, 0x5, 0x2, 0x10, 0x7fffffff, 0xe7b, 0x23, 0x401822d, 0x6, 0x1000, 0x4, 0x3ff0000, 0x8, 0x6, 0x28a7, 0xc, 0x4, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7fff, 0xfffffff8, 0x4, 0x5, 0x1, 0x7, 0x3, 0x9, 0x3, 0x0, 0x1, 0x2, 0x2, 0x800, 0x1, 0x6, 0xc, 0x0, 0x3, 0xfffff389, 0x100, 0x6, 0x0, 0x81, 0x5, 0x950a, 0x9b4, 0x0, 0x0, 0x4, 0xfffffff7, 0x10000, 0xfffffff9, 0xfff, 0x7, 0x6, 0x33f1f629, 0x4, 0x6, 0x8, 0x10, 0x81, 0x70, 0x40, 0x0, 0xfffffffc, 0x8, 0x1, 0x4, 0x4, 0xf6e4, 0x2, 0x0, 0x5, 0x2, 0x2, 0x2, 0xa9, 0x3, 0x3, 0x5251, 0x9, 0x993, 0x9, 0x6d98, 0x1, 0x2, 0x8, 0x83, 0x3, 0x4, 0xfff, 0x10000, 0x4, 0xffff, 0xb9e, 0x8, 0x0, 0x80, 0xffff, 0x8, 0x7, 0x8, 0x5, 0x0, 0xa, 0x8, 0x87, 0x9406, 0x1, 0x9, 0x0, 0xafd, 0xfffff66a, 0x3, 0x101, 0x4, 0x2, 0x1000, 0x4, 0x3, 0x9, 0x7, 0x8, 0x9, 0x8000, 0x6d, 0xf, 0x6, 0x2, 0x2, 0x3, 0x13a1, 0x2, 0x5, 0x40, 0x7, 0x26e, 0x7, 0x8, 0x7, 0x9, 0xa56f, 0x2, 0x90d, 0x7, 0x6, 0x2, 0x1, 0x81, 0x2aea, 0x401, 0x109, 0xf, 0x3, 0xcc90, 0x9, 0x9, 0x5, 0x5, 0x3, 0xebf, 0x5, 0x8, 0x3, 0xfffffff7, 0x0, 0x200, 0x5, 0xe5, 0x200, 0x7, 0x9, 0xa, 0x81, 0x4, 0xb395, 0x2, 0x401, 0xc9, 0x73cb, 0xf0, 0x1000, 0x1, 0xb, 0x1513, 0x9, 0x6, 0x768, 0x400, 0x80000000, 0x5, 0xa9d, 0x364, 0x9, 0xffffffff, 0xa6a1, 0x3, 0x8, 0xe5d7195, 0x7, 0x4, 0x6947, 0x81, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10001}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x9ea7, 0x6, 0x6, 0x5, 0x5, 0x1, 0xb, 0x200, 0x7, 0x1, 0x7, 0x4, 0x3, 0x77f0, 0x7, 0x0, 0x9d, 0x69, 0x4, 0x6, 0xffff, 0x7, 0x6, 0x1, 0x7, 0x8, 0x5, 0xe, 0x8, 0x4, 0x3, 0x8, 0x5, 0x800, 0x1000, 0x3, 0x5, 0xe233, 0xa, 0x6, 0x8, 0x7, 0x6, 0x6, 0x39d, 0x3, 0xffffff3e, 0x9, 0x5, 0x5, 0x1c, 0x10, 0x1, 0xc, 0x5, 0x3, 0x1ff, 0x200, 0x4, 0x4, 0x10000, 0x8, 0xfffff76f, 0x8, 0x7ff, 0xffffb083, 0x448, 0x90ef, 0x9, 0x3, 0x42, 0x9, 0x0, 0x8, 0x1, 0x6, 0x8, 0x8, 0x8, 0x51e1, 0x3, 0x1, 0x6, 0x4, 0x8, 0x0, 0xb, 0x3af, 0x9, 0xc969, 0x6, 0x3, 0x3, 0xe2, 0x0, 0x4, 0x2, 0xb, 0x401, 0xd, 0x19, 0x7, 0x0, 0x7, 0x8, 0x151, 0x66, 0x7, 0x44, 0xfffff7c4, 0x10001, 0x2, 0x1, 0x1, 0x3, 0x9, 0x1d4, 0x1000, 0x7f, 0x937, 0x6, 0xa8c, 0x6, 0x6, 0xff37, 0x2, 0x3, 0xffff19a5, 0x409, 0x2, 0x0, 0x4083, 0x6, 0xdea, 0xf, 0xde5, 0xb, 0x7f, 0x5, 0x1, 0xa9, 0x6, 0x5, 0x0, 0x8, 0x0, 0x800, 0x9, 0xc, 0x400, 0x8, 0xa00e, 0x7, 0x4, 0x9, 0x804, 0x4, 0x101, 0x0, 0x6, 0x2, 0x9, 0x8f92, 0x2, 0x5, 0x2, 0x4, 0x7, 0x8, 0x0, 0x6, 0x7, 0x8, 0x8, 0x0, 0x7ff, 0x6, 0x80000001, 0x7ff, 0xc0000, 0x50000000, 0x7, 0xf68, 0x80, 0xa4a, 0x2, 0x80, 0x9, 0x46, 0x401, 0x10, 0xfffffc8d, 0x101, 0x6, 0x5, 0x0, 0x2, 0x5, 0x3, 0x2, 0x17, 0x6, 0x4, 0x55, 0x5b, 0x4, 0x40, 0x0, 0x1, 0x3f, 0x4, 0x1, 0x17, 0xd, 0x3800, 0x7, 0x2fd6, 0x0, 0xffffff01, 0xca0, 0x3, 0xffffffff, 0x3, 0x1, 0x3, 0x93dfb65, 0xffff, 0x6, 0xfb, 0xff, 0x7, 0x7, 0x0, 0x7, 0x9, 0x6, 0x1010, 0x6, 0x8, 0x9, 0x9, 0x4, 0x6, 0xfffffff8, 0x5, 0x0, 0x7, 0xd6, 0xb4, 0x8, 0xf, 0x0, 0x3909, 0xcbb2, 0x3ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xc, 0xe, 0x200, 0x5, 0x8, 0x101, 0x0, 0x4, 0xfce, 0x4, 0x1, 0x1, 0x7d, 0x9, 0x24000000, 0x0, 0x5, 0x4, 0x2, 0x7, 0x5, 0x9, 0x100, 0x8, 0x80, 0x71e2, 0x1, 0x96, 0x4, 0x1, 0x80000001, 0xcb, 0x3, 0x3ff, 0xffff, 0x9, 0x2, 0xf2a, 0x6, 0x8, 0x83, 0x5, 0x6, 0xc808, 0x6, 0x0, 0x0, 0x2, 0x3, 0x7b, 0x1, 0x80000000, 0x6, 0x1, 0x5, 0x4, 0xc3e, 0x1, 0x0, 0x5, 0x2, 0x7, 0x4, 0xfffff8c1, 0x2, 0x1, 0xff, 0x4, 0x10, 0x1ff, 0x1000, 0x0, 0x8, 0x5, 0xc0000000, 0x8, 0x4, 0x2, 0x4, 0xfffffff7, 0x0, 0x80, 0x400, 0x128832a, 0x9, 0x4, 0x1, 0x101, 0x7ff, 0x100, 0x6, 0xb58, 0xfffffffa, 0x1, 0x9, 0x1, 0x8, 0x0, 0x7, 0x10000, 0x3, 0x8, 0xfffffffa, 0x80000000, 0x3, 0xc, 0x8, 0xc0a0, 0x5, 0x4, 0x8, 0x4, 0x8, 0x4, 0x1db, 0x0, 0x7b2b, 0xfffffffe, 0x7, 0x1, 0xa, 0xcef2, 0x3, 0x9ae5, 0x0, 0x2161af8f, 0x5c52, 0x9, 0x4, 0x2, 0x5, 0xfffffff9, 0x8, 0x800, 0x5, 0x9, 0xd, 0xffff, 0x4, 0x2, 0x400, 0x5, 0x4, 0x40, 0x3, 0x8000, 0x10, 0x7f, 0x0, 0x100, 0x800, 0x0, 0x3, 0x0, 0x5, 0x1, 0xba9f, 0xc3, 0xcd6c, 0x8, 0x7, 0x36b, 0xfffff52f, 0x0, 0x6, 0x4, 0x1, 0x7fffffff, 0x1, 0x2, 0x2, 0x43a7b574, 0xfffffffa, 0x101, 0xe, 0x3, 0x5, 0x4, 0xffff0001, 0x0, 0x9, 0x2, 0x9, 0x100, 0x6, 0x6, 0x9, 0x100, 0x2, 0x1, 0xf, 0x4c28f409, 0x4, 0x10000, 0x7ff, 0x2, 0xfffffff8, 0xffffffc8, 0x1, 0x9, 0x1, 0xe, 0x5b7d6b02, 0x5, 0x9, 0x4, 0x80000001, 0x8, 0x4, 0x3dfd, 0x155, 0x7, 0x8, 0x4, 0x3, 0x7ff, 0x0, 0x4, 0x6, 0xffff, 0x0, 0x7, 0xf, 0x7, 0x7, 0x7, 0xaa1, 0x198, 0x80000001, 0x7, 0x8, 0x6, 0x80000001, 0x6a, 0x4, 0x9, 0x172, 0x8, 0x5, 0x7, 0x4f2f, 0x8, 0x9, 0xfffffffd, 0x6, 0x3, 0x7c14, 0x401, 0x4, 0x2, 0xa4, 0xc347, 0x5, 0xff, 0xc]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xfff1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x6}}]}}]}, 0xca4}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2a, 0x3, "9ae2e03d0b52a147e80a52ae6a5cc36a62e207fad392798b66037407d82369854d7e9e52e35f"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20000000) (async) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x1000000000000025, &(0x7f0000008640), 0x1000000000000081, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1.764852032s ago: executing program 4 (id=1283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}], 0x1, 0xc0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xeb, "0143081448926f7283742f11f8186667221a59f934bd3aa65e4efb85d2286744381da5a41a8e1825c9e0fd60322fa886e79a41ce36ff5ae30e47eebf7d01a350e6850bd4e2e803434a462eb5f39b5bb889551f6e550851eb919c6ba8603a26d8a501166cdc25e369c77670a1c0c9d82288b1549cd1ff08dc238d571490aa0a30aa61948a6af154e76bf51e2bc2da49c5bff41c113a5532b499d5e3a5b2ec245924f4ee6cc77a99ad906d5c3879007c959966cccc3a30c75c284717e10fc2c6f8fb91de6a22fa29de1dcc0aa094d29a4126f92171dac876e22dcc138aac6de5619d5511ed4fbf92343c0218"}, &(0x7f00000000c0)=0xf3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={r2, @in={{0x2, 0x4e21, @remote}}, 0x1ff, 0x7, 0x9, 0x4, 0x3}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r3}, 0x8) 1.484988299s ago: executing program 4 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d4f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4042}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000040"]) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002bbd7000fcdbdf250500000008000300", @ANYRES32=r8, @ANYBLOB="05003700f61d540000000005002e001b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0xf4f94fec5df9d2f9) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 1.376058854s ago: executing program 3 (id=1285): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x4a) (async) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0044fe0400000000000000030006000080000002000335000053b5c78face3e00000060000000000000000020001000000000000000000000000000300050900000000020000007f0000010000000000000000"], 0x50}}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000140)) 1.14062836s ago: executing program 6 (id=1286): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b18010000000009043200019740a40009058203ff03"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001580)="deed1c9b7ca0b42d0175e810d20d0ec3aa74bca1a3ab0500ba602b1cc5755dd9fc910300c9fbafa48a82d6a5", 0x2c) 1.139751676s ago: executing program 3 (id=1287): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x1, 0x5, 0xffffffff, 0x3dc, 0x9, "d925b29390d06a601daec091d56dc6ed285a93", 0xd, 0xd}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000190000007f000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0000000000190000007f000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2], 0x50) poll(&(0x7f0000000000)=[{r0, 0x110}, {r2, 0x8}], 0x2, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) (async) sendmsg$nl_xfrm(r3, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0xa, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYBLOB="57c2e673c98c41f577c2f483921d88bccec6cc08ac"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) (async) syz_usb_control_io$printer(r7, 0x0, 0x0) socket(0x1a, 0x6, 0x100) r8 = openat$mice(0xffffff9c, &(0x7f0000000140), 0xac080) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1aed1fc2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000001c0)={0x55, 0x200, 0xf91, 0xffffffff, r9}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000001c0)={0x55, 0x200, 0xf91, 0xffffffff, r9}, &(0x7f0000000200)=0x10) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xe5b9, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x84, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x9, 0xfffff801, 0x6, 0x7}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x5}]}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030031100642b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000340)={{0x8000000, 0x4, 0xa, 0x8, 0x1, 0x0, 0x7, 0x7, 0xa, 0x4, 0x10}, {0x1, 0x3000, 0x9, 0xc, 0x41, 0x8, 0x7, 0x0, 0x7, 0x89, 0x8}, {0x1, 0xd000, 0x4, 0x3, 0x40, 0xd, 0xf, 0xee, 0x14, 0x9, 0x90, 0x1}, {0xeeef0000, 0xeeee0000, 0x9, 0x4, 0x7, 0x7f, 0xa3, 0x4, 0xc2, 0xb, 0x4, 0x8}, {0x0, 0x2, 0x8, 0xe9, 0x65, 0x1, 0x5, 0x1, 0x0, 0x7f, 0x9, 0x7c}, {0x10000, 0x105000, 0xd, 0x7, 0x7f, 0xb, 0x7, 0x8, 0xb7, 0xfd, 0x3, 0x3}, {0x100000, 0xdddd1000, 0x10, 0x9, 0x4, 0x1c, 0x8, 0x1, 0x7, 0xd, 0xec, 0x6}, {0x100000, 0x100000, 0x8, 0x1, 0x4, 0x5, 0x2, 0xf9, 0x80, 0x7, 0xa1, 0x7}, {0x80a0000, 0x7ff}, {0xdddd0000, 0x80}, 0xb, 0x0, 0x4000, 0x0, 0x7, 0x100, 0x2000, [0x6, 0xc5, 0x7, 0x2]}) 1.139211452s ago: executing program 0 (id=1288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="09000000010000", 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) io_uring_setup(0x1b94, &(0x7f0000000000)) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0xfffffffffffffffe, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) 950.255524ms ago: executing program 4 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x40, 0x107, 0x0, 0x3, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 819.052625ms ago: executing program 0 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) init_module(0x0, 0x3f00, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x8948, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x10000}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x300004, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYBLOB="848a"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x25, r0}, 0x94) ppoll(&(0x7f0000000300)=[{r4, 0x2001}, {r2, 0x269}, {r1, 0x2}, {r1, 0x404}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000500)={[0x101]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000040), 0x4) accept4(r3, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000680)=0x80, 0xc0000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x0, 0x0, 0x1c, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000000100000605000400000000000900028073797a31000000000c0007800500150003000000050005000200000005000100060000742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) getsockopt$inet6_mreq(r5, 0x29, 0xf8743b07abeb206, &(0x7f00000006c0)={@empty, 0x0}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6gre0\x00', r8, 0x2f, 0x7, 0x8, 0x401, 0x40, @private2, @private1, 0x7, 0x20, 0x10, 0x10001}}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 644.84031ms ago: executing program 0 (id=1291): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/69, 0x45) socket$inet(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0xffff, 0x702]}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 504.523923ms ago: executing program 4 (id=1292): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000910500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14900400000000001c00128009000100626f6e64000000000c00028008000f0008000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)={0x34, r2, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x34}}, 0x0) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 373.896199ms ago: executing program 4 (id=1293): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000340)={0x9, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000c80)={0x6}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000300)=r4}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f00000007c0)}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYRES8=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r5, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x4, 0xa, 0x1, "90da25764adc1708eac223b9f04ad9db7baf9a4c0a2b03849e4ad6dfa9f33db8", 0x31364d4e}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0xb, 0x4, 0x0, 0x9}) r11 = syz_open_procfs(0x0, &(0x7f0000000800)='loginuid\x00') close_range(r11, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9c0000, 0x5, 0x9, r11, 0x0, &(0x7f0000000000)={0xa10907, 0x4, '\x00', @ptr=0x7}}) 0s ago: executing program 4 (id=1294): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0x34}], 0x1, 0x2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r7}}]}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r8, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0xd, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r8, 0x2, 0x4, 0x80000001, 0xdca9}) recvfrom(r8, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) kernel console output (not intermixed with test programs): 0092][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.677796][ T40] audit: type=1400 audit(1759303637.418:682): avc: denied { unlink } for pid=8184 comm="syz.0.618" name="file0" dev="9p" ino=71827889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.678637][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.697452][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.711819][ T8056] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.731853][ T8056] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.741143][ T40] audit: type=1400 audit(1759303637.478:683): avc: denied { read write open } for pid=8184 comm="syz.0.618" path="/185/file0/file0" dev="9p" ino=71827889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.805654][ T8056] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.857009][ T8056] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.911890][ T7988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.051299][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.076421][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.104863][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.127353][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.136081][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.150595][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.264716][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.434462][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.508284][ T40] audit: type=1400 audit(1759303638.238:684): avc: denied { setattr } for pid=8204 comm="syz.3.621" path="/dev/ubi_ctrl" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.602135][ T40] audit: type=1400 audit(1759303638.308:685): avc: denied { read } for pid=8204 comm="syz.3.621" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.948601][ T7988] veth0_vlan: entered promiscuous mode [ 233.972213][ T8224] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 233.982265][ T7988] veth1_vlan: entered promiscuous mode [ 234.008329][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.046362][ T7988] veth0_macvtap: entered promiscuous mode [ 234.066260][ T7988] veth1_macvtap: entered promiscuous mode [ 234.105407][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.190895][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.240365][ T7858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.296579][ T7858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.343334][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 234.366728][ T7858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.370679][ T7858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.430928][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.436579][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.450679][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.460613][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.479540][ T40] audit: type=1400 audit(1759303639.218:686): avc: denied { mounton } for pid=7988 comm="syz-executor" path="/syzkaller.YU6fVG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 234.492219][ T6024] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 234.511676][ T40] audit: type=1400 audit(1759303639.248:687): avc: denied { mounton } for pid=7988 