last executing test programs: 13.546536386s ago: executing program 2 (id=800): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x5, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x20040824) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x5, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x20040824) (async) 13.465519099s ago: executing program 2 (id=804): dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) close(0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) r8 = fsmount(r3, 0x0, 0x80) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='%\xe9\x00', &(0x7f0000000240)='.+*][-\x00', 0x0) syz_clone3(&(0x7f0000000180)={0x40000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x101}}]}, 0x38}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x84282, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000072000103000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de4d47f540740d69"], 0x20}, 0x1, 0xf00}, 0x0) 13.226426792s ago: executing program 2 (id=807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 13.117736402s ago: executing program 2 (id=810): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)="9d") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000000c0)="1aa9a9ac9b4923daa809ff1060d87435824a996e68023263cefbb289e61fbc515333d1e13307d4b873e428039a2fd3fe6df0a3213d6abce9871a36a119b730909a6630bf54c5c3a828b01537b40b3fed168a473af228716682a479751bb572e905a78e936a9e30e0d07c4d6107b25a7d22bce6aef8a565ecf1403b7a77d9a14b14500a7be412048b28fc6cf09d22a07992051314f5ef") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') 13.019049624s ago: executing program 2 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{@uid={'uid', 0x3d, r1}}], [{@fowner_gt}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(0x0, 0x0, 0x280) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0000000002010100000000000000000a000008040003800e0006007369702d32303030300000000600074000020000060027400002000004000180310002802c00018014000300fc0100000000000000000000000000001400040020010000000000000001000000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000810) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0xb}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0xe9) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="22a50544c0488928c22deac6317fe1c9b29a00a8a3b4e7b36c8727592b2780a555cc1248ac6a73243b4a19839f0d406233475a2cad83e93a161abe0f997f96a05f04afa9d0f2bc2b0a87cd89083baacd48060f90011f4f86fc6534947421dd61a538f3b3f8e5fe13f85df44f528a8883454417e2ea2549fe8f16e8fd8462662d126bff90b9559fe0eec73029643e7e89b44a9fbd79c819be", 0x98) 12.875904673s ago: executing program 2 (id=816): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x7, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x67, 0x0, 0xe, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote, {[@timestamp_addr={0x44, 0x14, 0x1f, 0x1, 0x1, [{@empty, 0x8}, {@empty, 0x1000}]}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x52, [@remote, @rand_addr=0x64010100, @multicast2, @loopback, @local, @remote, @local, @empty, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f00000036c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) pipe2(&(0x7f0000000800), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x700, 0x20, 0xfffffffe, 0x9, {{0x1d, 0x4, 0x2, 0x30, 0x74, 0x67, 0x0, 0xb5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x7, [{@multicast2, 0x3}]}, @rr={0x7, 0x23, 0xe7, [@empty, @empty, @empty, @multicast2, @private=0xa010100, @multicast1, @private=0xa010102, @loopback]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x5, [{@remote, 0xd}, {@empty, 0x80000001}, {@private=0xa010100, 0x4}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0xc, [{@empty, 0xff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x80, 0x7800, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002000)={&(0x7f0000002080)=ANY=[@ANYBLOB="c8170000", @ANYRES16=r2, @ANYBLOB="00032bbd7000ffdbdf25080000002800018008000100", @ANYRES32=r4, @ANYBLOB="1400020070696d367265670000000000000000000800030003000000a8000280080002000000000604000100040001003f000500fea5bda2ab578a672c786be0632fabbdd0dc223b7cf2ab9639774429ab76c5e84dc6d59a45ff85e6ccb87ec137a2036f949a90e42dec6ef9a92e9f00040001004000040043282fd212567e68986d43b95fb98fd33c1d6c394b44e82e49c3c8a56c6f8fefc7ab2d50fcb2541feb3321aa4988f0414153b3dc21ea0d1be5d6219e08000200040000000800020005000000ec0202802c00038028000180080002002b7b2d00040003000800010000000000040003000900020073797a3200000000eb000500b8a65833bfebbeb079727052ab810dd60de08ff26d1465f27105f8de7f82744c90896fb2af60893d6ec0f19ed83be4e12c0e36f4e0091de146ac77269eab2e95b8d0ea0f8329fe38c8838a6c2a13cc6a5c81305885fa27a20d09ea1ff44b50f2f066f6ce06c732ecc4a1de3e995f6a62f73dbfeec9556fb72715c614a49cc99805985b42674204d1f2ffa16149310bc1ccd7e51b67414a4432d469afdc45e8c37c7016c0ef582848c79e9da88cf5c38bab07dc0b667784fec900286c544c15ff2e6e05e92568c9bc73356184e1ef0aadc4faada11f8d9de3692159e9df546c2792d605a50831eb0076000500483a7b306bc56def092e854f9f795373de7c6c24a6638ec0b6e70cbb848e4732e9381de6b13deccf33511446b688624db031242de21bb8098317f45c0018879ab203f0f0f2e7d8c2ca9ff07d0558e0938204bd856ba1f5c6a3d3fff73c97b7827fcf45b3fe49b8ee32565472ac2b2e277b7000000400010008000200ffff00000800020057000000440103802c000180040003000400030008000100faffffff0900020073797a30000000000400030008000100040000004000018008000100ff070000040003000900020073797a32000000000900020073797a32000000000400030005000200000000000900020073797a32000000004c0001800800010005000000050002000000000008000100b00000000800010001000100040003000800010005000000080001000500000008000100610000000400030008000100000000002c000180060002001d00000000000200000000000800010000000000040003000700020028ac000004000300100001800a0002002d2e5b7d7d0000001400018007000200db5d00000000010006000000040003000800018004000300240001800800020026b9aa000900020073797a30000000000900020073797a30000000000c00018008000100000000006800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000800030002000000380003000200000014000200766972745f776966693000000000000008000100", @ANYRES32=r5, @ANYBLOB="1400020064756d6d7930000000000000000000000800030001000000801102800410050025915498859aedad6a02e297ff8cf17b4876dec8c22d79a0915c243ed96a13948ef6c424d598b78c666618e3d4402f1f7c9bc36f2e04d28eda725dbcbc7d28e2799afbd1d55c2d9412f29042aa604c47d7dc85b917fbc73f1265202449ecc6aad7efca1b05d54f1d164cb657ff8555bfdcb0d8c73b7ad69ec7815174d63ac41bb4f9003241cbdd1d171c57cdcb9c6f84ba1789988599ee42d415b63483b97e745e4cb47d6672681d9516d082b20e0a633ee230face4e009d6764cb4d4fe69ba8478963d5c719b72897373a98d8d56095ec6967b473ba16eff780bc7f068255231ae2111b81c8ae1a01b579d559e1d876a1fab0ff073564c9d6e6dd9261f470c1e49935cdb65615f90a06dfef9868b1d781ab9b2a628d7ebea083bc3110ff33082d4a3c829957e64afd3b087f1dda331c3b20a344f604d0bf564110d56f77a4c393fd370e39b5cf3d9f658982e998317acaa498e24716a79cca3efc613c67f24d74c071ef3060a9aaf537dfa06dcf497a5221d4e9ba91b57b3094915806501e1ecf88f06d721f0c36a74961bcab1abb6df2dd65f50b09f4102193dd8fc7c2d19f617955ee3dffdf042c7675e4ef123c4daa87cd86abd681f43007c6e67cb68b90a688a91f5989fc6c3f192ce7ee7563326065feb4220042af2bd32dfbc25d26a5e2734ac133d41eb7852870591bb6015b819a4439667bf6435bd90383aeeeb4702560b4b521c4a1e7863f96d7de8407bdf153d96378ade4a987c00eee6c2f7e6a09e4a00e58c6d727d2e0dbd7076f4cb6e1edc4bf73344aedaa78066ea0783f77869dd70d1bca16daa294bd89b0836ccd1268bc474a923d2362841306a8b631570b1e3d1d7c34c3119eacd5fcee2de33ac45388341caa013b061976b90a8063d8701745aa81711d1be249786598366f9bba93f71f7145ade7a904061e3ad3fd3408eeae3b51389d0602b1d687f0140aa87be6336cea043ff16a4d9abed1b6bc143c74a3d25bfaf39840e65fc66bd17668417f4fe4992f27c4ee918d0322b290182b6098407fff1e5acb82a0f99832e1e0bc6b0cd05b2217f2cc3b5df313992a60a83617ababcf988c5a2c5cb691b952f252565a83032161094b518ce5be792d4e475428a17c2fd67ce1c259e6c3cdc56bd3719914c86fb6cea78e5fe2595c926699f3094688214f4ba2244e604f79eee172379cdf427f94edc180261e7e204451674735739d608c47294174ab6f598db302a749a0abfbf364955adde6fb2135108401d5218b03f4fe760e9994943d9d9ef8135b3bae5131745df21ee8dd3dfa0298f1a231d540824d4c3287f0b66c4ec7d9a0d0f551f9d56745ff1212efe2627f68edd664cd94ae352949ed088e1a300f36115d5d641076232dd13f66168af045f031ecc103a666cf0e4f4e391ddd2082f59156a449731040eea91267bb69d1435a115a49d03a264369421f4d0650e6d4e775bcc3812dc3c8942112d86d1d4af87bfb75b30d008ea12277397a5a21ac8eb446084ba2bfdf014f0ebe1b44e972a7df1e32cce9e6263bf718e87b985bb81400de2d70c17f65aa25a6a7fd4e03e9144127ecbea3e4661a2c575705a385dd36a441aaae2082091307382fe1daedc49697a3b5a2678222c5447032e55647d817fe49c14856d5f09f777c7c3a0cd3b5243cd0207605c42cd3081a7cce6b4a0b0c6b5539ecc41264e5d1603930a6e8c35ae616bd4d2a150b73141bfb0040d21c26d2f121f30ececfb44ea002f789f2f3a1267bbbdfcf812c586da537d89c8625abd8e8515d07b08d10d4146d890c1b122870a3cda8dde77a13f1c531027cc6124c2a8d7e444d0f2c90910401f103c36423498a4818be75c603aff3e87eaae3858b77cae00fe334c47c33b07b5c2deb39d8ef4d86884ac019ab83ef07564d26ca2e13ebee8eee00d9f377540cfb14c2bb604a188ad93f590bc0d6815d38b7a0f63c6a9baaf0e005eeb26cb93d157ed1d4258bcde227def6ffebd6601ff3aea059980730b77e111d50ca54a4528c42e8ae720a078f496aa52192c4c6ddccb3fbb5275bd9af63f699b2ed542f39fbefb09b7254a1c9d74c50598d26460ba98a339bc5012fb768481d7aa0cef202f72275e2a128a712adf603cd45c3e73496352691ebb582b7693000f5894b8c8e15159789be9d7a19269e89feda435b0424f55ae3ebc841991ea1b24fc01204d820e5de467a3a00f14bd8fc4455da7e0c900b34d29b34a7e7ac293499f3d5ee5aff089b2976bd648be4b54a04d3cc81e998394e6d2e6945f1cffc5a0108559657c3bf1e6a24406d35bec81544433597a1124cfb97a3d607db0b0703229fe2e85acb5501997138e04fb7f16ea7102aa53498362b5f886b941884e6bef84ef9947c64dd204738b73afda065385947e23c1febe7fafdae50387750c9d04f46396bc42bd09d0ff64e489852475db4de45ab34dd80cde73fb3ff50ea5a566461c55627e6974ec93268b7d11eea6be2be1100d7583efa8de1eae9f06983e6a344c24022406aeb4acdbbd5f8bd2e5dd3fea3c85afa5f20a3f514d667de38026ecf3a7c8bab0cb8b4c902868ec334ac2663db0d0518f20205186c5cf30019a7b193f6dd769682fed6f816f086b62e558d06980dc7f6852d46025f0fc29395435bd8e73a0af5b34c76ded236eecfb6776df2ce8698d38ad16b94b2beb183cef5a5d5483788a5d5b01ee12d1e209981cd07d293ca6605afdb8d113b18ef33ecb5ebdac1a50162836f034ed6f11c634500697b3e01eaca8aa84e5b24a5c8eba13e2bd19cef3834aea35a47c6da11b7aad49026c896a47bccc6d97a92f9387957350f209882c1b3ae54f2720d96262ee159413ac2e54ad686f0e7d1632036e33c3b353762648c1941ec6c97e879335a0ea479680b9f0cd53b2012a6a76b39ef57e14b272eddc34aaafa93f796ddaeb32e92909516462615dea87eb6f9baeed7e0ae4df555dd05278dd5a32dc07f09ea04e7ed747b2a74acbc13ea8b7bce59b7b624dfd8922722dd8e0fece47d7935601c931d9e33ec5e005096383f1f6b558f81053780f7a6a67eb2d04ca595a30a8a7f134b805455c794daa84b528815cb49ce1ac0ddc1edc96ea1d8514b75c7fda57ef188b75caa3e3bb0f19e6d94c7c119be4608be1195c5aae9f5cc8fc85a649101e58261693e02852f4546304fa2e618bbcd73730e2361fa7d6638115ae2b12ae8fe463ac6cc1bf7de0edd5e06251b0cecd9a83ace3e4928f6ce299e0c60c19b1c95831874825074143e9bbdcf60cafc2a5eebb2d4d0cbdc724b1761ee3fbd814d0bbf90d362ba4317923a47f6e7c8080992f355ec3e2dbd64a8dae76ecbd8d942c36d5ff52d3543211ab68e16b0e88dd0a82cafb49d6bdf9706e1a661748b88148a2283a1ed2182fe310400bae4576e638b63571bbf976bb805603bc5ae2e8a3ca868128efcbe9980b7e9b80289a4233130a7415dcbeb4993b1a162420fccf99f5b2059ea88e44f9ce8dbb05a375b92e8d9c970f167a0f28826d070a4829677902c39d644aa69507c54897e4d7add3387a7bbca98f1e4d8364d27744f6f3b67e5c29f063d752910d50b77742a4a169ddfd3d908dfc72f9e67e25db34f2289600d5655e63cb909d3d045294e44d44c62da48672007adb6fe176e856298e11874d0ba84b449784b98a34cc6aa5a27b815b75c2b581394156898090447dd1d15a9624acdb63b3714b3ad4b7a3e08a4af141577fad0c4824776308eb29f074a0af7324910374fc173a7ffaaac89119a63e2695fb250606437cc7c91289bdd69988501f320799e41d4761337bb5af5b4850f398a9dbeef93234c6e24e5a9380b73a80b1ea4226bd277a75d7e3c1c319cc7831e7e34b3800d65725f88cc592a909877260577fc5d4f67f189c066f0dbf912187dc7ac307deb291b20c8fa1f2257045d47d22710205f86bf8082a0b0891bb90a81a59f60f307e3cae92757ed3c27ef948f688a36b31d03df90054ff17b113c47a71614677c0264f2c89dd4f2a8a8664d485ca9d05e0932e5445e9fd4047ff9d341442e93d8ab73c9fedb5e208c0c51a114fd97f1252e8cf47776670a6df92a02830a859bf4845f0b82d7e9869ec93fcbaa98906e5214f75bb5cc4c8200d14634551dfce4071b9ee6f2160b9bc9cf1bb0ee29f086b31aa84e5eb6d91f82a672a118f5490db8cbfe381fed1f2a25cd8dc7d3a6ea93ec25d7456725b2fc592099445037ce59c0d6b10eae3f259e90bc25dc0d4001d5a0a18f63a36388873d81fffb028a5d93bcf5ba20f6e9fb2b9e0a844fc1e6d93a2d3b84a9d30a81fda8c67b358dee1385db0ba91a7021e4e3bf56155865a2ff8ae8d85780b3c5d8b12597bad86e58d97c9d54108b066076f3741288cc73e0ec5911e652e047521c226c86dcedf4042742c143e268336bd2ef4440e7de95e14b6c0801bb49d47650886ba3aa3174ee0676b954cdf3d7d42ab72df6593758d8f1c255fd583051ac252d5beb2b1a1311b9971b09130fca3a2ee464184617efdad2455c53b44133b8c066c281e4d30d1982031ac983405862feb63d984fd4ece5ab8444cc7fac83992c27ced5e2a23fce77af16339c07d41ac5ba466317cb8e606e1e1b347eb0b95bc83739f39f8f3cc0916239d86d0cf5ccff66f0d60700ef2304fbd4906bce58b244f0df231abdd95ea5c9ce5087f3ceb8b3b9091c6e865432117e5753b30798ad3e158087d933d79a557f974e4ab6097f1e0242bd0ee1dde65536cc0545994c6c5051ed862b0693201169443b0273a842713e7970e323bf1b1447a2480262ead41b5c0afd4a688435413f73eccca5702b648cb05b383999ff24b994bd345df926c6a5c8693e014d6d3f6ec4b9f021cd269eced6c1387476bde117a14eee576d690f32645deb885b1d6daaf0d01cb31d91d94d721423f9d0a40ba732a6befab7c06d6bb0679bd3df7281a008a3d801836d1fcbf00ea08c3bcf3dc9c30d8f51d4209cc58b8c986de98a45763ab91b70c7c4f6910655a48db92c46457ce227ccc2ceec820c637820f53830bcc7d2c98abb77dc6abe6debee64c4f291eea596ef1880b40cdaa260bfbd238cd15508626246bd4bced2a663e774d96ff62127b2ed1a92075c8441b9116b3b79112c87263c834798ee5c71d6ecec6d5b3ea5c8e4d57d2a3f1a05f5a67112d3a1f0534b627284cfb7dbb21f56b00b83c02a17cb6d7f6a49dd89236b33a691737bc20da4493abd6f1a3ab85136b1e23ac7515417993773e9480b55b2af2d789e00a35a83b622c23f5854724b3c8169a68976abac19f1296e1945f01c4597e7d71ac5fcff9a95cee1789b620a9ef4acd034d79d60d429aea99a7ab61c28b49df46759d3d71d598c020501ded2a38747bbd0a1caeefb4e29872bb913eb28b1a73b30610eff23802fc185291b5c376405a0bd7588467f4d24e89fab3fa00f2bbcdb7308c58bad6a09de3afa70f16def202c41a706d3b91bbd0ff585c27236a0a8063ba9cf8f33a8ba1af8f7328b42a8356f374da197557feec7387712762faf4a9136298f2dbcb38d31e44836747bfaa32351f8430653fb20c2e438628c522d4a61035879618276ff894c2047324c108ce6aa47c8533d95a70ec108c1e358c9d2f3a40b8c568b4279e528c27b39d66f498de6a2eb5de6a0f6de9b6351bdb4c1b7abe6fd6278528a1d8efacaa02856df960b90af82305d93bc94864105a00bec61ec3ef9908e81a1504c78713cef919f727e0c09a7c12e8ac39b34695eca5affa5b566c172e6a119df03d59db7000400e36308cdf9da409d2c3591b63016d78740c519604802ba43b390b9e02d4bfbfaa4371655dc818ba6a4c687085f577965a27b61214481e0b4a1fbda6700efcdef4bb88bf65bf676a69c055aabab38e1652bfe206b2211f6cb31f7e4fe6493743c2325ce251cd533423dbeea9733391d2ff5a701a66899b96c91b7dec674c607b958247f2b4f9c0806e5d1620044b74c05f8d6cfee8fc0dd3ffc1d7a97cf44362d3249d4712c096cb9002db722aae842ea7d39ee00bd0005004e83a76dbf4477d5fdc8cff7bdd3fb171e35d3cfe75212ce9d53cb6b1b03d6cf3e933b52ed26283d93112ac5f58b9857ce24ec1c093e7221678d5de4f1c91cefa7b49b4bc4a62e2b126d8bd8cb87f848c5ba12ceccd07178df63a262c8bbb9388f3f30aadce70b5ede26ed8af6ac55be69ace295ca406253780e33ae688390a782992b8fa6134a076c6a5d6f6d080b6db5e70219a72bfd505ab7af768ab7fcd0b862920fb1d99edab4459fb846f996767198f429216ee745e8000000980102808a00040053655fd7fb7bbbc126a9aef1532914661ccc436227b3b3d30ab701fe185ca4a9792683539a6e246d7e8816b70f93a94719d56d57c1769124ba3a500136a1331c4e0b94e3c13f4149f02d54e61cdbd5d5b72148cf4e5f4b45f746201b5e5181e45bcefc5a96f091601229c4df9121eb0524e1ca34cae99c6c3fdbb45bd307fa5c659724140dc40000830005004165685c026f8c2c8d8abf15f65982c3e8ee10f165d86020fa10c0361e5d42fa3e2f4b1c0cc82605ef6da88fda4325c6fa593e8207494d6bfb3a3cbd7104b8fa054cf42a355b790b79530c774e71dda83becccfb6f5b0e605827b189b727e431616e92a9e7391a64f4158da2738aac263051c540241b131e5c3d8cfd1bcb57000400010040000400a1da4aa9cbba2904330b18fbee1e0ea94ab0540659c308dc8adf5281740590356449ba0d9b0df73cbb56f99325e7936658fc780fecced56c3a7e013c3c0003803800018008000100f1010000050002000000000004000300080001000500000008000100000000000400030004000300040003000400030004000100400001801400020067726574617030000000000000000000140002006c6f0000000000000000000000000000140002007767310000000000000000000000000038000180140002006970365f76746930000000000000000008000100", @ANYRES32=r11, @ANYBLOB="40000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="0800030003000000"], 0x17c8}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 12.8411116s ago: executing program 32 (id=816): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x7, 0x9, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x67, 0x0, 0xe, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote, {[@timestamp_addr={0x44, 0x14, 0x1f, 0x1, 0x1, [{@empty, 0x8}, {@empty, 0x1000}]}, @ra={0x94, 0x4}, @rr={0x7, 0x27, 0x52, [@remote, @rand_addr=0x64010100, @multicast2, @loopback, @local, @remote, @local, @empty, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f00000036c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) pipe2(&(0x7f0000000800), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'erspan0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x700, 0x20, 0xfffffffe, 0x9, {{0x1d, 0x4, 0x2, 0x30, 0x74, 0x67, 0x0, 0xb5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x7, [{@multicast2, 0x3}]}, @rr={0x7, 0x23, 0xe7, [@empty, @empty, @empty, @multicast2, @private=0xa010100, @multicast1, @private=0xa010102, @loopback]}, @timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x5, [{@remote, 0xd}, {@empty, 0x80000001}, {@private=0xa010100, 0x4}, {@remote, 0x1000}]}, @timestamp_addr={0x44, 0xc, 0xce, 0x1, 0xc, [{@empty, 0xff}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x80, 0x7800, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002000)={&(0x7f0000002080)=ANY=[@ANYBLOB="c8170000", @ANYRES16=r2, @ANYBLOB="00032bbd7000ffdbdf25080000002800018008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000000800030002000000380003000200000014000200766972745f776966693000000000000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="40000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="0800030003000000"], 0x17c8}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 4.165304354s ago: executing program 0 (id=951): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xffff, 0xa}, {0xe, 0xfff2}}}, 0x24}}, 0x4b880) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0) 4.045987543s ago: executing program 0 (id=956): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x16}, 0xfe49, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.045677682s ago: executing program 0 (id=957): r0 = getpgrp(0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000400)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0xf, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00') prctl$PR_SET_PTRACER(0x59616d61, r0) syz_clone3(&(0x7f000000c340)={0xa000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xf7, 0xb05, 0x1b4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xe0, 0x7, [{{0x9, 0x4, 0x0, 0xfa, 0x1, 0x3, 0x1, 0x1, 0xff, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x3b1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x240, 0x6, 0x8, 0xca}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x9c, 0x0, 0x9, 0x40, 0x8}, 0x114, &(0x7f0000000280)={0x5, 0xf, 0x114, 0x3, [@generic={0x67, 0x10, 0xb, "8d942ddb3d8c8dbcf8d3ceb7f3e484a10800ae9ef8b205d4de43c8ec8e3215b09c7ab77f196508e84c33d553396ea2efdd6279c5b2993fc91d36622234e9d52ba27e02889cc25107dc221aae2f471190bf3265ae18b753c88429ca48a13f1892d8bc58f1"}, @generic={0xa5, 0x10, 0x1, "98ee2d258da54c3e51c3ef747d800de9ee7023943b20e76599760402391a70a268a59a9ced03d82dc55a7153c1848ccf8ec5faca3c2cf75b783846a71c6efc010406aff5984192c5095dc38107ac42ddad94f2cd1e4f55178f5a2645e4f2ab14202f76625ff1bba1899e3bc5b4f61909a6bc0954138d72817fe3391015f503e2a72fb47754359664d367267f9fbcc569913bd4cf506f8ae09a7f7a605a735d4d47d8"}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3409}}]}) 1.382426859s ago: executing program 4 (id=1001): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f00000023c0)={0x2, 0x4e24, @broadcast}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x4, 0x1}, 0x48) r3 = syz_open_dev$rtc(&(0x7f0000000400), 0x8, 0x0) ioctl$RTC_VL_CLR(r3, 0x7014) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_setup(0x32c0, &(0x7f0000000040)={0x0, 0x6b80, 0x2a0, 0x2, 0xd3, 0x0, r4}) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) write$UHID_INPUT(r6, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000440)=0x1) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100000000000000010007000000000000000000000000000000000000c3", "90be8b1c551265406c7f306003d8a0f4bd00", [0xde, 0xfffffffffffffffc]}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r6, 0x0, 0x6d, 0x0, &(0x7f0000000240)="a2c362df4a9e938f7c20f8a80ea911ba036c5bdc11318a9e90e7e43611adcaa95860ab8418173a6404f9418f3573756fb9ed05b0ba05155ccab48d0f2b3b4b8bf1ab0c0f561f2f9ca03db43d77a6c62b229ef81d6a30154a6a7952857505602aac9de7ff26e82356d8694e061a", 0x0, 0x3b, 0x0, 0x53, 0x0, &(0x7f00000002c0)="8ee4242728708365e0b01398265cdd4d4ca88ccc7eb4f9bd152ebc66a57a0c6ae6502f6a6b4ad0810401e542c4d05452773ebc7db6d41af92881bc2f9a0a98c06f59ac121a18db7d5a69be61d8c886dc72faaa", 