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 234.547176][ T8056] veth0_vlan: entered promiscuous mode [ 234.556876][ T8056] veth1_vlan: entered promiscuous mode [ 234.635813][ T8056] veth0_macvtap: entered promiscuous mode [ 234.643582][ T8056] veth1_macvtap: entered promiscuous mode [ 234.661290][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.670871][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.680706][ T6024] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 234.684090][ T6024] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 234.687852][ T6024] usb 8-1: config 0 has no interface number 0 [ 234.691535][ T6024] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.695465][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.704277][ T6024] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 234.710309][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.712450][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.729105][ T6024] usb 8-1: Product: syz [ 234.732986][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.736310][ T6024] usb 8-1: Manufacturer: syz [ 234.746664][ T6024] usb 8-1: SerialNumber: syz [ 234.754129][ T6024] usb 8-1: config 0 descriptor?? [ 234.790198][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.794210][ T6024] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 234.991503][ T63] usb 8-1: USB disconnect, device number 17 [ 235.003594][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.008563][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.018548][ T63] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 235.122699][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.127920][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.618872][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 235.765431][ T8275] overlay: Bad value for 'workdir' [ 236.101274][ T40] audit: type=1400 audit(1759303640.838:688): avc: denied { map } for pid=8279 comm="syz.5.635" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 236.146391][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.191100][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.636'. [ 236.215762][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.271255][ T62] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.276171][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 236.360917][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.412070][ T8288] usb usb4: usbfs: interface 0 claimed by hub while 'syz.5.638' sets config #1 [ 236.471235][ T8298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.640'. [ 236.602624][ T8305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.641'. [ 236.698151][ T40] audit: type=1400 audit(1759303641.438:689): avc: denied { bind } for pid=8304 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.722326][ T40] audit: type=1400 audit(1759303641.438:690): avc: denied { write } for pid=8304 comm="syz.0.641" path="socket:[22457]" dev="sockfs" ino=22457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 236.731399][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.739871][ T8309] netlink: 52 bytes leftover after parsing attributes in process `syz.0.641'. [ 236.765465][ T8307] sp0: Synchronizing with TNC [ 236.783608][ T8306] [U] è [ 237.009666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.061617][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.187446][ T40] audit: type=1400 audit(1759303641.918:691): avc: denied { ioctl } for pid=8325 comm="syz.5.648" path="socket:[23768]" dev="sockfs" ino=23768 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 237.212340][ T8327] bridge5: entered promiscuous mode [ 237.261230][ T8327] bridge5: entered allmulticast mode [ 237.272237][ T63] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 237.448982][ T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 237.463867][ T63] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 237.484937][ T63] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 237.522623][ T63] usb 9-1: string descriptor 0 read error: -22 [ 237.532381][ T63] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.538443][ T63] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.557085][ T8317] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.774197][ T40] audit: type=1400 audit(1759303642.498:692): avc: denied { execute } for pid=8334 comm="syz.5.652" path="/dev/audio1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 237.782931][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.801267][ T63] cdc_ncm 9-1:1.0: bind() failure [ 237.824478][ T63] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 237.837175][ T63] cdc_ncm 9-1:1.1: bind() failure [ 237.852659][ T63] usb 9-1: USB disconnect, device number 2 [ 238.072489][ C0] Unknown status report in ack skb [ 238.163502][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.655'. [ 238.168058][ T40] audit: type=1400 audit(1759303642.898:693): avc: denied { read write } for pid=8346 comm="syz.5.655" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 238.197988][ T40] audit: type=1400 audit(1759303642.898:694): avc: denied { open } for pid=8346 comm="syz.5.655" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 238.474555][ T8349] can0: slcan on ttyprintk. [ 238.584145][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 238.626412][ T5977] Bluetooth: hci2: ACL packet too small [ 238.801634][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.809735][ T8348] can0 (unregistered): slcan off ttyprintk. [ 238.849629][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.005259][ T8364] block nbd3: Unsupported socket: shutdown callout must be supported. [ 239.095755][ T8371] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 239.099460][ T8371] netlink: 212 bytes leftover after parsing attributes in process `syz.4.662'. [ 239.112692][ T8371] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 239.246288][ T8373] netlink: 'syz.5.664': attribute type 10 has an invalid length. [ 239.250111][ T8373] netlink: 40 bytes leftover after parsing attributes in process `syz.5.664'. [ 239.286027][ T8373] batadv0: entered promiscuous mode [ 239.288791][ T8373] batadv0: entered allmulticast mode [ 239.291734][ T8373] bridge0: port 3(batadv0) entered blocking state [ 239.309383][ T8373] bridge0: port 3(batadv0) entered disabled state [ 239.315814][ T8373] bridge0: port 3(batadv0) entered blocking state [ 239.318840][ T8373] bridge0: port 3(batadv0) entered forwarding state [ 239.553639][ T40] audit: type=1400 audit(1759303644.268:695): avc: denied { write } for pid=8386 comm="syz.4.669" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 239.645413][ T1147] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 239.654541][ T1147] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 239.829833][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 239.851425][ T40] audit: type=1400 audit(1759303644.588:696): avc: denied { execmem } for pid=8401 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 240.129871][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.185747][ T8405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'. [ 240.233815][ T8402] netlink: 80 bytes leftover after parsing attributes in process `syz.3.674'. [ 240.286745][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 240.290745][ T8408] netlink: 'syz.0.675': attribute type 20 has an invalid length. [ 240.377861][ T40] audit: type=1400 audit(1759303645.118:697): avc: denied { create } for pid=8410 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 240.420956][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.675'. [ 240.432127][ T8408] netlink: 'syz.0.675': attribute type 20 has an invalid length. [ 240.497493][ T8418] netlink: 48 bytes leftover after parsing attributes in process `syz.5.678'. [ 240.658746][ T8422] Bluetooth: MGMT ver 1.23 [ 240.805730][ T8427] openvswitch: netlink: IP tunnel dst address not specified [ 240.863848][ T8427] openvswitch: netlink: IP tunnel dst address not specified [ 240.970665][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 240.986498][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.033703][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.037873][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.051071][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.056396][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.065136][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.072605][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.079580][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.085775][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.117004][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.121141][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.147493][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.168702][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.197139][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.201813][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.241885][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.271888][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.284456][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.288850][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.312242][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.313917][ T6049] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 241.337298][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.337408][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.337544][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.337642][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.337739][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.337838][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.337937][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338034][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338140][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338326][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338427][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338527][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338625][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338722][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338825][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.338926][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.339023][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.339123][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.339229][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.340547][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.340656][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.340765][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.340873][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.340986][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.341096][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.341211][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.341318][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.341425][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.385734][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.533862][ T6049] usb 9-1: device descriptor read/64, error -71 [ 241.554518][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.554651][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.554774][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.554886][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555007][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555143][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555271][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555404][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555539][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555662][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555785][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.555904][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.556032][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.556169][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.556284][ T8435] bridge_slave_0: invalid flags given to default FDB implementation [ 241.565625][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.578915][ T40] audit: type=1400 audit(1759303646.308:698): avc: denied { connect } for pid=8445 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 241.677720][ T8446] overlayfs: missing 'lowerdir' [ 241.688961][ T40] audit: type=1400 audit(1759303646.318:699): avc: denied { read } for pid=8445 comm="syz.3.686" path="socket:[23324]" dev="sockfs" ino=23324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 241.843565][ T6049] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 241.976627][ T40] audit: type=1400 audit(1759303646.698:700): avc: denied { create } for pid=8451 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.980728][ T8456] overlayfs: failed to resolve './bus': -2 [ 242.015494][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.017956][ T40] audit: type=1400 audit(1759303646.698:701): avc: denied { map } for pid=8451 comm="syz.0.688" path="/dev/dri/card1" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 242.032187][ T6049] usb 9-1: device descriptor read/64, error -71 [ 242.153088][ T6049] usb usb9-port1: attempt power cycle [ 242.209648][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.534744][ T6049] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 242.618610][ T6049] usb 9-1: device descriptor read/8, error -71 [ 242.663850][ T5977] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 242.738151][ T8479] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 242.740669][ T8479] netlink: 'syz.0.695': attribute type 4 has an invalid length. [ 242.871516][ T6049] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 242.928499][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 242.928524][ T40] audit: type=1400 audit(1759303647.638:704): avc: denied { map } for pid=8488 comm="syz.3.698" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.934303][ T6049] usb 9-1: device descriptor read/8, error -71 [ 242.988426][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.994453][ T40] audit: type=1400 audit(1759303647.638:705): avc: denied { execute } for pid=8488 comm="syz.3.698" path="/dev/comedi4" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.159589][ T6049] usb usb9-port1: unable to enumerate USB device [ 243.716242][ T40] audit: type=1400 audit(1759303648.458:706): avc: denied { connect } for pid=8506 comm="syz.3.