0x0, 0x2, 0x0, 0x7}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtaction={0x1004, 0x30, 0x300, 0x70bd27, 0x25dfdbfc, {}, [{0x3cc, 0x1, [@m_ife={0x150, 0x1e, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x5, 0x3, 0x6}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x8, 0x7, 0xfff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x34, 0x6, 0x20000000, 0x4000000, 0x80}, 0x1}}]}, {0xa1, 0x6, "4eae28aa66cbff69ab2d4180ff49698745e97bdd8f7a0d26133a5f43c16c231d582f8bd951fcc43e35f6ab3a6982f82dbbc17c7aab3a011d24e551fb56782e41c5cb9797bfbb9ad35c0cfad9345d884cb9e59da95e605c6a2e36eb813cac3e040e7b96ba82c930db1c353e2002fb6b4252e4a014170f1f892e0bf1ca5409478759279e268a6f07139ae1bb74ab187514bdde7973d85a615f05a7a865e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_csum={0x190, 0x10, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb003, 0x10000, 0xffffffffffffffff, 0x2, 0x5}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x8, 0xc8d4697ad36794c7, 0x6, 0x7}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x28f, 0x1, 0x10000000, 0x1, 0x3}, 0x14}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x20000000, 0x4, 0x4}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x20000000, 0x2, 0x8}, 0x15}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x0, 0x6, 0x46}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xaebb, 0x10000000, 0x7, 0x7}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x204, 0x0, 0x8}, 0x42}}]}, {0x81, 0x6, "e72cdd0e48bddc90b02855b354cfd5f99a257bc339d36c9ea68ec75af1c3117da58989097f20079d4becd76859b83510b3962316d607cb6c0209e2e429ce47abdf0dadd8092fce2d86671034d480802e7a2e3985d53bdf683a64844e9982e64622cf5ef98116f443b509026086ce5cb241ddb30ea6c7f9e27730eda86e"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0xe8, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x2, 0xc, 0x8}}}]}, {0xa1, 0x6, "ebcc9f9c230ab3069733eb651bfbcb5185c59b321094c8774ac7685b966dd849e264ff6d4bf0f3bf863f6e4e6484f696fe1a23e48de38946f4066ec4ea99dc3a0e6bb5f084946ec15cd8dddc8c3a3749db725c8e8c9ae582d79d0f2decdbbc5b6e6020f36cdb13318a3d69adcd8059503265c4309e97c21d6dc5509bddcf7fb4b3cde879d702e1b4743c98cada10be490abe5ebd079925ea01afd92fd4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x4}, {0xc20, 0x1, [@m_skbedit={0xc1c, 0x8, 0x0, 0x0, {{0xc}, {0x4}, {0xbed, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1004}}, 0x1) 1.280022216s ago: executing program 1 (id=1003): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x2, 0x4, 0x2, 0xb, 0x1400, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6}, 0x50) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) r3 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\bxJzp4/\xf90\xa4\xadAr\xc6\x05\x1f\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\x1ddC\xd4KL\x93J\xd4\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000400)=""/64, 0x33) write$binfmt_misc(r0, &(0x7f0000000180)="e179edd3a48feaa935d7a6f2ed2301f4946ff4d2dedb7101468976ea5ab22e2247660c2f979d98372f59439d5ff43c72663fcc676f0aa7da8c53840e94d8944710449bfc3d361a3a", 0x48) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) 1.226034769s ago: executing program 4 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82000000}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f00000001c0), 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000080), 0x4) 1.225370972s ago: executing program 1 (id=1005): openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x604000, 0x0) (async) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x604000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x0, 0xf5, "6d83dbe97375b61e64ae00c504c462108845db28db487daec0ddabb9b6e93baf2a90467b6ad8a6e472fef1206b2ec734ea876e7d2026d8741a20f474489a09f233fbf78155f11cb8280a84ccbb4b5c2ae6283804ce107a22c4227da9c6c4b97a028c38bd4293d93616b8991d2f2a29232b16e9e66db47954982076e9e216545885d4123f2f4513f0a8393746c06ec394b67414fa6419e8828a338aedf023f7da7be976beddd54a927a05d79670f17b620aebd557553dcb000671da8bf710bd3ad342a83c71a4c97aabca9105312c549624d92ea908add9896f334704970fba04ff062d1223b104a25abfb33b7a11262135170e2127"}) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x0, 0xf5, "6d83dbe97375b61e64ae00c504c462108845db28db487daec0ddabb9b6e93baf2a90467b6ad8a6e472fef1206b2ec734ea876e7d2026d8741a20f474489a09f233fbf78155f11cb8280a84ccbb4b5c2ae6283804ce107a22c4227da9c6c4b97a028c38bd4293d93616b8991d2f2a29232b16e9e66db47954982076e9e216545885d4123f2f4513f0a8393746c06ec394b67414fa6419e8828a338aedf023f7da7be976beddd54a927a05d79670f17b620aebd557553dcb000671da8bf710bd3ad342a83c71a4c97aabca9105312c549624d92ea908add9896f334704970fba04ff062d1223b104a25abfb33b7a11262135170e2127"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0xb04, 0xfffffffb], 0x3}, 0x10) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0xb04, 0xfffffffb], 0x3}, 0x10) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/236) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1000000f) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 1.045795488s ago: executing program 3 (id=1008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYBLOB="c457334012ff8a1aa9a0cf6f71695829a2589806d5a6a187a03025c298507cf41edca65dd3b4e38cf51040850bce4da806122633d23522291273506bd834b2a0c05024f90de3281dde367959736da4491c97b12f398e830ecbe515b58d0f642ed8cd284f2b7fb6e4b328"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000), 0xe) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, 0x0) ioctl$FICLONE(r1, 0x40049409, r6) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 976.004791ms ago: executing program 0 (id=1009): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r1 = syz_open_dev$audion(&(0x7f00000001c0), 0xfb, 0x200000) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000380)='acl') (async) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000380)='acl') ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f00000005c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) (async) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0x8, 0x2}, {0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000090}, 0x40000) ioctl$DRM_IOCTL_DROP_MASTER(r7, 0x641f) (async) ioctl$DRM_IOCTL_DROP_MASTER(r7, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) (async) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000200)) (async) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000000200)) 974.354877ms ago: executing program 4 (id=1010): r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010043, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0xffffffffffffff7f, 0x402c81) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @null}, 0x1c) 894.124044ms ago: executing program 4 (id=1011): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x108031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) timer_create(0x1, &(0x7f0000000000)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="8dc5ba2477e6fd0dcca2b042fc71375f442e616d113ee82f0ca73d2a6114b1655fb216ec14135fe9616b3a99eaeaded08d79dcfbcb4a5821320fadbb8721", 0x3e, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000100)=[r2, r2, r1, r2, r2, r4, r2], 0x7}) 890.862909ms ago: executing program 3 (id=1012): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4]) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f7ff080211000001000004002a0008009e0008"], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async, rerun: 64) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x5, 0xffffffff, 0x7, 0x3, 0x8801be, 0x0}) (rerun: 64) 713.697303ms ago: executing program 3 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="24951e002908a5eed9be62347c38d8391323272840878651365b9d1bdaf7f7ed03ea4d3ed809e835873f33e91840c809e760fdb5d5acc839cf411f475aa2650106f0ac0d0a", @ANYRES8=r1, @ANYBLOB="200025bd7000fcdbdf253000000008000300", @ANYRES32=r3, @ANYBLOB="65c6a99969530000"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44010) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) (async, rerun: 64) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000200009000300008ef54709ff05", @ANYRESHEX=r1, @ANYRES64, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32=r4, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x20040095}, 0x8000) 713.200328ms ago: executing program 0 (id=1014): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0xfffffffffffffe45) 712.415177ms ago: executing program 0 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pread64(r1, 0x0, 0x0, 0x400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f00005c0000/0x4000)=nil, 0x4000) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000449000/0x4000)=nil, 0x4000}, 0x1}) 712.176599ms ago: executing program 3 (id=1016): r0 = socket(0x29, 0x2, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x4c, r2, 0x815, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000002) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xf18822101d5656ec}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x44811) (async) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 634.91616ms ago: executing program 3 (id=1017): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r0, 0x6, &(0x7f0000000080)={0x9, 0x7}, 0x0) (async) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) prlimit64(r0, 0xe, &(0x7f00000000c0)={0x0, 0x2}, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0xa, 0x6) (rerun: 32) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0xb2, @loopback, 0xb}, 0x1c) (async) r2 = io_uring_setup(0x6ccd, &(0x7f0000000140)={0x0, 0x50a1, 0x400, 0x0, 0x1f8}) io_uring_enter(r2, 0x27f6, 0x852d, 0x4, &(0x7f00000001c0)={[0x1]}, 0x8) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000200)=""/151, &(0x7f00000002c0)=0x97) (async) io_uring_setup(0x1565, &(0x7f0000000300)={0x0, 0x2e23, 0x400, 0x1, 0x39e, 0x0, r2}) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7fffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000003c0)={0x0, r4, 0x12, {0x4, 0x8}, 0x7}, 0x1) (async) syz_io_uring_setup(0x7fd0, &(0x7f0000000400)={0x0, 0xf4e1, 0x20000, 0x1, 0x81, 0x0, r2}, &(0x7f0000000480), &(0x7f00000004c0)) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000500)={0x2b, 0x20, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x7, [0x4, 0x5, 0x5]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x25c8, [0x3, 0x7, 0xa, 0xc1, 0x4]}}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0xff}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0x99, "8774cb079f225dbd0ee05f9caacba187eb2cb10092c1720202592ce2195e304060dd8cf35a20455f0fa925eb8c33a064a10adc32d1d1fef43baec446f160cecb5f47eea7dfb715903819b552e54632b553a92e18478b0e57b118a4a367df5e7414156b3f287c93163d483e7ae15c0ee42ffffdbe212185f02b27fa20491d34abaaf858301319569000691524dffd1d82c1911c38650723c954"}, @pad1]}, 0x110) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0xd0}, 0x48041) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000007c0), 0x4400, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000840)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000880)={&(0x7f0000000800)=[0x0, 0x0], 0x2, r7}) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r1) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x9, 0x9, 0x53, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x40, 0x8000, 0x0, 0xf7d}}) getsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000a40)={@rand_addr, @loopback, 0x0}, &(0x7f0000000a80)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x200, 0x6, {{0x14, 0x4, 0x1, 0x27, 0x50, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0x9, 0x1, 0xf, [{@multicast2, 0x9b62}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x7}, {@broadcast, 0x10001}, {@private=0xa010100, 0x5}]}, @rr={0x7, 0xb, 0xc5, [@loopback, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c00)={'erspan0\x00', 0x0, 0x8, 0x10, 0x50000, 0x3, {{0x20, 0x4, 0x1, 0x26, 0x80, 0x64, 0x0, 0x3, 0x2b, 0x0, @private=0xa010101, @multicast1, {[@lsrr={0x83, 0x1b, 0xdc, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010100, @local, @multicast1]}, @timestamp_prespec={0x44, 0x44, 0xc4, 0x3, 0x8, [{@private=0xa010102, 0x4}, {@remote, 0x4738}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@rand_addr=0x64010100, 0x9}, {@remote, 0xc4fa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@remote, 0xffffff42}]}, @end, @rr={0x7, 0xb, 0x98, [@private=0xa010101, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000014c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000d80)={0x6c4, r9, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x35c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "ccfc05319c6a98ccb235b9d21b8db161869cc10a1dd348a3e668d8043ae4c7a7b7d4c64c5aae640ab63b5c10525bdfffd7303cb0be13ecda63733bdf9cab542cb3786b7b81f72bc940f4197fbbdaf32aecda0e3107887e21e3f5f6ecf661ac33d06d9faa4ea71c29f5c0948ce0182444103f58f12fde8e18139766b243e811c160b441bb2014c5756ad0e42e42f2a281ace5e063d623131e28a6ebacdaac50621e04dac5e5b7e3a7b6d1306b1cf9f3a9ae1e5477287f7368004fb1863fb258"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xde0c}, @ETHTOOL_A_BITSET_VALUE={0xe2, 0x4, "46d827ab7fc7de493a60c895f7c76fa0dbf05ae1a568cc798a13c3cf77330147a4337f7ebcb6d4366b3d8b02879040f80a05ad5ea51cdae1c5662cb6c13549a133630b5abb723e0431bd8be4b93de8b01087cbb97bae1c47c9b57851c16deaa3e250fb3c617eafea8fc558eb49a17624a2f62c5cb864c17153d4ac834a88cd894252a7c813ef3dc98796f04982b899efa762768cc097feed298c88294207510fe3a86be9222aeaf0a1fad371ef3c40d3e7a8935f8094490dfd2bfc506edda22ca8b64087c1778a431e871d5e07d9d4bc34d4d500322e43be387952a00363"}, @ETHTOOL_A_BITSET_MASK={0xbb, 0x5, "5c1d17cb436a93e3af92e1326a2f23fec30ef279c68f55be35a40272108b8946575a5081364f0a2c6061a0c29fe6ed1b96ba0d2560702570aeeb25f3641238858078b4fdafa7e998b8d5a6bfa982afc94791f9be0fa0a0d8022e94f56e011a79cb75e1c857219e535156bc551c35c24ec82a87fb1943a90969d77b97ed9531835a31d193d56e2818108e6af0d57fbb940813b469bcab52094dd03d382ec0c974ff9fcd9a768db9732b015c93d59d010bd2c92a9ad9d9f2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'dup\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x45, 0x5, "6db03525232dba24ffb9744f39580a4ca7197a0c11f95ee65ae402d4e81b6077fc24ccd4338052878df6ccdc68c1cdf74fa1245a029031f775f2d27f90d21d4509"}, @ETHTOOL_A_BITSET_MASK={0x24, 0x5, "af092e8337485855eae472a2d7b49ef695d165c9bfc5b92fc0e6060de79f016d"}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/ubi_ctrl\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/dev/ubi_ctrl\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\\.\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'dup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'dup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xad}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "8a78480ffc15945eddb9c6ff565140529a4822a81867749c3ab0e555fe04f9c7a2177d1a7a2c492cf227a5523f19fbf13dc60acc674bc06714bdb639a922bf43c4631e2807b7d85509d8b2c596c4d59bd99ab7743dcd47956d00d05a9ddf2a977cc1"}]}, @ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x20008004}, 0x4001) 554.997352ms ago: executing program 3 (id=1018): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) msync(&(0x7f000032e000/0x2000)=nil, 0x2000, 0x6) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}], 0x18, 0x8000}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea668c7447) 325.903353ms ago: executing program 1 (id=1019): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x84282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 224.280523ms ago: executing program 1 (id=1020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000440)={0x8080000, 0x205000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r1, 0x8010aebc, &(0x7f0000000440)={0x8080000, 0x205000}) (async) pipe(&(0x7f0000000080)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) (async) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) (async) 4.495055ms ago: executing program 4 (id=1021): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1294040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}, 0x7}, {{&(0x7f0000000200)=@ax25={{0x3, @bcast}, [@default, @default, @null, @bcast, @default, @bcast, @netrom, @rose]}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000001980)=""/161, 0xa1}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/160, 0xa0}], 0x5}, 0x3}, {{&(0x7f0000001740)=@hci, 0x80, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f00000002c0)=""/1, 0x1}], 0x2, &(0x7f0000001880)=""/41, 0x29}, 0x4}], 0x3, 0x40, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/231, 0xe7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001440), 0x440100, 0x0) write$binfmt_script(r3, &(0x7f0000001a40)={'#! ', './file0', [{0x20, 'lowerdir'}, {0x20, 'batadv0\x00'}, {0x20, 'batadv0\x00'}, {}, {0x20, 'lowerdir'}, {0x20, '*.'}, {0x20, '%.&}\\[^\x00'}, {}], 0xa, "593634d84eab90b7dbfc820e04a222c1ce6109cb5b21ea33110b06f5d0bb812a9ed7e6ea15d68dea3189abb7d849e62b61064b42999edeac55030f9fabae7e1a10ee981417153cbebe395a90517b80031af4e212984afe53a59e96da05e6a5072ff7f0756851cb44ef27aef5bf5f08a9901d8958365b65995149d8fef8efcb8edeccfa1d49593a65d993a07f66317b727c0e1d13c3dbc3a31449357e173f2eae737fe7b42d8bca8aadf14dcddc5da02274dda77732959db196afdd780bfaef32abd8421f5cd807b338d66dbb2262045aa69f93eb41d96e27c0d8"}, 0x117) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c96000000150a010100000000000000000000000208d64c40000080"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) socket$kcm(0x29, 0x5, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 4.130373ms ago: executing program 1 (id=1022): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) (async) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bind$phonet(r1, &(0x7f00000001c0)={0x23, 0x6, 0x7b, 0x1}, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000200)) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) (async) r5 = accept4$x25(r1, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x1800) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) (async) pwritev2(r1, &(0x7f0000000540)=[{&(0x7f0000000380)="0a72009da3e033487811f68f528e81f2db903e2818f71a8a040abc0fd9c35254bc50b424b3f2948e6fb3980521d51b", 0x2f}, {&(0x7f00000003c0)="7717f595709e71f8bffc6075e52121a962a28f8b9ca6706b154ffb4d0f245674bd1f3789fd55d1ba8dc65effb83b0244410f83d3a154", 0x36}, {&(0x7f0000000400)="1d2c7d2401ed7af8080b2dbd011eb6fd288f37c3c267949a8d23a6190f8b9025ec0ef48b90ebcb4dac0e044b87244943b29cba8cef37a61d52864f5a77917838bb1e66b8f1bc04b5eb42a53b5c3cace7b67eeceb15a2137d3f8334ee3ce699624be37c822aa25ddf821c50b5dfa351ae11b19e80e809e3274f6577447f7308c8f506d2373e73ead805ff482cadbb3d619679a8d5b19b5f4e5243ea6b40f532ef2cf0588962c245b28f0785c7179bfeee116f837b5a0880132e6d5587b3f9d66270ba0bd694384888847161bc30dbe59da624cba425ab1a1a03d7fad9c4042f290d", 0xe1}, {&(0x7f0000000500)="0280ffbb00ee529c", 0x8}], 0x4, 0x1, 0x7, 0xc) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000580)=0xfd8, 0x4) (async, rerun: 32) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r8, 0xc0286415, &(0x7f0000000600)={&(0x7f0000ffa000/0x6000)=nil, 0x1000, 0x1, 0x1}) fadvise64(r4, 0xf528, 0x0, 0x4) (async) r9 = dup(r8) r10 = openat$incfs(r9, &(0x7f0000000640)='.pending_reads\x00', 0x100, 0x100) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x8000) (async, rerun: 32) r11 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200600) (rerun: 32) ioctl$HIDIOCGUCODE(r11, 0xc018480d, &(0x7f0000000800)={0x3, 0x3, 0x6, 0x6, 0xfffffff9, 0x2}) (async, rerun: 32) r12 = syz_clone(0x80000000, &(0x7f0000000a80)="8d85ba364d437c79f3a2e61dc03672d398c062d4fae2198a9cb1677f5f9775618e4c19e8a0243a82fc9ef0ebe19dc4da5921ca6a2d2469e7ad20dbbf49e80b8992c289ca0951aecd759b49", 0x4b, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="62a2d2ced3d18849a96036d357b603e970d51332908459935c4f1fccdce9cd9305b0e2a865467980e0b3eda883e463197b4550a97ef77f92829d69eade7b890ee638baba53226fd3d125a4312f9d7798a416cc5d238252b804c3acbc2de9c194391fc99ec61b033e66a35f58a44a219b9d5366f9227561cee40dc9216aff34d4d2c3c1ab2c6022d59367eeb9aedb9c37ae85265601fb4c2591bad401986b547a02bac77fa707451dd0b8f4adf0dad196930a55c7ba2af7e4fba218fcf31e7667237e9c9cbd471eb07db875b686df5d037952e152dd5ab76c1f6654ba8cf8a81b6745989607aad0c10b8bb0a19deb") (rerun: 32) sendmmsg$unix(r10, &(0x7f0000000cc0)=[{{&(0x7f0000000840)=@file={0x1, './file0/file0/file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="74c6b304fbdb70d8b4f2f1d3f117f9514a5130c264793074f83d933c76e5b81b6f7f4499549724843a30f047409c08ae2234795db7d86b66761ea04c9b8e5cfd84a2bba68d55877b8be2337dea2c50d28175f3a6ccd90d1af3359707d33e5698691dc1a9ff3323684b440fd50e541a8fe76a1b627ac582134f7decbc64029f3215c9384bc1ec910ac8dda1eda21aff69686aff008142bc27d72893525627ecb44724db759b8d823dbb63", 0xaa}, {&(0x7f0000000980)="e0651ce3f5d6b6855cdd8c063b49e1beafba8497c41124c428f5a0f88d2c96940789075df8582710a4e4a83a3613c0b2d89ec204d647c8d8e9b46cc3f89c04bf714a714503f523a4692cb1adc08b818b39a1edf0a91e3231ebc75efde10a6a1f5830e6acf4c56f04ea2e0c985eccb98b19f3e476b6a576ae58eff20c8be5f813d45ba966db535b9c3cee5bb4863fa4b9efc97c8fd931504c7f17", 0x9a}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r12, r2, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x20000800}}], 