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.101603][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.169852][ T8517] tipc: Trying to set illegal importance in message [ 244.174710][ T8524] tmpfs: Unknown parameter 'ãÚ' [ 244.372109][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 244.542745][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 244.624463][ T9] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 244.631099][ T9] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 244.637381][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.653697][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.658087][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.662724][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.671622][ T9] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.677153][ T63] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 244.694787][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.720160][ T9] usb 10-1: config 0 descriptor?? [ 244.934277][ T63] usb 8-1: unable to get BOS descriptor or descriptor too short [ 244.938805][ T63] usb 8-1: not running at top speed; connect to a high speed hub [ 244.953151][ T63] usb 8-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.960902][ T63] usb 8-1: config 1 interface 0 has no altsetting 0 [ 244.989050][ T63] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.007407][ T9] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 245.012745][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.018247][ T63] usb 8-1: Product: syz [ 245.026889][ T9] usb 10-1: USB disconnect, device number 2 [ 245.029552][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.031966][ T63] usb 8-1: Manufacturer: syz [ 245.052654][ T63] usb 8-1: SerialNumber: syz [ 245.060879][ T9] usblp0: removed [ 245.148227][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.222817][ T8522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.228351][ T8522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.286842][ T8528] geneve2: entered promiscuous mode [ 245.290053][ T8528] geneve2: entered allmulticast mode [ 245.393944][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.442561][ T8544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8544 comm=syz.4.712 [ 245.446998][ T40] audit: type=1400 audit(1759303650.148:707): avc: denied { read } for pid=8540 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 245.465565][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.526776][ T9] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 245.531528][ T8542] __nla_validate_parse: 2 callbacks suppressed [ 245.531549][ T8542] netlink: 212 bytes leftover after parsing attributes in process `syz.3.708'. [ 245.582861][ T8542] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 245.629201][ T63] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 245.648453][ T63] usb 8-1: USB disconnect, device number 18 [ 245.934926][ T8552] fuse: Unknown parameter '0x00000000000000040x00000000000000040000000000000000000000400000000000000000000' [ 245.936196][ T40] audit: type=1400 audit(1759303650.678:708): avc: denied { mounton } for pid=8551 comm="syz.4.715" path="/25/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 246.078076][ T8553] fuse: Bad value for 'fd' [ 246.201694][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.482546][ T6053] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 246.604528][ T40] audit: type=1400 audit(1759303651.348:709): avc: denied { mount } for pid=8567 comm="syz.0.719" name="/" dev="hugetlbfs" ino=23978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 246.631009][ T40] audit: type=1400 audit(1759303651.348:710): avc: denied { mounton } for pid=8567 comm="syz.0.719" path="/211/file0" dev="hugetlbfs" ino=23978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 246.654712][ T6053] usb 8-1: device descriptor read/64, error -71 [ 246.840667][ T40] audit: type=1400 audit(1759303651.568:711): avc: denied { unmount } for pid=5974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 246.912105][ T6053] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 247.083197][ T6053] usb 8-1: device descriptor read/64, error -71 [ 247.222723][ T6053] usb usb8-port1: attempt power cycle [ 247.622019][ T6053] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 247.650336][ T40] audit: type=1400 audit(1759303652.388:712): avc: denied { read } for pid=8622 comm="syz.5.730" path="socket:[24048]" dev="sockfs" ino=24048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.670273][ T6053] usb 8-1: device descriptor read/8, error -71 [ 247.696460][ T6050] IPVS: starting estimator thread 0... [ 247.837312][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 247.866233][ T8626] IPVS: using max 29 ests per chain, 69600 per kthread [ 247.920567][ T8631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 247.929212][ T8631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 248.023336][ T6053] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 248.063556][ T6053] usb 8-1: device descriptor read/8, error -71 [ 248.172712][ T6053] usb usb8-port1: unable to enumerate USB device [ 248.247201][ T40] audit: type=1400 audit(1759303652.988:713): avc: denied { mount } for pid=8642 comm="syz.4.733" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 248.276476][ T40] audit: type=1400 audit(1759303652.998:714): avc: denied { watch } for pid=8642 comm="syz.4.733" path="/34/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 248.401462][ T8647] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 248.510555][ T40] audit: type=1400 audit(1759303653.248:715): avc: denied { unmount } for pid=7988 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 248.569530][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.606810][ T8651] ksmbd: Unknown IPC event: 1, ignore. [ 248.752223][ T8657] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.786530][ T8658] tipc: Started in network mode [ 248.789462][ T8658] tipc: Node identity c, cluster identity 4711 [ 248.792724][ T8658] tipc: Node number set to 12 [ 248.994867][ T40] audit: type=1400 audit(1759303653.738:716): avc: denied { ioctl } for pid=8670 comm="syz.4.744" path="socket:[25935]" dev="sockfs" ino=25935 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.045479][ T8671] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.377926][ T8683] netlink: 128 bytes leftover after parsing attributes in process `syz.4.746'. [ 249.637529][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.747523][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.751'. [ 249.761722][ C1] vkms_vblank_simulate: vblank timer overrun [ 249.798272][ T8697] block nbd4: Unsupported socket: shutdown callout must be supported. [ 249.799201][ T8693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8693 comm=syz.5.751 [ 250.003975][ T8702] x_tables: ip6_tables: CT target: only valid in raw table, not syz1 [ 250.076244][ T40] audit: type=1400 audit(1759303654.818:717): avc: denied { append } for pid=8703 comm="syz.5.755" name="ndctl0" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 250.115141][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.122319][ T8706] fuse: Unknown parameter 'f‚?J[`6õ?÷nl' [ 250.151158][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.160844][ T8708] netlink: 'syz.5.758': attribute type 10 has an invalid length. [ 250.197781][ T8708] team0: Port device dummy0 added [ 250.205586][ T8708] netlink: 'syz.5.758': attribute type 10 has an invalid length. [ 250.210835][ T8708] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.259044][ T8708] team0: Failed to send options change via netlink (err -105) [ 250.265163][ T8708] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 250.274208][ T8708] team0: Port device dummy0 removed [ 250.284406][ T8708] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 250.383750][ T8712] netlink: 124 bytes leftover after parsing attributes in process `syz.4.760'. [ 250.491085][ T8721] 9pnet_virtio: no channels available for device syz [ 250.581660][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.692713][ T6053] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 250.834181][ T6053] usb 5-1: device descriptor read/64, error -71 [ 250.893020][ T40] audit: type=1400 audit(1759303655.608:718): avc: denied { write } for pid=8733 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.931468][ T40] audit: type=1400 audit(1759303655.668:719): avc: denied { listen } for pid=8733 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.958442][ T8737] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 251.041880][ T8739] netlink: 76 bytes leftover after parsing attributes in process `syz.5.766'. [ 251.079964][ T8743] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.767'. [ 251.104115][ T6053] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.112426][ T40] audit: type=1400 audit(1759303655.848:720): avc: denied { mount } for pid=8742 comm="syz.4.767" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 251.146298][ T40] audit: type=1400 audit(1759303655.858:721): avc: denied { unmount } for pid=8742 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 251.191839][ T8753] netlink: 'syz.3.770': attribute type 15 has an invalid length. [ 251.215565][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 251.242035][ T6053] usb 5-1: device descriptor read/64, error -71 [ 251.353457][ T6053] usb usb5-port1: attempt power cycle [ 251.355941][ T8744] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 251.397340][ T8756] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 251.506998][ T8765] overlayfs: failed to resolve './bus': -2 [ 251.527188][ T8768] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 251.706450][ T6053] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 251.768494][ T8768] bond1: entered promiscuous mode [ 251.778445][ T6053] usb 5-1: device descriptor read/8, error -71 [ 251.786607][ T8768] bond1: entered allmulticast mode [ 251.834243][ T8780] overlayfs: failed to resolve './file0': -2 [ 251.889802][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.928171][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.046476][ T8786] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 252.049899][ T8788] netlink: 52 bytes leftover after parsing attributes in process `syz.5.779'. [ 252.093707][ T6053] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.097750][ T1147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.106848][ T8788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30578 sclass=netlink_route_socket pid=8788 comm=syz.5.779 [ 252.116676][ T6053] usb 5-1: device descriptor read/8, error -71 [ 252.212448][ T8793] netlink: 'syz.5.781': attribute type 1 has an invalid length. [ 252.258693][ T8793] gretap1: entered allmulticast mode [ 252.274859][ T8793] bond1: (slave gretap1): making interface the new active one [ 252.288559][ T8793] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 252.292531][ T6053] usb usb5-port1: unable to enumerate USB device [ 252.342070][ T6017] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 252.480999][ T6024] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 252.512323][ T6017] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.536308][ T6017] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.540409][ T6017] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.556905][ T6017] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.580687][ T8785] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.589932][ T6017] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.689150][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.699079][ T6024] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 252.717637][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.734742][ T6024] usb 9-1: config 0 descriptor?? [ 252.796633][ T6017] usb 8-1: USB disconnect, device number 23 [ 253.042347][ T6024] usbhid 9-1:0.0: can't add hid device: -71 [ 253.047261][ T6024] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 253.056305][ T6024] usb 9-1: USB disconnect, device number 7 [ 253.492164][ T6053] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 253.522292][ T8804] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 253.614825][ T40] audit: type=1400 audit(1759303658.348:722): avc: denied { execute } for pid=8805 comm="syz.5.785" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 253.675284][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.784'. [ 253.700573][ T6053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.716232][ T6053] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 253.720098][ T6053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.747633][ T6053] usb 9-1: config 0 descriptor?? [ 253.808388][ T8811] ip6erspan0: entered promiscuous mode [ 253.877020][ T8807] SELinux: Context system_u:object_r:etc_t:s0 is not valid (left unmapped). [ 253.887491][ T40] audit: type=1400 audit(1759303658.628:723): avc: denied { relabelto } for pid=8803 comm="syz.0.784" name="cpu.stat" dev="tmpfs" ino=1230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_t:s0" [ 253.908682][ T40] audit: type=1400 audit(1759303658.628:724): avc: denied { associate } for pid=8803 comm="syz.0.784" name="cpu.stat" dev="tmpfs" ino=1230 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:etc_t:s0" [ 253.987301][ T6049] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 254.111102][ T8819] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 254.180626][ T6049] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.188484][ T6049] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.199544][ T6049] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.228339][ T6049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.284909][ T8821] netlink: 'syz.5.789': attribute type 7 has an invalid length. [ 254.320704][ T40] audit: type=1400 audit(1759303659.058:725): avc: denied { connect } for pid=8820 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 254.427898][ T40] audit: type=1400 audit(1759303659.168:726): avc: denied { unlink } for pid=5974 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=1230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_t:s0" [ 254.478766][ T6049] usb 8-1: usb_control_msg returned -32 [ 254.481553][ T6049] usbtmc 8-1:16.0: can't read capabilities [ 254.649994][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.725138][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.731101][ T6049] usb 8-1: USB disconnect, device number 24 [ 254.754440][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.901129][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.917227][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.950308][ T8832] bond0: (slave rose0): Enslaving as an active interface with an up link [ 255.148793][ T8841] mkiss: ax0: crc mode is auto. [ 255.275602][ T6049] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 255.295548][ T6017] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.362461][ T8844] syz_tun: entered allmulticast mode [ 255.394045][ T40] audit: type=1400 audit(1759303660.128:727): avc: denied { map } for pid=8842 comm="syz.5.795" path="socket:[26154]" dev="sockfs" ino=26154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 255.433419][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.452094][ T6017] usb 5-1: device descriptor read/64, error -71 [ 255.453899][ T40] audit: type=1400 audit(1759303660.128:728): avc: denied { read accept } for pid=8842 comm="syz.5.795" path="socket:[26154]" dev="sockfs" ino=26154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 255.502340][ T6049] usb 8-1: Invalid ep0 maxpacket: 32 [ 255.530492][ T6053] usbhid 9-1:0.0: can't add hid device: -71 [ 255.534989][ T6053] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 255.562437][ T6053] usb 9-1: USB disconnect, device number 8 [ 255.576825][ T8842] syz_tun: left allmulticast mode [ 255.639714][ T6049] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 255.681717][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'. [ 255.721569][ T6017] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 255.732970][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.764000][ T8851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.793686][ T6049] usb 8-1: Invalid ep0 maxpacket: 32 [ 255.798061][ T6049] usb usb8-port1: attempt power cycle [ 255.848911][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.862263][ T6017] usb 5-1: device descriptor read/64, error -71 [ 255.977217][ T6017] usb usb5-port1: attempt power cycle [ 256.093918][ T8859] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.104473][ T8861] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 256.141450][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.157618][ T6049] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 256.181641][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.234463][ T6049] usb 8-1: Invalid ep0 maxpacket: 32 [ 256.365771][ T6049] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 256.378627][ T6017] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 256.386613][ T40] audit: type=1400 audit(1759303661.108:729): avc: denied { shutdown } for pid=8862 comm="syz.5.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.427209][ T6049] usb 8-1: Invalid ep0 maxpacket: 32 [ 256.427596][ T6017] usb 5-1: device descriptor read/8, error -71 [ 256.430676][ T6049] usb usb8-port1: unable to enumerate USB device [ 256.541678][ T65] Bluetooth: hci0: command 0x0405 tx timeout [ 256.549487][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.712070][ T6017] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 256.744626][ T6017] usb 5-1: device descriptor read/8, error -71 [ 256.785109][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.868247][ T6017] usb usb5-port1: unable to enumerate USB device [ 256.978105][ T40] audit: type=1400 audit(1759303661.698:730): avc: denied { accept } for pid=8886 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 257.343223][ T40] audit: type=1400 audit(1759303662.078:731): avc: denied { create } for pid=8903 comm="syz.4.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 257.532119][ T6017] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 257.539158][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.713791][ T6017] usb 10-1: Using ep0 maxpacket: 16 [ 257.737699][ T6017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.763624][ T6017] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 257.769953][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.787763][ T6017] usb 10-1: Product: syz [ 257.789723][ T6017] usb 10-1: Manufacturer: syz [ 257.792298][ T6017] usb 10-1: SerialNumber: syz [ 257.796665][ T6017] usb 10-1: config 0 descriptor?? [ 257.822444][ T6017] hub 10-1:0.0: bad descriptor, ignoring hub [ 257.824940][ T6017] hub 10-1:0.0: probe with driver hub failed with error -5 [ 257.831659][ T6017] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input14 [ 257.901757][ T8915] tmpfs: Unknown parameter ' io¾¥r Ö©[kʱ6-d' [ 257.985994][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.037447][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.265034][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.478176][ T8934] input: syz0 as /devices/virtual/input/input15 [ 258.522506][ T8934] input: failed to attach handler leds to device input15, error: -6 [ 258.667833][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.732856][ T8936] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 258.830744][ T8939] dvmrp17: entered allmulticast mode [ 258.868956][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 258.868972][ T40] audit: type=1400 audit(1759303663.608:734): avc: denied { create } for pid=8944 comm="syz.3.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 258.881379][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.976651][ T8943] dvmrp17: left allmulticast mode [ 259.022925][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.529573][ T6049] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 259.626528][ T40] audit: type=1400 audit(1759303664.358:735): avc: denied { read } for pid=8963 comm="syz.3.833" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.655315][ T40] audit: type=1400 audit(1759303664.358:736): avc: denied { open } for pid=8963 comm="syz.3.833" path="/dev/nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.667423][ T6049] usb 5-1: device descriptor read/64, error -71 [ 259.673122][ T40] audit: type=1400 audit(1759303664.388:737): avc: denied { ioctl } for pid=8963 comm="syz.3.833" path="/dev/nullb0" dev="devtmpfs" ino=706 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 259.702103][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.017382][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.023091][ T6049] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 260.134125][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.217835][ T6049] usb 5-1: device descriptor read/64, error -71 [ 260.325967][ T6049] usb usb5-port1: attempt power cycle [ 260.702222][ T6049] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 260.746013][ T6049] usb 5-1: device descriptor read/8, error -71 [ 260.989653][ T6049] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 261.082338][ T6049] usb 5-1: device descriptor read/8, error -71 [ 261.149347][ T8973] IPVS: sh: FWM 3 0x00000003 - no destination available [ 261.233613][ T6049] usb usb5-port1: unable to enumerate USB device [ 261.252268][ T5977] Bluetooth: hci2: command 0x0406 tx timeout [ 261.254664][ T6053] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 261.258015][ T6053] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 261.303796][ T8976] overlay: Bad value for 'workdir' [ 261.997325][ T63] usb 10-1: USB disconnect, device number 4 [ 262.453011][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'. [ 262.984460][ T54] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 263.152065][ T54] usb 10-1: Using ep0 maxpacket: 32 [ 263.158456][ T54] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.163818][ T54] usb 10-1: config 0 has no interface number 0 [ 263.180348][ T54] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 263.190085][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.206985][ T54] usb 10-1: Product: syz [ 263.211588][ T54] usb 10-1: Manufacturer: syz [ 263.232260][ T54] usb 10-1: SerialNumber: syz [ 263.240653][ T54] usb 10-1: config 0 descriptor?? [ 263.259649][ T54] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 263.299357][ T54] usb 10-1: selecting invalid altsetting 1 [ 263.309036][ T54] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 263.345130][ T5977] Bluetooth: hci3: command 0x0406 tx timeout [ 263.364469][ T6053] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 263.368160][ T6053] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 263.395372][ T54] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.404573][ T54] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 263.419075][ T54] usb 10-1: media controller created [ 263.446624][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.525116][ T54] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 263.531264][ T54] zl10353_read_register: readreg error (reg=127, ret==-32) [ 263.940746][ T54] usb 10-1: USB disconnect, device number 5 [ 266.213795][ T5977] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.216296][ T6053] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 266.218582][ T6053] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 268.293704][ T6053] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 268.304815][ T6053] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 268.305510][ T5977] Bluetooth: hci0: command 0x0405 tx timeout [ 268.695082][ T9007] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 268.753614][ T9007] netlink: 'syz.4.846': attribute type 10 has an invalid length. [ 268.757441][ T9007] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 268.980830][ T9015] 9pnet: Unknown protocol version 9p2000.u¡CiäþV«!’¸$6 îv¤NûX˜ëä—©1…q [ 269.060706][ T9019] netlink: 'syz.5.851': attribute type 1 has an invalid length. [ 269.065087][ T9019] netlink: 224 bytes leftover after parsing attributes in process `syz.5.851'. [ 269.089865][ T9019] NCSI netlink: No device for ifindex 1509949443 [ 269.247424][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.304119][ T9021] netlink: 64 bytes leftover after parsing attributes in process `syz.5.852'. [ 269.475728][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.855'. [ 269.508665][ T9027] ip6gre1: entered allmulticast mode [ 269.576975][ T9027] trusted_key: syz.5.855 sent an empty control message without MSG_MORE. [ 269.603161][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.628535][ T9033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.857'. [ 269.649003][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 269.701494][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.724276][ T9030] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 269.759033][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.826332][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.829504][ T9030] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 269.837726][ T9030] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 269.890052][ T9030] bond1: (slave wlan1): Releasing active interface [ 269.935310][ T9041] syz_tun: entered allmulticast mode [ 269.952264][ T9039] syz_tun: left allmulticast mode [ 270.100749][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.221323][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.305314][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.622878][ T6052] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 270.793783][ T6052] usb 10-1: config index 0 descriptor too short (expected 6171, got 27) [ 270.812118][ T6052] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.813439][ T9063] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.818553][ T6052] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.821415][ T6052] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 270.830842][ T6063] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 270.841999][ T6052] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.866512][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.878700][ T6052] usb 10-1: Product: syz [ 270.880935][ T6052] usb 10-1: Manufacturer: syz [ 270.890451][ T9063] kvm: pic: non byte read [ 270.898454][ T6052] usb 10-1: SerialNumber: syz [ 270.902455][ T9063] kvm: pic: level sensitive irq not supported [ 270.903547][ T9063] kvm: pic: non byte read [ 270.907187][ T9070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 270.915002][ T9063] kvm: pic: level sensitive irq not supported [ 270.915957][ T9063] kvm: pic: non byte read [ 270.917875][ T9063] kvm: pic: level sensitive irq not supported [ 270.918620][ T9063] kvm: pic: non byte read [ 270.921273][ T9063] kvm: pic: level sensitive irq not supported [ 270.922071][ T9063] kvm: pic: non byte read [ 270.924622][ T9063] kvm: pic: level sensitive irq not supported [ 270.925016][ T9063] kvm: pic: non byte read [ 270.938876][ C0] hrtimer: interrupt took 9528267 ns [ 270.943975][ T6052] usb 10-1: config 0 descriptor?? [ 270.947685][ T9070] cgroup: Invalid name [ 270.965129][ T40] audit: type=1400 audit(1759303675.678:738): avc: denied { mounton } for pid=9069 comm="syz.4.870" path="/80/file3" dev="tmpfs" ino=440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 271.012088][ T6063] usb 8-1: device descriptor read/64, error -71 [ 271.286725][ T6052] usb 10-1: USB disconnect, device number 6 [ 271.327529][ T6063] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 271.376660][ T40] audit: type=1804 audit(1759303676.118:739): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.874" name="file0" dev="tmpfs" ino=457 res=1 errno=0 [ 271.416021][ T9080] netlink: 'syz.0.873': attribute type 1 has an invalid length. [ 271.473036][ T9080] netlink: 'syz.0.873': attribute type 10 has an invalid length. [ 271.491845][ T9080] veth0_macvtap: left promiscuous mode [ 271.509650][ T6063] usb 8-1: device descriptor read/64, error -71 [ 271.616926][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.635305][ T6063] usb usb8-port1: attempt power cycle [ 271.673270][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.949367][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.950815][ T40] audit: type=1400 audit(1759303676.668:740): avc: denied { ioctl } for pid=9094 comm="syz.5.877" path="socket:[27276]" dev="sockfs" ino=27276 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 271.972550][ T6063] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 271.992832][ T6063] usb 8-1: device descriptor read/8, error -71 [ 272.015662][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.176418][ T9105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.276671][ T6063] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 272.322941][ T6063] usb 8-1: device descriptor read/8, error -71 [ 272.351493][ T40] audit: type=1400 audit(1759303677.088:741): avc: denied { connect } for pid=9110 comm="syz.4.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.473307][ T6063] usb usb8-port1: unable to enumerate USB device [ 272.545340][ T9120] loop3: detected capacity change from 0 to 7 [ 272.558803][ T8249] Dev loop3: unable to read RDB block 7 [ 272.569616][ T8249] loop3: unable to read partition table [ 272.573808][ T8249] loop3: partition table beyond EOD, truncated [ 272.604711][ T9120] Dev loop3: unable to read RDB block 7 [ 272.616560][ T9120] loop3: unable to read partition table [ 272.620630][ T9120] loop3: partition table beyond EOD, truncated [ 272.624929][ T9120] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.652906][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 272.819261][ T34] usb 10-1: config index 0 descriptor too short (expected 6171, got 27) [ 272.825790][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 272.843941][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.843971][ T34] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.846360][ T34] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 272.846386][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.846401][ T34] usb 10-1: Product: syz [ 272.846412][ T34] usb 10-1: Manufacturer: syz [ 272.846423][ T34] usb 10-1: SerialNumber: syz [ 272.849857][ T34] usb 10-1: config 0 descriptor?? [ 272.965883][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.970947][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.081378][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.099490][ T9] usb 10-1: USB disconnect, device number 7 [ 273.181496][ T9129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 273.186287][ T9129] nbd: nbd64 already in use [ 273.530378][ T8249] udevd[8249]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 273.824758][ T9158] input: syz0 as /devices/virtual/input/input17 [ 273.892635][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.965074][ T6024] hid_parser_main: 4086 callbacks suppressed [ 273.965096][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 273.999400][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.009326][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.023682][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.041588][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.098205][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.158835][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.187451][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.203311][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.217667][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.227374][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.244834][ T6024] hid-generic 0001:0008:0006.0003: unknown main item tag 0x0 [ 274.295691][ T6024] hid-generic 0001:0008:0006.0003: hidraw1: HID vffffff.fa Device [syz1] on syz1 [ 274.333287][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.837381][ T9191] netlink: 100 bytes leftover after parsing attributes in process `syz.5.904'. [ 274.860636][ T9189] hfsplus: unable to find HFS+ superblock [ 275.037278][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.078972][ T9196] netlink: 452 bytes leftover after parsing attributes in process `syz.0.908'. [ 275.118959][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 275.119000][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.907'. [ 275.158061][ T9199] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 275.158089][ T9199] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 275.216420][ T6017] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 275.230331][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 275.394992][ T6017] usb 10-1: config index 0 descriptor too short (expected 6171, got 27) [ 275.420673][ T6017] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.426731][ T6017] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.440152][ T6017] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 275.448935][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.460991][ T6017] usb 10-1: Product: syz [ 275.475986][ T6017] usb 10-1: Manufacturer: syz [ 275.482983][ T6017] usb 10-1: SerialNumber: syz [ 275.491526][ T6017] usb 10-1: config 0 descriptor?? [ 275.734861][ T6017] usb 10-1: USB disconnect, device number 8 [ 276.056639][ T9215] program syz.3.913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.060336][ T9217] veth1_macvtap: entered allmulticast mode [ 276.170292][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 276.263108][ T9219] veth1_macvtap: left promiscuous mode [ 276.265640][ T9219] macsec0: entered promiscuous mode [ 276.309765][ T9219] macsec0: entered allmulticast mode [ 276.404242][ T9220] veth1_macvtap: entered promiscuous mode [ 276.409942][ T40] audit: type=1400 audit(1759303681.148:742): avc: denied { mount } for pid=9222 comm="syz.5.917" name="/" dev="9p" ino=71827887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 276.411263][ T9220] veth1_macvtap: entered allmulticast mode [ 276.458513][ T9223] program syz.5.917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.474108][ T9220] macsec0: left promiscuous mode [ 276.483455][ T9220] macsec0: left allmulticast mode [ 276.494892][ T9220] veth1_macvtap: left allmulticast mode [ 276.523082][ T40] audit: type=1400 audit(1759303681.248:743): avc: denied { unmount } for pid=8056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 276.644676][ T40] audit: type=1400 audit(1759303681.378:744): avc: denied { getopt } for pid=9229 comm="syz.3.