0x1, 0x40050) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r13, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r14, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48000) (async) r15 = signalfd(r0, &(0x7f0000001040)={[0xfffffffffffffffb]}, 0x8) sendmsg$unix(r9, &(0x7f0000001200)={&(0x7f0000000e40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000ec0)="da3830e52eb6d6b85bfa29c77ab74a8c292ee212083a77c8acaa8f5a08f5534234f6779f70c4019c7ff2325e23b9bca638f6f45b7b1bdbf931b297e4e3d572c758f64fd8df3a791a09a0ec5b40a16e791d542124bea13f4e31c8f23fe54812b9bcb69920915e44e92b6453e51893cc536478b3d4f8ae5de2618b5bce658e099736932359986c3d8ea47beb940d92e8754cde2ccff9999ca70ab96f89a2", 0x9d}, {&(0x7f0000000f80)="7288ca6f1d1f10dbb31f3453cd6952b01e12685d8ce137bd034ea82d11f28a468d6d64feb65da6d1d3a2ad2031661cd4296ac0df21af1fd1e8535a6e744e2f56d1dc08a2", 0x44}], 0x2, &(0x7f0000001100)=[@rights={{0x20, 0x1, 0x1, [r8, r15, r7, r1]}}, @cred={{0x1c, 0x1, 0x2, {r12, r2, r3}}}, @rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r0, r11, r0, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x20, 0x1, 0x1, [r11, r5, r4, r9]}}], 0xd0, 0x800}, 0x2000c040) 3.470158ms ago: executing program 1 (id=1023): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106d) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000340)={0x9, 0x4000, 0x8, 0xffffffffffffffff, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x19a) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r6, 0xc0285628, &(0x7f00000001c0)={0x3, 0x1, 0x0, '\x00', 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xa0025, 0x0) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'dummy0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x2, 0x4, 0x7, 0x5b, 0x6, 0x7, 0x4, 0xb6b4}}) 0s ago: executing program 4 (id=1024): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24d, 0xfffffff6, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0x8}]}, 0x78) (async) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{0xb0}, 0x20}}}, 0x7) (async) close(r1) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): ration, please check. [ 65.845040][ T6911] netlink: 'syz.1.222': attribute type 12 has an invalid length. [ 65.848491][ T6911] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.222'. [ 66.301048][ T5971] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.303090][ T5971] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.303904][ T5331] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.722856][ T6972] warning: `syz.1.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.852928][ T6980] kvm: pic: non byte read [ 66.912702][ T6990] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 66.923379][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.928043][ T6990] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 66.982511][ T6987] bridge_slave_0: default FDB implementation only supports local addresses [ 67.391092][ T61] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 67.551099][ T61] usb 6-1: Invalid ep0 maxpacket: 16 [ 67.557990][ T7039] program syz.0.260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.681163][ T61] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 67.813458][ T7045] MINIX-fs: blocksize too small for device [ 67.831038][ T61] usb 6-1: Invalid ep0 maxpacket: 16 [ 67.833295][ T61] usb usb6-port1: attempt power cycle [ 67.930168][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 67.930181][ T40] audit: type=1400 audit(1758776751.115:404): avc: denied { node_bind } for pid=7050 comm="syz.3.266" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.053999][ T40] audit: type=1400 audit(1758776751.245:405): avc: denied { validate_trans } for pid=7059 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.093184][ T7064] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 68.095824][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.100757][ T7064] netlink: 'syz.3.270': attribute type 30 has an invalid length. [ 68.171065][ T61] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 68.198231][ T61] usb 6-1: Invalid ep0 maxpacket: 16 [ 68.285387][ T7077] netlink: 92 bytes leftover after parsing attributes in process `syz.3.275'. [ 68.331140][ T61] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 68.362453][ T61] usb 6-1: Invalid ep0 maxpacket: 16 [ 68.364706][ T61] usb usb6-port1: unable to enumerate USB device [ 68.393357][ T40] audit: type=1400 audit(1758776751.585:406): avc: denied { execute } for pid=7075 comm="syz.2.274" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 68.438475][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 68.446454][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 68.644491][ T40] audit: type=1400 audit(1758776751.835:407): avc: denied { name_bind } for pid=7090 comm="syz.3.279" path="socket:[15721]" dev="sockfs" ino=15721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 68.813897][ T7094] loop8: detected capacity change from 0 to 8 [ 68.820823][ T6311] Dev loop8: unable to read RDB block 8 [ 68.823730][ T6311] loop8: unable to read partition table [ 68.826232][ T6311] loop8: partition table beyond EOD, truncated [ 68.864721][ T40] audit: type=1400 audit(1758776752.055:408): avc: denied { mounton } for pid=7103 comm="syz.3.282" path="/77/file0" dev="tmpfs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.887760][ T40] audit: type=1400 audit(1758776752.075:409): avc: denied { mounton } for pid=7103 comm="syz.3.282" path="/77/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 68.898292][ T40] audit: type=1400 audit(1758776752.085:410): avc: denied { read write } for pid=7103 comm="syz.3.282" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.906006][ T40] audit: type=1400 audit(1758776752.085:411): avc: denied { open } for pid=7103 comm="syz.3.282" path="/77/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.913705][ T40] audit: type=1400 audit(1758776752.085:412): avc: denied { mounton } for pid=7103 comm="syz.3.282" path="/77/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.921335][ T40] audit: type=1400 audit(1758776752.085:413): avc: denied { read } for pid=7103 comm="syz.3.282" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.093788][ T7114] pim6reg: entered allmulticast mode [ 69.208605][ T7118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=7118 comm=syz.3.286 [ 69.250866][ T7120] netlink: 3 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.256472][ T7120] 0ªX¹¦À: renamed from caif0 [ 69.267830][ T7120] 0ªX¹¦À: entered allmulticast mode [ 69.270137][ T7120] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 69.275747][ T7122] syz.3.288 uses obsolete (PF_INET,SOCK_PACKET) [ 69.351205][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.354465][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.357632][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.360804][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.364514][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.368226][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.371537][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.374689][ T7126] netlink: 'syz.2.290': attribute type 3 has an invalid length. [ 69.411095][ T2198] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 69.560999][ T2198] usb 6-1: Invalid ep0 maxpacket: 16 [ 69.701141][ T2198] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 69.824653][ T7139] binder: 7137:7139 ioctl c00c620f 200000000140 returned -22 [ 69.851313][ T2198] usb 6-1: Invalid ep0 maxpacket: 16 [ 69.856950][ T2198] usb usb6-port1: attempt power cycle [ 70.153885][ T9] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 70.312578][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 70.317077][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 70.317097][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 70.317136][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 70.335180][ T9] usb 5-1: string descriptor 0 read error: -22 [ 70.337835][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.342267][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.351409][ T7148] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 70.355910][ T2198] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 70.473678][ T7162] netlink: 104 bytes leftover after parsing attributes in process `syz.2.300'. [ 70.491130][ T2198] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 70.512434][ T2198] usb 6-1: device descriptor read/8, error -71 [ 70.556487][ T9] cdc_ncm 5-1:1.0: bind() failure [ 70.563454][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 70.565762][ T9] cdc_ncm 5-1:1.1: bind() failure [ 70.571818][ T9] usb 5-1: USB disconnect, device number 3 [ 70.631292][ T2198] usb usb6-port1: unable to enumerate USB device [ 70.666470][ T7169] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 70.673185][ T6727] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 70.673386][ T7170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.682099][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.303'. [ 70.721659][ T7176] overlayfs: overlapping lowerdir path [ 70.727399][ T7176] overlayfs: overlapping lowerdir path [ 70.787713][ T6727] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 70.885232][ T7191] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 70.887738][ T7191] SELinux: failed to load policy [ 70.890284][ T7191] SELinux: policydb version 376111168 does not match my version range 15-35 [ 70.893523][ T7191] SELinux: failed to load policy [ 71.121042][ T7199] (syz.0.311,7199,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 71.124750][ T7199] (syz.0.311,7199,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 71.188175][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.191979][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.199161][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 71.202409][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.313'. [ 71.206141][ T7203] netlink: 68 bytes leftover after parsing attributes in process `syz.0.313'. [ 71.267475][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 71.270405][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 71.360366][ T7215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.364342][ T7215] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 71.371752][ T7215] bridge: RTM_NEWNEIGH with invalid ether address [ 71.374022][ T7216] bridge: RTM_NEWNEIGH with invalid