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 276.852083][ T9237] netlink: 'syz.0.922': attribute type 4 has an invalid length. [ 276.861623][ T9237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.922'. [ 277.002889][ T9237] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 277.175658][ T40] audit: type=1400 audit(1759303681.918:745): avc: denied { firmware_load } for pid=9254 comm="syz.4.927" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 277.369263][ T6017] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 277.375773][ T9257] syz.4.927 (9257) used greatest stack depth: 19576 bytes left [ 277.605608][ T6017] usb 5-1: config index 0 descriptor too short (expected 6171, got 27) [ 277.609744][ T6017] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 277.631012][ T6017] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.655364][ T6017] usb 5-1: config 0 has no interface number 0 [ 277.659439][ T6017] usb 5-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.671130][ T6017] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 277.673385][ T40] audit: type=1400 audit(1759303682.418:746): avc: denied { create } for pid=9280 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 277.677265][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.692234][ T6017] usb 5-1: Product: syz [ 277.712233][ T6017] usb 5-1: Manufacturer: syz [ 277.714864][ T6017] usb 5-1: SerialNumber: syz [ 277.720729][ T6017] usb 5-1: config 0 descriptor?? [ 277.734477][ T6017] yurex 5-1:0.50: Could not find endpoints [ 277.781560][ T9292] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 277.978257][ T6017] usb 5-1: USB disconnect, device number 22 [ 278.120786][ T9313] netlink: 'syz.3.941': attribute type 30 has an invalid length. [ 278.125706][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 278.158399][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 278.499807][ T40] audit: type=1400 audit(1759303683.238:747): avc: denied { getopt } for pid=9327 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.626178][ T40] audit: type=1400 audit(1759303683.338:748): avc: denied { connect } for pid=9332 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 278.693896][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.945'. [ 279.250497][ T9351] team0: Device gtp0 is of different type [ 279.552035][ T40] audit: type=1400 audit(1759303684.268:749): avc: denied { bind } for pid=9360 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.612207][ T40] audit: type=1400 audit(1759303684.268:750): avc: denied { write } for pid=9360 comm="syz.0.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 279.625555][ T54] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 279.833808][ T54] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 279.839238][ T54] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 279.854632][ T54] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.860151][ T54] usb 8-1: config 0 has no interface number 0 [ 279.863831][ T54] usb 8-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.894444][ T54] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 279.921288][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.935849][ T54] usb 8-1: Product: syz [ 279.944991][ T54] usb 8-1: Manufacturer: syz [ 279.948453][ T54] usb 8-1: SerialNumber: syz [ 279.959396][ T54] usb 8-1: config 0 descriptor?? [ 279.985131][ T54] yurex 8-1:0.50: Could not find endpoints [ 280.074423][ T9384] 9pnet_fd: Insufficient options for proto=fd [ 280.200264][ T34] usb 8-1: USB disconnect, device number 33 [ 280.559906][ T9394] binder: BINDER_SET_CONTEXT_MGR already set [ 280.597762][ T9394] binder: 9393:9394 ioctl 4018620d 200000000140 returned -16 [ 280.683277][ T9397] netlink: 68 bytes leftover after parsing attributes in process `syz.5.965'. [ 281.001232][ T9405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.454048][ T9433] netlink: 'syz.4.975': attribute type 9 has an invalid length. [ 281.657768][ T9451] overlayfs: missing 'lowerdir' [ 281.777569][ T6050] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 281.971356][ T40] audit: type=1400 audit(1759303686.708:751): avc: denied { cmd } for pid=9463 comm="syz.3.983" path="socket:[30206]" dev="sockfs" ino=30206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 281.986879][ T6050] usb 10-1: config index 0 descriptor too short (expected 6171, got 27) [ 281.990384][ T6050] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 281.995792][ T6050] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.000479][ T6050] usb 10-1: config 0 has no interface number 0 [ 282.006043][ T6050] usb 10-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.036598][ T6050] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 282.045384][ T6050] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.050970][ T6050] usb 10-1: Product: syz [ 282.057280][ T6050] usb 10-1: Manufacturer: syz [ 282.061711][ T6050] usb 10-1: SerialNumber: syz [ 282.066509][ T6050] usb 10-1: config 0 descriptor?? [ 282.073174][ T6050] yurex 10-1:0.50: Could not find endpoints [ 282.122171][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 282.276432][ T34] usb 10-1: USB disconnect, device number 9 [ 282.292488][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 282.311085][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.319645][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.328737][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.333321][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.340654][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.349145][ T9] usb 5-1: config 0 descriptor?? [ 282.663463][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 282.692093][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 282.730159][ T9] usb 5-1: USB disconnect, device number 23 [ 282.768188][ T9485] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 282.875530][ T40] audit: type=1400 audit(1759303687.618:752): avc: denied { write } for pid=9486 comm="syz.5.990" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 283.129473][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 283.322312][ T9497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.993'. [ 283.340136][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 283.433436][ T9] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 283.447940][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 283.456315][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.460130][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.485525][ T9] usb 5-1: Product: Ñ™ [ 283.487199][ T9] usb 5-1: Manufacturer: 牺㧉Ⲅ⑩頻ޭ○ﭮ瞰쳸䟚챶锽错螮錒㈑⃇敫è¦ç¦ä¢·ã€Žçªšç¤Œå£•î‰³î°…隘冘璛ᰮ槌쩊屇ꋧ㠋䫬孿㊼ïƒà¸Žê¯“覴ናヽ㪩庽ﾒ뱃腾ìµî‡©æ˜‘ë‚妉临㽻趩 [ 283.499451][ T9508] mkiss: ax0: crc mode is auto. [ 283.518765][ T9] usb 5-1: SerialNumber: ⊠[ 283.526863][ T9] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 283.533449][ T9] usb 5-1: no configuration chosen from 1 choice [ 283.785638][ T6050] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 283.823392][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1002'. [ 283.977214][ T6050] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 283.983382][ T6050] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 283.988727][ T6050] usb 8-1: config 0 has no interface number 0 [ 283.992850][ T6050] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.000164][ T6050] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.034321][ T6050] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 284.040060][ T6050] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.048038][ T6050] usb 8-1: Product: syz [ 284.052991][ T6050] usb 8-1: Manufacturer: syz [ 284.056192][ T6050] usb 8-1: SerialNumber: syz [ 284.065575][ T6050] usb 8-1: config 0 descriptor?? [ 284.080238][ T6050] yurex 8-1:0.50: Could not submitting URB [ 284.084549][ T6050] yurex 8-1:0.50: probe with driver yurex failed with error -5 [ 284.085847][ C2] vkms_vblank_simulate: vblank timer overrun [ 284.217144][ C2] vkms_vblank_simulate: vblank timer overrun [ 284.284835][ T6050] usb 8-1: USB disconnect, device number 34 [ 284.402218][ T9] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 284.564031][ T9] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 284.567360][ T9] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64 [ 284.571276][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 284.633091][ T9] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 284.636738][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.639959][ T9] usb 10-1: Product: syz [ 284.660190][ T9] usb 10-1: Manufacturer: syz [ 284.679315][ T9] usb 10-1: SerialNumber: syz [ 284.692840][ T9] usb 10-1: config 0 descriptor?? [ 284.712618][ T9541] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 284.884466][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1011'. [ 284.922775][ T9541] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 284.955061][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input18 [ 285.241367][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1008'. [ 285.254885][ T40] audit: type=1400 audit(1759303689.998:753): avc: denied { setopt } for pid=9568 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 285.262426][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1008'. [ 285.321277][ T40] audit: type=1400 audit(1759303690.008:754): avc: denied { write } for pid=9568 comm="syz.3.1014" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 285.346694][ T9571] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1014'. [ 285.356459][ T6052] usb 10-1: USB disconnect, device number 10 [ 285.721194][ C2] vkms_vblank_simulate: vblank timer overrun [ 285.788283][ T34] usb 5-1: USB disconnect, device number 24 [ 285.911562][ T40] audit: type=1400 audit(1759303690.648:755): avc: denied { shutdown } for pid=9576 comm="syz.0.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.936073][ T9571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.078530][ T9571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.134528][ T9571] bond0 (unregistering): (slave bond3): Releasing backup interface [ 286.158446][ T9571] bond0 (unregistering): Released all slaves [ 286.253260][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.325200][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.387570][ T34] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 286.466044][ T9597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=9597 comm=syz.4.1023 [ 286.495285][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 286.566026][ T34] usb 5-1: config index 0 descriptor too short (expected 6171, got 27) [ 286.580656][ T34] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 286.617574][ T34] usb 5-1: config 0 has no interface number 0 [ 286.619727][ T34] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.651146][ T34] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 286.653361][ T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 286.673493][ C2] vkms_vblank_simulate: vblank timer overrun [ 286.698177][ T34] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 286.703522][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.707243][ T34] usb 5-1: Product: syz [ 286.709468][ T34] usb 5-1: Manufacturer: syz [ 286.711369][ T34] usb 5-1: SerialNumber: syz [ 286.720303][ T34] usb 5-1: config 0 descriptor?? [ 286.759305][ T34] yurex 5-1:0.50: Could not submitting URB [ 286.762899][ T34] yurex 5-1:0.50: probe with driver yurex failed with error -5 [ 286.831054][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.839469][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.856162][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 286.861461][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 286.877720][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.877741][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.886478][ T9] usb 8-1: config 0 descriptor?? [ 287.054698][ T34] usb 5-1: USB disconnect, device number 25 [ 287.149952][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.155026][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.194429][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.199597][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.227103][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.233170][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.259143][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.264871][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.272371][ T9595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.293346][ T9595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.549498][ T9] hid_parser_main: 75 callbacks suppressed [ 287.549522][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.559586][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.575191][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.580753][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.585723][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.604557][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.608732][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.643969][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.646814][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.649736][ T9] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 287.714365][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 287.732842][ T9] usb 8-1: USB disconnect, device number 35 [ 287.778824][ T9620] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 287.863189][ T40] audit: type=1400 audit(1759303692.608:756): avc: denied { map } for pid=9619 comm="syz.0.1030" path="/file0" dev="ramfs" ino=30293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 287.901241][ T9625] netlink: 'syz.5.1032': attribute type 1 has an invalid length. [ 287.930354][ T9620] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 287.946843][ T40] audit: type=1400 audit(1759303692.668:757): avc: denied { mounton } for pid=9619 comm="syz.0.1030" path="/file0" dev="ramfs" ino=30293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 287.973267][ T9625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1032'. [ 288.040192][ T9621] fido_id[9621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 288.069969][ T9625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1032'. [ 288.085111][ T9625] bond2: entered promiscuous mode [ 288.087450][ T9625] bond2: entered allmulticast mode [ 288.090363][ T9625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.345918][ T40] audit: type=1400 audit(1759303693.048:758): avc: denied { write } for pid=9647 comm="syz.0.1039" name="fb0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 288.364628][ T40] audit: type=1400 audit(1759303693.048:759): avc: denied { nlmsg_write } for pid=9647 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 288.397762][ T40] audit: type=1800 audit(1759303693.048:760): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1037" name="file0" dev="overlay" ino=2 res=0 errno=0 [ 289.312661][ T40] audit: type=1800 audit(1759303694.038:761): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1048" name="nullb0" dev="tmpfs" ino=831 res=0 errno=0 [ 289.349650][ T40] audit: type=1400 audit(1759303694.068:762): avc: denied { lock } for pid=9677 comm="syz.4.1048" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 289.505711][ T34] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 289.585352][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1049'. [ 289.640286][ T9685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.695835][ T34] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.714156][ T34] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.779800][ T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.785466][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.789486][ T40] audit: type=1400 audit(1759303694.528:763): avc: denied { attach_queue } for pid=9674 comm="syz.5.