ether address [ 71.376177][ T7216] bridge: RTM_NEWNEIGH with invalid ether address [ 71.378553][ T7215] bridge: RTM_NEWNEIGH with invalid ether address [ 71.640991][ T6014] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.791032][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 71.794126][ T6014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.797733][ T6014] usb 5-1: config 0 has no interfaces? [ 71.799866][ T6014] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.803497][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.807371][ T6014] usb 5-1: config 0 descriptor?? [ 72.017388][ T6014] usb 5-1: USB disconnect, device number 4 [ 72.281205][ T7232] geneve2: entered promiscuous mode [ 72.282931][ T7232] geneve2: entered allmulticast mode [ 72.432609][ T7241] tmpfs: Group quota inode hardlimit too large. [ 72.499783][ T7245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 72.504386][ T7245] netlink: 92 bytes leftover after parsing attributes in process `syz.3.330'. [ 73.021650][ T7274] netlink: 17 bytes leftover after parsing attributes in process `syz.2.339'. [ 73.476878][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 73.539424][ T9] IPVS: starting estimator thread 0... [ 73.631258][ T7291] IPVS: using max 22 ests per chain, 52800 per kthread [ 73.653792][ T7293] Bluetooth: Invalid byte 04 after esc byte [ 73.657273][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 73.657281][ T40] audit: type=1400 audit(1758776756.845:429): avc: denied { create } for pid=7292 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.666484][ T40] audit: type=1400 audit(1758776756.845:430): avc: denied { write } for pid=7292 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 73.810593][ T7297] pimreg: entered allmulticast mode [ 74.118269][ T7305] futex_wake_op: syz.2.348 tries to shift op by -1; fix this program [ 74.446144][ T7317] nlmon0: entered promiscuous mode [ 74.448207][ T7317] nlmon0: entered allmulticast mode [ 74.721247][ T40] audit: type=1326 audit(1758776757.915:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7331 comm="syz.2.355" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6d478eec9 code=0x0 [ 74.774012][ T40] audit: type=1400 audit(1758776757.965:432): avc: denied { getopt } for pid=7331 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.852974][ T7338] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 74.973065][ T7343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=7343 comm=syz.3.358 [ 75.016286][ T40] audit: type=1326 audit(1758776758.205:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.359" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33e78eec9 code=0x0 [ 75.118518][ T40] audit: type=1326 audit(1758776758.305:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.3.359" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33e78eec9 code=0x0 [ 75.632132][ T40] audit: type=1400 audit(1758776758.825:435): avc: denied { name_bind } for pid=7354 comm="syz.2.361" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 75.645634][ T40] audit: type=1400 audit(1758776758.835:436): avc: denied { associate } for pid=7354 comm="syz.2.361" name="memory.events.local" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 75.653991][ T40] audit: type=1400 audit(1758776758.835:437): avc: denied { append } for pid=7354 comm="syz.2.361" path="/107/file0/memory.events.local" dev="9p" ino=71827917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.661131][ T5331] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.662022][ T5971] Bluetooth: hci4: command 0x1003 tx timeout [ 75.662381][ T40] audit: type=1800 audit(1758776758.845:438): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.361" name="file3" dev="9p" ino=71827921 res=0 errno=0 [ 75.908154][ T5331] Bluetooth: hci2: ACL packet for unknown connection handle 9 [ 76.014164][ T7369] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 76.166100][ T7380] batadv_slave_0: entered promiscuous mode [ 76.170349][ T7380] batadv_slave_0: left promiscuous mode [ 76.178818][ T7382] cgroup: Name too long [ 76.279578][ T7386] comedi comedi3: comedi_config --init_data is deprecated [ 76.282069][ T7391] comedi comedi3: comedi_config --init_data is deprecated [ 76.501076][ T6007] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.530042][ T7406] cgroup: noprefix used incorrectly [ 76.613324][ T7414] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 76.627109][ T7416] loop2: detected capacity change from 0 to 7 [ 76.630621][ T7416] Dev loop2: unable to read RDB block 7 [ 76.633194][ T7416] loop2: unable to read partition table [ 76.635123][ T7416] loop2: partition table beyond EOD, truncated [ 76.637504][ T7416] loop_reread_partitions: partition scan of loop2 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 76.637504][ T7416] ) failed (rc=-5) [ 76.662917][ T6007] usb 7-1: config 96 has an invalid interface number: 147 but max is 1 [ 76.665585][ T6007] usb 7-1: config 96 has an invalid interface number: 25 but max is 1 [ 76.668222][ T6007] usb 7-1: config 96 has no interface number 0 [ 76.670259][ T6007] usb 7-1: config 96 has no interface number 1 [ 76.673168][ T6007] usb 7-1: config 96 interface 147 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 76.676615][ T6007] usb 7-1: config 96 interface 147 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 76.680105][ T6007] usb 7-1: config 96 interface 147 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 76.686117][ T6007] usb 7-1: config 96 interface 147 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 76.690770][ T6007] usb 7-1: config 96 interface 147 altsetting 5 endpoint 0x7 has an invalid bInterval 102, changing to 7 [ 76.696143][ T6007] usb 7-1: config 96 interface 147 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 76.700562][ T6007] usb 7-1: config 96 interface 147 altsetting 5 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 76.705668][ T6007] usb 7-1: config 96 interface 25 altsetting 4 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.709561][ T6007] usb 7-1: config 96 interface 25 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 76.714819][ T6007] usb 7-1: config 96 interface 25 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 76.718252][ T6007] usb 7-1: config 96 interface 25 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 76.722034][ T6007] usb 7-1: config 96 interface 25 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 76.725300][ T6007] usb 7-1: config 96 interface 25 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 76.728676][ T6007] usb 7-1: config 96 interface 25 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 76.732251][ T6007] usb 7-1: config 96 interface 25 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 76.735521][ T6007] usb 7-1: config 96 interface 147 has no altsetting 0 [ 76.737579][ T6007] usb 7-1: config 96 interface 25 has no altsetting 0 [ 76.741349][ T6007] usb 7-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=df.ef [ 76.744150][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.747495][ T6007] usb 7-1: Product: à  [ 76.748894][ T6007] usb 7-1: Manufacturer: ୤⽀㩨㾧㘡â¿ì´çŒºé®¢è‹¹â‡’㛠༥å©å¼…즾參â¬ä°™äŽášˆéŸ´áŽžë•œãœ§î²µë­¤ì‰‰î±˜è«¯Ï‚蜄셜찒⬫ｃᷯ兤젆ä«å›¬ë³¶â©Žå‘£àµ–囑 [ 76.754610][ T6007] usb 7-1: SerialNumber: 㬅醒앓埜楹듳ꚤ㰴韹瞕꜃啜㧊“ᓬ맕➮佈ﳶê­ê‚뒿彿ä”졮안çŽá¯’数ঌ໪甈弑䂘瞳቙㭠ä–ฉ橦䂹⌢çŸã¹°ê–¶ê£«ä˜€ã…摦ïˆîžì˜˜ë’¯ä²ªä®ì¦—é°¥î£ë ¬åªºäº®ã™½ [ 76.766712][ T7389] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.805333][ T7436] Invalid source name [ 76.806684][ T7436] UBIFS error (pid: 7436): cannot open "./file0", error -22 [ 76.987175][ T6007] usb 7-1: bad CDC descriptors [ 76.988077][ T7445] __nla_validate_parse: 6 callbacks suppressed [ 76.988087][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 76.998967][ T6007] usb 7-1: USB disconnect, device number 3 [ 77.063486][ T7449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 77.065560][ T7449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 77.068088][ T7449] vhci_hcd vhci_hcd.0: Device attached [ 77.072325][ T7449] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 77.074318][ T7449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 77.077345][ T7449] vhci_hcd vhci_hcd.0: Device attached [ 77.079544][ T7450] vhci_hcd: connection closed [ 77.079699][ T6728] vhci_hcd: stop threads [ 77.079750][ T7452] vhci_hcd: connection closed [ 77.081555][ T6728] vhci_hcd: release socket [ 77.081572][ T6728] vhci_hcd: disconnect device [ 77.088028][ T6728] vhci_hcd: stop threads [ 77.089439][ T6728] vhci_hcd: release socket [ 77.090849][ T6728] vhci_hcd: disconnect device [ 77.555321][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 77.672134][ T7487] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.716039][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 77.720017][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.402'. [ 78.554113][ T7478] syz.2.396: vmalloc error: size 283115520, failed to allocated page array size 552960, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 78.560507][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT(full) [ 78.560522][ T7478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.560529][ T7478] Call Trace: [ 78.560532][ T7478] [ 78.560537][ T7478] dump_stack_lvl+0x16c/0x1f0 [ 78.560571][ T7478] warn_alloc+0x248/0x3a0 [ 78.560590][ T7478] ? __pfx_warn_alloc+0x10/0x10 [ 78.560606][ T7478] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.560624][ T7478] ? __vmalloc_node_noprof+0xad/0xf0 [ 78.560643][ T7478] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 78.560664][ T7478] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.560684][ T7478] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.560705][ T7478] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.560722][ T7478] vmalloc_user_noprof+0x9e/0xe0 [ 78.560738][ T7478] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 78.560755][ T7478] vb2_vmalloc_alloc+0x135/0x3f0 [ 78.560776][ T7478] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 78.560794][ T7478] __vb2_queue_alloc+0x8c6/0x1280 [ 78.560817][ T7478] vb2_core_reqbufs+0xa90/0xfe0 [ 78.560836][ T7478] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 78.560860][ T7478] __vb2_init_fileio+0x3f1/0x1100 [ 78.560876][ T7478] ? __mutex_lock+0x1c5/0x1060 [ 78.560895][ T7478] ? find_held_lock+0x2b/0x80 [ 78.560918][ T7478] ? futex_unqueue+0x133/0x2c0 [ 78.560939][ T7478] __vb2_perform_fileio+0x9c2/0x1660 [ 78.560960][ T7478] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 78.560977][ T7478] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 78.560989][ T7478] ? lockdep_hardirqs_on+0x7c/0x110 [ 78.561002][ T7478] ? import_ubuf+0x1b6/0x220 [ 78.561021][ T7478] vb2_fop_write+0x207/0x3f0 [ 78.561055][ T7478] v4l2_write+0x226/0x360 [ 78.561070][ T7478] ? __pfx_v4l2_write+0x10/0x10 [ 78.561082][ T7478] vfs_writev+0x5dc/0xde0 [ 78.561097][ T7478] ? __pfx_vfs_writev+0x10/0x10 [ 78.561108][ T7478] ? kmem_cache_free+0x2d1/0x4d0 [ 78.561126][ T7478] ? __fget_files+0x20e/0x3c0 [ 78.561142][ T7478] ? do_pwritev+0x1a6/0x270 [ 78.561151][ T7478] do_pwritev+0x1a6/0x270 [ 78.561162][ T7478] ? __pfx_do_pwritev+0x10/0x10 [ 78.561176][ T7478] do_syscall_64+0xcd/0x4e0 [ 78.561191][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.561203][ T7478] RIP: 0033:0x7fc6d478eec9 [ 78.561212][ T7478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.561222][ T7478] RSP: 002b:00007fc6d566c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 78.561233][ T7478] RAX: ffffffffffffffda RBX: 00007fc6d49e6090 RCX: 00007fc6d478eec9 [ 78.561239][ T7478] RDX: 0000000000000001 RSI: 0000200000000840 RDI: 000000000000000b [ 78.561246][ T7478] RBP: 00007fc6d4811f91 R08: 000000007fffffff R09: 0000000000000000 [ 78.561252][ T7478] R10: 00000000000000c9 R11: 0000000000000246 R12: 0000000000000000 [ 78.561258][ T7478] R13: 00007fc6d49e6128 R14: 00007fc6d49e6090 R15: 00007ffe65851b68 [ 78.561271][ T7478] [ 78.652631][ T7478] Mem-Info: [ 78.653693][ T7478] active_anon:11696 inactive_anon:173 isolated_anon:0 [ 78.653693][ T7478] active_file:1668 inactive_file:43996 isolated_file:0 [ 78.653693][ T7478] unevictable:2792 dirty:67 writeback:0 [ 78.653693][ T7478] slab_reclaimable:12328 slab_unreclaimable:69382 [ 78.653693][ T7478] mapped:24488 shmem:3417 pagetables:1365 [ 78.653693][ T7478] sec_pagetables:306 bounce:0 [ 78.653693][ T7478] kernel_misc_reclaimable:0 [ 78.653693][ T7478] free:380181 free_pcp:10646 free_cma:0 [ 78.668447][ T7478] Node 0 active_anon:46832kB inactive_anon:692kB active_file:6672kB inactive_file:175780kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:97952kB dirty:268kB writeback:0kB shmem:10132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13648kB pagetables:5440kB sec_pagetables:1224kB all_unreclaimable? no Balloon:0kB [ 78.672160][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 78.672169][ T40] audit: type=1400 audit(1758776761.865:452): avc: denied { ioctl } for pid=7518 comm="syz.3.408" path="socket:[18705]" dev="sockfs" ino=18705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.678700][ T7478] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:176kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.700217][ T7478] Node 0 DMA free:5248kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:348kB free_cma:0kB [ 78.709434][ T7478] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 78.711495][ T7478] Node 0 DMA32 free:59920kB boost:36864kB min:64380kB low:71256kB high:78132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46812kB inactive_anon:568kB active_file:6676kB inactive_file:174996kB unevictable:7632kB writepending:268kB present:2080628kB managed:1263416kB mlocked:0kB bounce:0kB free_pcp:3196kB local_pcp:524kB free_cma:0kB [ 78.721577][ T7478] lowmem_reserve[]: 0 0 0 0 0 [ 78.723096][ T7478] Node 1 Normal free:1447616kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:32872kB local_pcp:14392kB free_cma:0kB [ 78.732606][ T7478] lowmem_reserve[]: 0 0 0 0 0 [ 78.734075][ T7478] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 1*256kB (U) 1*512kB (M) 2*1024kB (UM) 1*2048kB (U) 0*4096kB = 5240kB [ 78.738555][ T7478] Node 0 DMA32: 1020*4kB (UME) 524*8kB (UME) 177*16kB (UME) 283*32kB (UME) 205*64kB (UME) 131*128kB (UME) 20*256kB (ME) 15*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 63872kB [ 78.749398][ T7478] Node 1 Normal: 2*4kB (UE) 5*8kB (E) 12*16kB (UE) 6*32kB (E) 8*64kB (UE) 2*128kB (ME) 1*256kB (U) 2*512kB (UE) 2*1024kB (UM) 1*2048kB (E) 349*4096kB (M) = 1436080kB [ 78.758983][ T7478] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.762291][ T7478] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.765592][ T7478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.768889][ T7478] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.773250][ T7478] 48388 total pagecache pages [ 78.774709][ T7478] 0 pages in swap cache [ 78.776085][ T7478] Free swap = 124996kB [ 78.777398][ T7478] Total swap = 124996kB [ 78.778693][ T7478] 1048443 pages RAM [ 78.779878][ T7478] 0 pages HighMem/MovableOnly [ 78.781748][ T7478] 283276 pages reserved [ 78.783540][ T7478] 0 pages cma reserved [ 78.974471][ T40] audit: type=1400 audit(1758776762.165:453): avc: denied { bind } for pid=7523 comm="syz.3.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.991028][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.093965][ T40] audit: type=1400 audit(1758776762.285:454): avc: denied { getopt } for pid=7530 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.094567][ T5331] Bluetooth: hci1: unexpected event for opcode 0x043d [ 79.100292][ T40] audit: type=1400 audit(1758776762.285:455): avc: denied { map } for pid=7530 comm="syz.3.413" path="socket:[18358]" dev="sockfs" ino=18358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 79.155743][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 79.173542][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.177114][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.181527][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.184632][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.188015][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.192267][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.195548][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.199117][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.202582][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.205319][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.208217][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.211916][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.214653][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.217371][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.220664][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.223962][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.226754][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.230563][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.233428][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.236130][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.239617][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.242570][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.245279][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.248916][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.254233][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.257119][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.259654][ T9] usb 5-1: Product: syz [ 79.262593][ T9] usb 5-1: Manufacturer: syz [ 79.264068][ T9] usb 5-1: SerialNumber: syz [ 79.267708][ T9] usb 5-1: config 0 descriptor?? [ 79.278152][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.351061][ T7030] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.484888][ T6034] usb 5-1: USB disconnect, device number 5 [ 79.490346][ T6034] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 79.505329][ T7030] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 79.511120][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.514687][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.521374][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.524869][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.527742][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.535973][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.539600][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.545092][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.549497][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.554053][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.557520][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.560784][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.564021][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.566876][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.570640][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.573977][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.576826][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.580224][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.583710][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.586626][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.590039][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.593176][ T7030] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 79.596010][ T7030] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 79.599450][ T7030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 79.603531][ T7030] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 79.606281][ T7030] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 79.608737][ T7030] usb 8-1: Product: syz [ 79.610121][ T7030] usb 8-1: Manufacturer: syz [ 79.611871][ T7030] usb 8-1: SerialNumber: syz [ 79.615691][ T7030] usb 8-1: config 0 descriptor?? [ 79.621940][ T7030] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 79.687140][ T7538] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 79.720763][ T40] audit: type=1400 audit(1758776762.905:456): avc: denied { getopt } for pid=7544 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.824738][ T7030] usb 8-1: USB disconnect, device number 6 [ 79.826967][ T7551] netlink: 348 bytes leftover after parsing attributes in process `syz.2.419'. [ 79.830784][ T7030] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 79.857507][ T7555] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 79.902696][ T7561] input: syz1 as /devices/virtual/input/input13 [ 79.963991][ T40] audit: type=1400 audit(1758776763.155:457): avc: denied { write } for pid=7560 comm="syz.2.422" path="socket:[17170]" dev="sockfs" ino=17170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.973539][ T40] audit: type=1400 audit(1758776763.155:458): avc: denied { accept } for pid=7560 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.979844][ T40] audit: type=1400 audit(1758776763.155:459): avc: denied { read } for pid=7560 