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 289.884579][ T9670] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.891001][ T34] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.924291][ T9695] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1051'. [ 290.054255][ T6063] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 290.111361][ T9] usb 5-1: USB disconnect, device number 26 [ 290.224043][ T6063] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 290.239508][ T6063] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 290.256315][ T6063] usb 8-1: config 0 has no interface number 0 [ 290.278318][ T6063] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.301258][ T6063] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 290.320867][ T6063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.324351][ T6063] usb 8-1: Product: syz [ 290.335289][ T9670] tipc: Enabling of bearer rejected, already enabled [ 290.446147][ T6063] usb 8-1: Manufacturer: syz [ 290.472334][ T6063] usb 8-1: SerialNumber: syz [ 290.484082][ T6063] usb 8-1: config 0 descriptor?? [ 290.523992][ T6063] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 290.592889][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1053'. [ 290.634292][ T9707] macvlan2: entered promiscuous mode [ 290.636544][ T9707] macvlan2: entered allmulticast mode [ 290.704413][ T841] usb 8-1: USB disconnect, device number 36 [ 290.716172][ T841] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 291.523573][ T9741] overlayfs: failed to resolve './file1/file0': -2 [ 291.547662][ T9740] overlayfs: failed to clone upperpath [ 291.600138][ T9744] 9pnet_virtio: no channels available for device syz [ 291.652473][ T9742] openvswitch: netlink: Flow actions attr not present in new flow. [ 291.923513][ T9749] binder_alloc: binder_alloc_mmap_handler: 9747 200000ffd000-200001000000 already mapped failed -16 [ 291.936720][ T9748] binder: BINDER_SET_CONTEXT_MGR already set [ 291.948785][ T9748] binder: 9747:9748 ioctl 4018620d 200000000040 returned -16 [ 291.952316][ T9748] binder_alloc: 9747: binder_alloc_buf, no vma [ 291.952410][ T40] audit: type=1400 audit(1759303696.678:764): avc: denied { ioctl } for pid=9750 comm="syz.3.1066" path="socket:[28389]" dev="sockfs" ino=28389 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 292.005502][ T9749] binder_alloc: 9747: binder_alloc_buf, no vma [ 292.048802][ T9748] binder: 9747:9748 ioctl c0306201 200000000240 returned -11 [ 292.370810][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1069'. [ 292.440913][ T9766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1070'. [ 292.446633][ T9763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9763 comm=syz.0.1069 [ 292.448007][ T40] audit: type=1400 audit(1759303697.178:765): avc: denied { ioctl } for pid=9762 comm="syz.0.1069" path="socket:[30395]" dev="sockfs" ino=30395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 292.598461][ T9771] erspan0: entered promiscuous mode [ 292.802674][ T841] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 292.945360][ T841] usb 10-1: config index 0 descriptor too short (expected 6171, got 27) [ 292.949909][ T841] usb 10-1: config 0 has an invalid interface number: 50 but max is 0 [ 292.962157][ T841] usb 10-1: config 0 has no interface number 0 [ 292.966192][ T841] usb 10-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.006341][ T841] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 293.011102][ T841] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.015542][ T841] usb 10-1: Product: syz [ 293.018209][ T841] usb 10-1: Manufacturer: syz [ 293.022447][ T841] usb 10-1: SerialNumber: syz [ 293.029226][ T841] usb 10-1: config 0 descriptor?? [ 293.064658][ T841] yurex 10-1:0.50: USB YUREX device now attached to Yurex #0 [ 293.319095][ T6017] usb 10-1: USB disconnect, device number 11 [ 293.340535][ T6017] yurex 10-1:0.50: USB YUREX #0 now disconnected [ 293.566830][ T9795] netlink: 'syz.4.1077': attribute type 21 has an invalid length. [ 293.570914][ T9795] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1077'. [ 293.955963][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 293.955982][ T40] audit: type=1400 audit(1759303698.688:767): avc: denied { bind } for pid=9798 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 293.986363][ T40] audit: type=1400 audit(1759303698.688:768): avc: denied { write } for pid=9798 comm="syz.0.1078" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 294.013726][ T40] audit: type=1400 audit(1759303698.688:769): avc: denied { setopt } for pid=9798 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.030021][ T9806] tap0: tun_chr_ioctl cmd 1074025675 [ 294.041309][ T9806] tap0: persist enabled [ 294.047561][ T9806] tap0: tun_chr_ioctl cmd 1074025675 [ 294.063934][ T9806] tap0: persist enabled [ 294.080768][ T9808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.294356][ T40] audit: type=1400 audit(1759303699.038:770): avc: denied { lock } for pid=9813 comm="syz.4.1084" path="socket:[31298]" dev="sockfs" ino=31298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 294.530377][ T40] audit: type=1400 audit(1759303699.258:771): avc: denied { ioctl } for pid=9820 comm="syz.5.1087" path="/dev/uhid" dev="devtmpfs" ino=1295 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 294.796266][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 294.803684][ T65] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 295.283554][ T6017] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 295.509498][ T6017] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 295.537217][ T6017] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 295.540601][ T6017] usb 8-1: config 0 has no interface number 0 [ 295.547559][ T6017] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.567637][ T6017] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 295.575657][ T6017] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.606334][ T6017] usb 8-1: Product: syz [ 295.609383][ T6017] usb 8-1: Manufacturer: syz [ 295.621851][ T6017] usb 8-1: SerialNumber: syz [ 295.634797][ T6017] usb 8-1: config 0 descriptor?? [ 295.676272][ T6017] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 295.884147][ T6049] usb 8-1: USB disconnect, device number 37 [ 295.892863][ T6049] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 296.624173][ T9837] [U]  [ 296.638663][ T9837] netlink: 'syz.3.1090': attribute type 5 has an invalid length. [ 300.832463][ T9837] ip6erspan0: entered promiscuous mode [ 301.049534][ T9855] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.068948][ T9852] netlink: 'syz.5.1094': attribute type 1 has an invalid length. [ 301.663211][ T6049] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 301.782603][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1100'. [ 301.845249][ T6049] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 301.848431][ T6049] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 301.851223][ T6049] usb 8-1: config 0 has no interface number 0 [ 301.858120][ T6049] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.896702][ T6049] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 301.901143][ T6049] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.904512][ T9875] comedi comedi0: No channels found! [ 301.905432][ T6049] usb 8-1: Product: syz [ 301.909401][ T6049] usb 8-1: Manufacturer: syz [ 301.912313][ T6049] usb 8-1: SerialNumber: syz [ 301.918294][ T6049] usb 8-1: config 0 descriptor?? [ 301.984956][ T6049] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 302.170113][ T6017] usb 8-1: USB disconnect, device number 38 [ 302.210388][ T6017] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 302.410131][ T9880] openvswitch: netlink: IP tunnel dst address not specified [ 302.529935][ T9888] bridge_slave_0: left allmulticast mode [ 302.532528][ T9888] bridge_slave_0: left promiscuous mode [ 302.541053][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.682325][ T9888] bridge_slave_1: left allmulticast mode [ 302.690553][ T9888] bridge_slave_1: left promiscuous mode [ 302.693657][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.896185][ T9888] bond0: (slave bond_slave_0): Releasing backup interface [ 302.965389][ T9888] bond0: (slave bond_slave_1): Releasing backup interface [ 303.109536][ T9888] team0: Port device team_slave_0 removed [ 303.219027][ T9888] team0: Port device team_slave_1 removed [ 303.265944][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.269223][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.309813][ T9898] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 303.317980][ T40] audit: type=1400 audit(1759303708.058:772): avc: denied { read } for pid=9897 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 303.320642][ T9888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.356259][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.481354][ T9890] team0: Mode changed to "activebackup" [ 304.139393][ T9926] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1115'. [ 304.281488][ T40] audit: type=1326 audit(1759303709.018:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.0.1116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa163f8eec9 code=0x7fc00000 [ 304.457200][ T9938] sctp: [Deprecated]: syz.0.1119 (pid 9938) Use of int in maxseg socket option. [ 304.457200][ T9938] Use struct sctp_assoc_value instead [ 304.474018][ T40] audit: type=1400 audit(1759303709.218:774): avc: denied { write } for pid=9937 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 304.664542][ T9944] Failed to get privilege flags for destination (handle=0x2:0x0) [ 304.769250][ T40] audit: type=1400 audit(1759303709.488:775): avc: denied { map } for pid=9945 comm="syz.3.1122" path="/dev/usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 304.792076][ T40] audit: type=1400 audit(1759303709.488:776): avc: denied { setopt } for pid=9945 comm="syz.3.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 305.013216][ T40] audit: type=1400 audit(1759303709.738:777): avc: denied { setattr } for pid=9950 comm="syz.0.1124" path="/dev/mixer" dev="devtmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 305.120985][ C3] vkms_vblank_simulate: vblank timer overrun [ 305.152435][ C3] vkms_vblank_simulate: vblank timer overrun [ 305.361520][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 305.405385][ C3] vkms_vblank_simulate: vblank timer overrun [ 305.499194][ T9967] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 305.531153][ T9967] CIFS mount error: No usable UNC path provided in device string! [ 305.531153][ T9967] [ 305.553555][ T9967] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 305.580986][ C3] vkms_vblank_simulate: vblank timer overrun [ 305.737046][ C3] vkms_vblank_simulate: vblank timer overrun [ 306.032974][ C3] vkms_vblank_simulate: vblank timer overrun [ 306.136436][ C3] vkms_vblank_simulate: vblank timer overrun [ 306.200795][ T9984] fuse: Bad value for 'fd' [ 306.230879][ C3] vkms_vblank_simulate: vblank timer overrun [ 306.432329][ C3] vkms_vblank_simulate: vblank timer overrun [ 306.519153][ T40] audit: type=1400 audit(1759303711.258:778): avc: denied { getopt } for pid=9990 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.520196][ T9992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50117 sclass=netlink_route_socket pid=9992 comm=syz.0.1135 [ 306.579455][ T40] audit: type=1400 audit(1759303711.318:779): avc: denied { setopt } for pid=9991 comm="syz.3.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.847185][ C3] vkms_vblank_simulate: vblank timer overrun [ 306.897697][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 306.908535][ T40] audit: type=1400 audit(1759303711.648:780): avc: denied { write } for pid=9998 comm="syz.0.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 306.975139][ T9996] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 306.975157][ T9997] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 307.689304][ C3] vkms_vblank_simulate: vblank timer overrun [ 307.868752][ T40] audit: type=1400 audit(1759303712.608:781): avc: denied { lock } for pid=10017 comm="syz.3.1145" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.144968][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.220925][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.397092][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.445084][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.534619][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.665029][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.704985][ C3] vkms_vblank_simulate: vblank timer overrun [ 308.892573][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 309.068167][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 309.080101][T10040] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1152'. [ 309.187766][ T40] audit: type=1400 audit(1759303713.928:782): avc: denied { connect } for pid=10042 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.242089][ T40] audit: type=1400 audit(1759303713.978:783): avc: denied { write } for pid=10042 comm="syz.4.1153" path="socket:[30594]" dev="sockfs" ino=30594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 309.366560][T10046] ceph: No source [ 309.391373][T10048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1156'. [ 309.448955][ C3] vkms_vblank_simulate: vblank timer overrun [ 309.585069][ C3] vkms_vblank_simulate: vblank timer overrun [ 309.713035][ C3] vkms_vblank_simulate: vblank timer overrun [ 310.158143][T10050] syz.0.1155 (10050): drop_caches: 2 [ 310.381519][ T40] audit: type=1400 audit(1759303715.118:784): avc: denied { getopt } for pid=10061 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 310.388993][T10062] bridge0: port 3(syz_tun) entered disabled state [ 310.434771][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.446601][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.624160][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1162'. [ 310.786604][T10080] netlink: 'syz.0.1165': attribute type 10 has an invalid length. [ 310.813856][T10080] team0: Device hsr_slave_0 failed to register rx_handler [ 311.065109][ C3] vkms_vblank_simulate: vblank timer overrun [ 311.188750][T10099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1171'. [ 311.528968][T10105] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.537644][T10105] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.724945][ C3] vkms_vblank_simulate: vblank timer overrun [ 311.755851][T10105] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.784759][T10105] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.838959][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1174'. [ 311.847997][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1174'. [ 311.923256][T10105] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.934460][T10105] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.036417][T10114] netlink: 'syz.3.1177': attribute type 10 has an invalid length. [ 312.066400][ C3] vkms_vblank_simulate: vblank timer overrun [ 312.067719][T10114] team0: Device hsr_slave_0 failed to register rx_handler [ 312.154722][T10105] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.181402][T10105] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.209719][T10120] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 312.357776][ T1147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.364353][ T1147] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.381579][ T1147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.388471][ T1147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.409406][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.419897][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.446674][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.461392][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.721878][T10132] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 313.119747][T10135] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 313.702074][ T40] audit: type=1326 audit(1759303718.408:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10141 comm="syz.4.1188" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f2517785d67 code=0x0 [ 313.873679][T10150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1189'. [ 314.019011][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 314.506910][T10168] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 314.532682][T10169] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 314.553396][T10171] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 315.078712][ T40] audit: type=1400 audit(1759303719.818:786): avc: denied { map } for pid=10189 comm="syz.0.1198" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.266492][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1202'. [ 315.332083][ T54] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 315.565052][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 315.701218][ T54] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 315.725957][T10208] bridge3: entered promiscuous mode [ 315.744420][ T40] audit: type=1400 audit(1759303720.468:787): avc: denied { ioctl } for pid=10207 comm="syz.0.1205" path="/dev/input/mouse0" dev="devtmpfs" ino=945 ioctlcmd=0x5641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 315.901283][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 315.912336][ T54] usb usb8-port1: attempt power cycle [ 316.342213][ T54] usb 8-1: new low-speed USB device number 41 using dummy_hcd [ 316.386920][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 316.532359][ T54] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 316.645111][ T54] usb 8-1: Invalid ep0 maxpacket: 64 [ 316.649048][ T54] usb usb8-port1: unable to enumerate USB device [ 316.979886][T10233] IPVS: length: 184 != 24 [ 317.244285][ T5977] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.254576][ T5977] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.261665][ T5977] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.268889][ T5977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.290802][ T5977] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.304995][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.325883][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.337193][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.350333][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.386024][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.999374][T10236] chnl_net:caif_netlink_parms(): no params data found [ 318.111378][ T40] audit: type=1400 audit(1759303722.848:788): avc: denied { ioctl } for pid=10249 comm="syz.4.1217" path="socket:[34992]" dev="sockfs" ino=34992 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 318.471614][ T40] audit: type=1400 audit(1759303723.198:789): avc: denied { write } for pid=10256 comm="syz.0.1218" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.563824][ T40] audit: type=1400 audit(1759303723.208:790): avc: denied { create } for pid=10256 comm="syz.0.1218" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 318.584194][ T40] audit: type=1400 audit(1759303723.288:791): avc: denied { mounton } for pid=10256 comm="syz.0.1218" path="/330/file0" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.969460][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.983027][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.064476][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.176088][ T55] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 319.493397][ T65] Bluetooth: hci4: command tx timeout [ 319.503966][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.618613][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.626509][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.629775][T10236] bridge_slave_0: entered allmulticast mode [ 319.644760][T10236] bridge_slave_0: entered promiscuous mode [ 319.651655][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.672760][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.677741][T10236] bridge_slave_1: entered allmulticast mode [ 319.694357][T10236] bridge_slave_1: entered promiscuous mode [ 319.890167][ T55] usb 8-1: device descriptor read/64, error -71 [ 320.069185][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.126402][T10284] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1226'. [ 320.141633][T10284] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1226'. [ 320.145661][ T55] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 320.186381][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.200035][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.394241][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.399864][ T55] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.410098][ T55] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.419321][ T55] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.431386][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.453976][ T55] usb 8-1: config 0 descriptor?? [ 320.714197][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.728547][ T55] usbhid 8-1:0.0: can't add hid device: -71 [ 320.756278][ T55] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 320.773760][ T55] usb 8-1: USB disconnect, device number 44 [ 320.829732][T10236] team0: Port device team_slave_0 added [ 320.840930][T10236] team0: Port device team_slave_1 added [ 321.185062][ T6052] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 321.282708][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.286201][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.385988][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.396271][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.399395][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.411383][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.426637][ T6052] usb 5-1: config index 0 descriptor too short (expected 6171, got 27) [ 321.467433][ T6052] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 321.502641][ T6052] usb 5-1: config 0 has no interface number 0 [ 321.505246][ T6052] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.573182][ T65] Bluetooth: hci4: command tx timeout [ 321.576527][ T6052] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 321.616399][ T6052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.636160][ T6052] usb 5-1: Product: syz [ 321.637885][ T6052] usb 5-1: Manufacturer: syz [ 321.654676][ T6052] usb 5-1: SerialNumber: syz [ 321.660106][ T6052] usb 5-1: config 0 descriptor?? [ 321.680167][T10236] hsr_slave_0: entered promiscuous mode [ 321.683707][ T6052] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 321.701026][T10236] hsr_slave_1: entered promiscuous mode [ 321.717983][T10236] debugfs: 'hsr0' already exists in 'hsr' [ 321.726456][T10236] Cannot create hsr debugfs directory [ 321.904525][ T6052] usb 5-1: USB disconnect, device number 28 [ 321.915648][ T6052] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 322.349724][ T13] bridge0: port 3(batadv0) entered disabled state [ 322.384431][ T13] bridge_slave_1: left allmulticast mode [ 322.387500][ T13] bridge_slave_1: left promiscuous mode [ 322.436997][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.505119][ T13] bridge_slave_0: left allmulticast mode [ 322.522838][ T13] bridge_slave_0: left promiscuous mode [ 322.525274][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.647116][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 323.017913][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 323.080828][ T40] audit: type=1400 audit(1759303727.818:792): avc: denied { write } for pid=10323 comm="syz.4.1237" lport=58729 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 323.107053][ T40] audit: type=1400 audit(1759303727.818:793): avc: denied { setopt } for pid=10323 comm="syz.4.1237" lport=58729 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 323.652262][ T65] Bluetooth: hci4: command tx timeout [ 324.045310][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.093757][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.113787][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 324.121122][ T13] bond0 (unregistering): Released all slaves [ 324.137542][ T13] bond1 (unregistering): Released all slaves [ 324.651391][ T13] bond2 (unregistering): Released all slaves [ 324.813084][T10316] vlan3: entered promiscuous mode [ 324.819247][T10316] vlan3: entered allmulticast mode [ 324.823340][T10316] hsr_slave_1: entered allmulticast mode [ 324.895526][ T13] IPVS: stopping backup sync thread 8819 ... [ 325.542938][T10322] gre0: Master is either lo or non-ether device [ 325.745668][ T65] Bluetooth: hci4: command tx timeout [ 325.947893][T10349] netlink: 'syz.3.1245': attribute type 10 has an invalid length. [ 326.042226][ T40] audit: type=1400 audit(1759303730.778:794): avc: denied { listen } for pid=10353 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 326.052787][T10354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1246'. [ 326.056577][T10349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.077629][ T40] audit: type=1400 audit(1759303730.778:795): avc: denied { accept } for pid=10353 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 326.079048][T10349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.108747][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.221028][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.360210][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.381316][ T13] hsr_slave_0: left promiscuous mode [ 326.389346][ T13] hsr_slave_1: left promiscuous mode [ 326.397649][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.413502][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.434601][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.438499][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.562106][ T13] veth1_macvtap: left promiscuous mode [ 326.564857][ T13] veth0_macvtap: left promiscuous mode [ 326.569176][ T13] veth1_vlan: left promiscuous mode [ 326.572731][ T13] veth0_vlan: left promiscuous mode [ 326.813082][ T40] audit: type=1400 audit(1759303731.548:796): avc: denied { append } for pid=10365 comm="syz.3.1249" name="nullb0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.271316][ T40] audit: type=1400 audit(1759303732.008:797): avc: denied { accept } for pid=10375 comm="syz.3.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 327.612342][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.847898][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.030497][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.062080][ T6017] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 328.259412][ T6017] usb 5-1: config index 0 descriptor too short (expected 6171, got 27) [ 328.263080][ T6017] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 328.266820][ T6017] usb 5-1: config 0 has no interface number 0 [ 328.269177][ T6017] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.296037][ T6017] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 328.328901][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.334030][ T6017] usb 5-1: Product: syz [ 328.335957][ T6017] usb 5-1: Manufacturer: syz [ 328.337780][ T6017] usb 5-1: SerialNumber: syz [ 328.341439][ T6017] usb 5-1: config 0 descriptor?? [ 328.383177][ T6017] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 328.611341][ T6017] usb 5-1: USB disconnect, device number 29 [ 328.620135][ T6017] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 328.828789][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.913355][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.962552][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.060507][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.680212][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.143350][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.210434][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.255165][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.458171][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.873596][ T13] team0 (unregistering): Port device team_slave_1 removed [ 331.289954][ T13] team0 (unregistering): Port device team_slave_0 removed [ 334.402797][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.405267][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.528966][T10236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 334.542571][T10236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 334.589934][T10236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.651271][T10236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.688705][ T40] audit: type=1400 audit(1759303739.428:798): avc: denied { ioctl } for pid=10393 comm="syz.3.1256" path="socket:[33326]" dev="sockfs" ino=33326 ioctlcmd=0x4d12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 334.750854][T10393] delete_channel: no stack [ 335.000931][T10236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.043845][T10236] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.151039][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.156558][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.169063][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.202669][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.941246][T10432] binder: Binderfs stats mode cannot be changed during a remount [ 335.964030][T10432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1264'. [ 335.980194][ T40] audit: type=1400 audit(1759303740.678:799): avc: denied { remount } for pid=10431 comm="syz.0.1264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.039709][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1265'. [ 336.152054][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.272584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 336.312357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 336.733703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 337.000170][T10236] veth0_vlan: entered promiscuous mode [ 337.026726][T10236] veth1_vlan: entered promiscuous mode [ 337.127218][ T40] audit: type=1400 audit(1759303741.868:800): avc: denied { remount } for pid=10461 comm="syz.4.1270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 337.128420][T10236] veth0_macvtap: entered promiscuous mode [ 337.161610][T10236] veth1_macvtap: entered promiscuous mode [ 337.184334][ T40] audit: type=1400 audit(1759303741.918:801): avc: denied { ioctl } for pid=10446 comm="syz.0.1267" path="socket:[35499]" dev="sockfs" ino=35499 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 337.206972][T10447] IPVS: Error connecting to the multicast addr [ 337.222184][ T40] audit: type=1400 audit(1759303741.928:802): avc: denied { associate } for pid=10463 comm="syz.4.1270" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 337.225346][T10236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.237429][ T40] audit: type=1400 audit(1759303741.948:803): avc: denied { create } for pid=10446 comm="syz.0.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 337.239101][T10447] Bluetooth: hci0: Frame reassembly failed (-84) [ 337.278595][ T40] audit: type=1400 audit(1759303741.978:804): avc: denied { bind } for pid=10446 comm="syz.0.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 337.408434][T10236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.451676][ T7856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.458520][ T7856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.594326][ T7856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.600157][ T7856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.885238][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.891408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.322502][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.327197][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.400677][ T40] audit: type=1400 audit(1759303743.128:805): avc: denied { mounton } for pid=10236 comm="syz-executor" path="/syzkaller.gEY03D/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 338.464983][ T6017] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 338.614299][ T6017] usb 8-1: config index 0 descriptor too short (expected 6171, got 27) [ 338.618180][ T6017] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 338.642036][ T6017] usb 8-1: config 0 has no interface number 0 [ 338.666056][ T6017] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 338.704338][ T6017] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 338.711099][ T6017] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.738514][ T6017] usb 8-1: Product: syz [ 338.743429][ T6017] usb 8-1: Manufacturer: syz [ 338.752636][ T6017] usb 8-1: SerialNumber: syz [ 338.833969][ T6017] usb 8-1: config 0 descriptor?? [ 338.892619][ T6017] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 339.079140][ T6017] usb 8-1: USB disconnect, device number 45 [ 339.161865][ T6017] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 339.257885][ T65] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 339.941027][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 340.256880][ C3] vkms_vblank_simulate: vblank timer overrun [ 340.879688][T10513] /dev/sg0: Can't lookup blockdev [ 340.988407][T10510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.261354][ C3] vkms_vblank_simulate: vblank timer overrun [ 341.362142][ T6049] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 341.386516][T10526] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 341.473707][ T40] audit: type=1400 audit(1759303746.208:806): avc: denied { module_load } for pid=10528 comm="syz.0.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 341.496451][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1290'. [ 341.518803][ T6049] usb 11-1: config index 0 descriptor too short (expected 6171, got 27) [ 341.522875][ T6049] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 341.526776][ T6049] usb 11-1: config 0 has no interface number 0 [ 341.530180][ T6049] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.568709][ C3] vkms_vblank_simulate: vblank timer overrun [ 341.603270][ T6063] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 341.649794][ T6049] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 341.656203][ T6049] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.661529][ T6049] usb 11-1: Product: syz [ 341.674422][ T6049] usb 11-1: Manufacturer: syz [ 341.677139][ T6049] usb 11-1: SerialNumber: syz [ 341.683512][ T6049] usb 11-1: config 0 descriptor?? [ 341.726406][ T6049] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 341.736780][ C3] vkms_vblank_simulate: vblank timer overrun [ 341.798953][ T6063] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 341.807742][ T6063] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59074, setting to 64 [ 341.817501][ T6063] usb 8-1: config 0 interface 0 has no altsetting 0 [ 341.833581][ T6063] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 341.838667][ T6063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.845411][ T6063] usb 8-1: Product: syz [ 341.847054][ T6063] usb 8-1: Manufacturer: syz [ 341.853399][ T6063] usb 8-1: SerialNumber: syz [ 341.869006][ T6063] usb 8-1: config 0 descriptor?? [ 341.886209][T10520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.926808][ T6050] usb 11-1: USB disconnect, device number 2 [ 341.934091][ T6050] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 342.106235][T10521] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 342.112278][ T6063] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input22 [ 342.254491][ T40] audit: type=1400 audit(1759303746.998:807): avc: denied { getopt } for pid=10546 comm="syz.4.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 342.257973][ C3] vkms_vblank_simulate: vblank timer overrun [ 342.301218][ C3] vkms_vblank_simulate: vblank timer overrun [ 342.317052][T10547] 9p: Unknown uid 00000000004294967295 [ 342.320692][T10547] 9pnet: Tag 65535 still in use [ 342.327430][T10547] ------------[ cut here ]------------ [ 342.337976][T10547] refcount_t: underflow; use-after-free. [ 342.347630][T10547] WARNING: CPU: 2 PID: 10547 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 342.372182][ C3] vkms_vblank_simulate: vblank timer overrun [ 342.376227][T10547] Modules linked in: [ 342.380626][T10547] CPU: 2 UID: 0 PID: 10547 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.388838][T10547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.426332][ C3] vkms_vblank_simulate: vblank timer overrun [ 342.430395][T10547] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 342.446238][T10547] Code: ff 89 de e8 98 b6 1c fd 84 db 0f 85 66 ff ff ff e8 ab bb 1c fd c6 05 fe 6e a9 0b 01 90 48 c7 c7 e0 4a cf 8b e8 07 47 db fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 bb 1c fd 0f b6 1d d9 6e a9 0b 31 [ 342.472166][T10547] RSP: 0018:ffffc900035bf980 EFLAGS: 00010286 [ 342.482321][T10547] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9002f7d5000 [ 342.486523][T10547] RDX: 0000000000080000 RSI: ffffffff8179a1f5 RDI: 0000000000000001 [ 342.491295][T10547] RBP: ffff8880346cfdc8 R08: 0000000000000001 R09: 0000000000000000 [ 342.502197][T10547] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880346cfdc8 [ 342.516199][T10547] R13: ffff88804681a400 R14: dffffc0000000000 R15: 1ffff920006b7f3b [ 342.528173][T10547] FS: 00007f25186336c0(0000) GS:ffff8880d7076000(0000) knlGS:0000000000000000 [ 342.536129][T10547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.546649][T10547] CR2: 00007f2518611f98 CR3: 000000004da3e000 CR4: 0000000000352ef0 [ 342.556979][T10547] Call Trace: [ 342.558795][T10547] [ 342.560072][T10547] p9_req_put+0x1ec/0x250 [ 342.562995][T10547] p9_client_destroy+0x22b/0x480 [ 342.568345][T10547] ? __pfx_p9_client_destroy+0x10/0x10 [ 342.576984][T10547] ? rcu_is_watching+0x12/0xc0 [ 342.584462][T10547] ? v9fs_session_init+0xd30/0x1a80 [ 342.593579][T10547] v9fs_session_init+0xbab/0x1a80 [ 342.603094][T10547] ? __pfx_v9fs_session_init+0x10/0x10 [ 342.613948][T10547] v9fs_mount+0xc5/0xa90 [ 342.616626][T10547] ? __pfx_v9fs_mount+0x10/0x10 [ 342.620165][T10547] ? cap_capable+0xb3/0x250 [ 342.628683][T10547] ? __pfx_v9fs_mount+0x10/0x10 [ 342.645828][T10547] legacy_get_tree+0x109/0x220 [ 342.648968][T10547] vfs_get_tree+0x8b/0x340 [ 342.652578][T10547] path_mount+0x1516/0x2060 [ 342.656327][T10547] ? __pfx_path_mount+0x10/0x10 [ 342.659631][T10547] ? kmem_cache_free+0x2d1/0x4d0 [ 342.663101][T10547] ? putname+0x154/0x1a0 [ 342.685157][T10547] ? putname+0x154/0x1a0 [ 342.688111][T10547] ? __x64_sys_mount+0x28d/0x310 [ 342.690002][T10547] __x64_sys_mount+0x28d/0x310 [ 342.691815][T10547] ? __pfx___x64_sys_mount+0x10/0x10 [ 342.695308][T10547] do_syscall_64+0xcd/0x4e0 [ 342.696163][ T40] audit: type=1400 audit(1759303747.408:808): avc: denied { connect } for pid=10550 comm="syz.0.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.697533][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.722771][T10547] RIP: 0033:0x7f251778eec9 [ 342.725023][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.738019][T10547] RSP: 002b:00007f2518633038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.747595][T10547] RAX: ffffffffffffffda RBX: 00007f25179e5fa0 RCX: 00007f251778eec9 [ 342.762805][T10547] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 342.771963][T10547] RBP: 00007f2517811f91 R08: 0000200000000400 R09: 0000000000000000 [ 342.785877][T10547] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.805373][T10547] R13: 00007f25179e6038 R14: 00007f25179e5fa0 R15: 00007ffef05d6b98 [ 342.808875][T10547] [ 342.810540][T10547] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 342.835889][T10547] CPU: 2 UID: 0 PID: 10547 Comm: syz.4.1294 Not tainted syzkaller #0 PREEMPT(full) [ 342.842358][T10547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.863074][T10547] Call Trace: [ 342.866238][T10547] [ 342.868644][T10547] dump_stack_lvl+0x3d/0x1f0 [ 342.870835][T10547] vpanic+0x6e8/0x7a0 [ 342.882918][T10547] ? __pfx_vpanic+0x10/0x10 [ 342.885394][T10547] ? refcount_warn_saturate+0x14a/0x210 [ 342.887795][T10547] panic+0xca/0xd0 [ 342.889528][T10547] ? __pfx_panic+0x10/0x10 [ 342.891507][T10547] check_panic_on_warn+0xab/0xb0 [ 342.903704][T10547] __warn+0xf6/0x3c0 [ 342.905710][T10547] ? preempt_schedule_notrace+0x62/0xe0 [ 342.914809][T10547] ? refcount_warn_saturate+0x14a/0x210 [ 342.922220][T10547] report_bug+0x3c3/0x580 [ 342.924228][T10547] ? refcount_warn_saturate+0x14a/0x210 [ 342.926792][T10547] handle_bug+0x184/0x210 [ 342.934284][T10547] exc_invalid_op+0x17/0x50 [ 342.936409][T10547] asm_exc_invalid_op+0x1a/0x20 [ 342.943846][T10547] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 342.954903][T10547] Code: ff 89 de e8 98 b6 1c fd 84 db 0f 85 66 ff ff ff e8 ab bb 1c fd c6 05 fe 6e a9 0b 01 90 48 c7 c7 e0 4a cf 8b e8 07 47 db fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 88 bb 1c fd 0f b6 1d d9 6e a9 0b 31 [ 342.986513][T10547] RSP: 0018:ffffc900035bf980 EFLAGS: 00010286 [ 342.989497][T10547] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9002f7d5000 [ 343.002113][T10547] RDX: 0000000000080000 RSI: ffffffff8179a1f5 RDI: 0000000000000001 [ 343.017379][T10547] RBP: ffff8880346cfdc8 R08: 0000000000000001 R09: 0000000000000000 [ 343.020932][T10547] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880346cfdc8 [ 343.037970][T10547] R13: ffff88804681a400 R14: dffffc0000000000 R15: 1ffff920006b7f3b [ 343.052395][T10547] ? __warn_printk+0x1a5/0x350 [ 343.062576][T10547] p9_req_put+0x1ec/0x250 [ 343.066547][T10547] p9_client_destroy+0x22b/0x480 [ 343.068428][T10547] ? __pfx_p9_client_destroy+0x10/0x10 [ 343.072286][T10547] ? rcu_is_watching+0x12/0xc0 [ 343.080045][T10547] ? v9fs_session_init+0xd30/0x1a80 [ 343.085907][T10547] v9fs_session_init+0xbab/0x1a80 [ 343.090413][T10547] ? __pfx_v9fs_session_init+0x10/0x10 [ 343.095848][T10547] v9fs_mount+0xc5/0xa90 [ 343.100542][T10547] ? __pfx_v9fs_mount+0x10/0x10 [ 343.104542][T10547] ? cap_capable+0xb3/0x250 [ 343.108369][T10547] ? __pfx_v9fs_mount+0x10/0x10 [ 343.119007][T10547] legacy_get_tree+0x109/0x220 [ 343.123182][T10547] vfs_get_tree+0x8b/0x340 [ 343.126924][T10547] path_mount+0x1516/0x2060 [ 343.130000][T10547] ? __pfx_path_mount+0x10/0x10 [ 343.133709][T10547] ? kmem_cache_free+0x2d1/0x4d0 [ 343.138428][T10547] ? putname+0x154/0x1a0 [ 343.141180][T10547] ? putname+0x154/0x1a0 [ 343.145151][T10547] ? __x64_sys_mount+0x28d/0x310 [ 343.148172][T10547] __x64_sys_mount+0x28d/0x310 [ 343.151687][T10547] ? __pfx___x64_sys_mount+0x10/0x10 [ 343.155128][T10547] do_syscall_64+0xcd/0x4e0 [ 343.159209][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.164307][T10547] RIP: 0033:0x7f251778eec9 [ 343.167895][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.182375][T10547] RSP: 002b:00007f2518633038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.187933][T10547] RAX: ffffffffffffffda RBX: 00007f25179e5fa0 RCX: 00007f251778eec9 [ 343.194353][T10547] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 343.202293][T10547] RBP: 00007f2517811f91 R08: 0000200000000400 R09: 0000000000000000 [ 343.207707][T10547] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.212797][T10547] R13: 00007f25179e6038 R14: 00007f25179e5fa0 R15: 00007ffef05d6b98 [ 343.218467][T10547] [ 343.222286][T10547] Kernel Offset: disabled [ 343.225374][T10547] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:29:08 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff90f269d4 RBX=ffffffff906fd4f4 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff906fd4f4 RBP=ffffffff906fd4f8 RSP=ffffc90005d775a8 R8 =ffffffff90f269da R9 =0000000000000000 R10=0000000000000004 R11=0000000000006aab R12=ffffffff906fd4f4 R13=ffffffff816aab63 R14=ffffffff906fd4f4 R15=0000000000000000 RIP=ffffffff816a7be6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6e76000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2518632f98 CR3=0000000034076000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaacd6380 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaacd6506 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcaacd6506 00007ffcaacd650c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb564812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb564812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb564812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb564812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb56481305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb56481313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a941e60 RCX=ffffffff81af08a1 RDX=ffff8880286a4900 RSI=ffffffff81af087b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000317f4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d5283cd R14=0000000000000001 R15=0000000000000003 RIP=ffffffff81af087d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6f76000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2322d17d60 CR3=000000000df82000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000000000 DR2=0000000004000007 DR3=fffffdfffffffffe DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f23221b76c3 00007f23221b76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffec5984540 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555652ab933 00005555652a6d50 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555652a4800 00005555652a3eb0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003081000000410 0800020800010000 1008060a016fd61a 0800000320100004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104e910000fffff ffffffff041ce810 0002e8fbbcfa1000 1280040100001008 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060c0156c6058004 1882c3989e080001 0000020806060118 8206f2d2100005c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0310808080821000 05b00308100005a0 0304100005900301 0000100806058803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000580030810 0000041008000208 000100001008060a 016fd61a08000003 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff851f8030 RDI=ffffffff9ab4eae0 RBP=ffffffff9ab4eaa0 RSP=ffffc900035bf2d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3569dae R15=dffffc0000000000 RIP=ffffffff851f8057 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f25186336c0 ffffffff 00c00000 GS =0000 ffff8880d7076000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2518611f98 CR3=000000004da3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7eee48d0a41d1367 71b997d87656e8e1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 087c2e0c46e20218 2ea5ae55fa9fb2c4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 15701284512403cb 2970b80bae6cb89e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17af3222a28fcdfe c000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3b00d2500000000 0000008500000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 412ab57ce553509d 168dd334093b3a3c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 11706b235d5c873d 104d66339fdab4a8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3b00d2500000000 0000008500000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001 info registers vcpu 3 CPU#3 RAX=ffffffff958a0068 RBX=000000000000030a RCX=0000000000000384 RDX=00000000000003cc RSI=0000000000000384 RDI=ffffffff97247fd8 RBP=0000000000000030 RSP=ffffc90003bcf310 R8 =ffffffff958a0068 R9 =000000000000007b R10=ffffc90003bcf4a8 R11=0000000000000000 R12=ffffffff8196c7c0 R13=ffffc90003bcf3b0 R14=ffffffff8196d2d0 R15=ffffffff97247fd8 RIP=ffffffff8196e87a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f25060db6c0 ffffffff 00c00000 GS =0000 ffff8880d7176000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa1641e7dac CR3=0000000048510000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000011 Opmask01=0000000000000001 Opmask02=0000000020000000 Opmask03=0000000000000000 Opmask04=00000000dfffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc556380b 00007fffc556380b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc5563d10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc5563d10 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76205d3343202020 205b5d3337393735 322e32343320205b 3e343c00313d6500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7620573343202020 2051573337333735 3224323433202051 3434360031376500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642d332e36312e 3120534f4942202c 2939303032202c39 484349202b203533 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d7265702074656b 636f735f70756b6f 6f6c5f6269665f6b ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e696c74656e3d73 73616c637420745f 6d64617379733a72 5f6d64617379733a ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d747865 746e6f637420745f 6d64617379733a72 5f6d64617379733a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 746f6f723d747865 746e6f6373202234 3932312e342e7a79 73223d6d6d6f6320 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313635333d6f6e69 2022636f7270223d 7665642022637369 6d5f746d666e6962 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000