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.992846][ T7564] vlan2: entered promiscuous mode [ 79.994510][ T7564] vlan2: entered allmulticast mode [ 79.996199][ T7564] hsr_slave_1: entered allmulticast mode [ 80.039050][ T40] audit: type=1400 audit(1758776763.225:460): avc: denied { listen } for pid=7567 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 80.047006][ T40] audit: type=1400 audit(1758776763.225:461): avc: denied { accept } for pid=7567 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 80.143207][ T7564] kvm: kvm [7563]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0x1 [ 80.147266][ T7564] kvm: kvm [7563]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0x1 [ 80.185065][ T7564] kvm: kvm [7563]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0x1 [ 80.221811][ T7564] kvm: kvm [7563]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0x1 [ 80.225436][ T7564] kvm: kvm [7563]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0x1 [ 80.254279][ T7564] kvm_intel: kvm [7563]: vcpu0, guest rIP: 0x9139 Unhandled WRMSR(0x1d9) = 0x1 [ 80.768316][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 80.826520][ T7607] ipvlan2: entered promiscuous mode [ 80.829731][ T7607] bridge0: port 3(ipvlan2) entered blocking state [ 80.831888][ T7607] bridge0: port 3(ipvlan2) entered disabled state [ 80.834183][ T7607] ipvlan2: entered allmulticast mode [ 80.835999][ T7607] bridge0: entered allmulticast mode [ 80.838433][ T7607] ipvlan2: left allmulticast mode [ 80.839864][ T7607] bridge0: left allmulticast mode [ 81.196425][ T7635] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 81.199476][ T7635] SELinux: failed to load policy [ 81.202092][ T7635] smb3: Unknown parameter 'nocasetch_sb' [ 81.239417][ T7644] validate_nla: 48 callbacks suppressed [ 81.239433][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.245314][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.248411][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.251974][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.254434][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.257860][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.260719][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.265319][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.267912][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.270256][ T7644] netlink: 'syz.1.447': attribute type 3 has an invalid length. [ 81.398351][ T7654] usb 1-1: USB disconnect, device number 2 [ 81.429774][ T60] cfg80211: failed to load regulatory.db [ 81.653384][ T7664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.656568][ T7664] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.750659][ T7664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.755051][ T7664] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.834905][ T7664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.838988][ T7664] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.904230][ T7664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.907385][ T7664] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.022186][ T6727] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.025043][ T6727] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.035466][ T6731] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.038658][ T6731] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.048840][ T6718] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.052157][ T6718] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.058636][ T6718] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.062841][ T6718] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.337237][ T7679] IPv6: addrconf: prefix option has invalid lifetime [ 82.548303][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 82.588219][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.476'. [ 82.595996][ T7747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7747 comm=syz.0.478 [ 82.596653][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 82.603012][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 82.704343][ T7753] block nbd3: NBD_DISCONNECT [ 82.706215][ T7753] block nbd3: Send disconnect failed -89 [ 82.708810][ T7752] block nbd3: Disconnected due to user request. [ 82.713996][ T7752] block nbd3: shutting down sockets [ 82.730631][ T7754] tmpfs: Invalid gid '0x00000000ffffffff' [ 82.792058][ T7759] nvme_fabrics: missing parameter 'transport=%s' [ 82.795036][ T7759] nvme_fabrics: missing parameter 'nqn=%s' [ 82.926896][ T7764] FAT-fs (sr0): bogus number of reserved sectors [ 82.928955][ T7764] FAT-fs (sr0): Can't find a valid FAT filesystem [ 82.967900][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 83.079976][ T7776] syz_tun: entered allmulticast mode [ 83.082336][ T7775] syz_tun: left allmulticast mode [ 83.545659][ T7782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.489'. [ 83.655304][ T7795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46083 sclass=netlink_route_socket pid=7795 comm=syz.1.490 [ 83.684202][ T5331] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 83.811474][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 83.811485][ T40] audit: type=1400 audit(2000000002.209:478): avc: denied { listen } for pid=7811 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.950553][ T7827] dlm: no locking on control device [ 84.011487][ T40] audit: type=1400 audit(2000000002.409:479): avc: denied { setopt } for pid=7833 comm="syz.2.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.047098][ T40] audit: type=1400 audit(2000000002.439:480): avc: denied { module_request } for pid=7839 comm="syz.2.501" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.169127][ T40] audit: type=1400 audit(2000000002.559:481): avc: denied { accept } for pid=7856 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.512588][ T40] audit: type=1400 audit(2000000002.909:482): avc: denied { setopt } for pid=7919 comm="syz.1.507" lport=35139 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.521805][ T40] audit: type=1400 audit(2000000002.909:483): avc: denied { getopt } for pid=7919 comm="syz.1.507" lport=35139 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.968908][ T40] audit: type=1400 audit(2000000003.359:484): avc: denied { setopt } for pid=7944 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.043124][ T7965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.516'. [ 85.070676][ T40] audit: type=1400 audit(2000000003.459:485): avc: denied { read } for pid=7971 comm="syz.3.518" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 85.075117][ T7977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.520'. [ 85.082503][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 85.085165][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 85.088038][ T40] audit: type=1400 audit(2000000003.459:486): avc: denied { open } for pid=7971 comm="syz.3.518" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 85.110886][ T7984] sctp: [Deprecated]: syz.3.522 (pid 7984) Use of int in max_burst socket option. [ 85.110886][ T7984] Use struct sctp_assoc_value instead [ 85.150499][ T40] audit: type=1400 audit(2000000003.539:487): avc: denied { create } for pid=7983 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 85.199321][ T7997] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 85.330521][ T8026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.385680][ T8043] ip6erspan0: entered promiscuous mode [ 85.415705][ T8053] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.435541][ T8054] binder: BINDER_SET_CONTEXT_MGR already set [ 85.437541][ T8054] binder: 8051:8054 ioctl 4018620d 200000000280 returned -16 [ 85.479191][ T8065] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 85.482305][ T8065] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 85.485841][ T8065] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 85.603083][ T8083] 9pnet_virtio: no channels available for device syz [ 85.911076][ T61] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 86.072718][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.077421][ T61] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.080364][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.083022][ T61] usb 8-1: Product: syz [ 86.084437][ T61] usb 8-1: Manufacturer: syz [ 86.086033][ T61] usb 8-1: SerialNumber: syz [ 86.090159][ T61] usb 8-1: config 0 descriptor?? [ 86.221302][ T5971] Bluetooth: hci3: command 0x0405 tx timeout [ 86.501558][ T8100] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 86.509645][ T60] usb 8-1: USB disconnect, device number 7 [ 86.519187][ T8158] netem: incorrect gi model size [ 86.521147][ T8158] netem: change failed [ 86.637211][ T8182] validate_nla: 44 callbacks suppressed [ 86.637222][ T8182] netlink: 'syz.2.552': attribute type 7 has an invalid length. [ 86.662736][ T8182] bridge4: port 1(bond1) entered blocking state [ 86.664770][ T8182] bridge4: port 1(bond1) entered disabled state [ 86.666735][ T8182] bond1: entered allmulticast mode [ 87.047057][ T8267] evm: overlay not supported [ 87.107275][ T8270] netlink: 'syz.3.557': attribute type 1 has an invalid length. [ 87.126150][ T8270] bond3: entered promiscuous mode [ 87.128495][ T8270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.138476][ T8270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 87.140724][ T8270] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 87.144675][ T8270] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 87.149051][ T8270] bond3: (slave ip6gre1): making interface the new active one [ 87.152265][ T8270] ip6gre1: entered promiscuous mode [ 87.155281][ T8270] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 87.490989][ T6014] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.581078][ T8065] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.581083][ T5331] Bluetooth: hci0: command 0x0419 tx timeout [ 87.585038][ T8065] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 87.662825][ T6014] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.666288][ T6014] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.670042][ T6014] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.674023][ T6014] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.678239][ T6014] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.684070][ T6014] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.687053][ T6014] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.689507][ T6014] usb 8-1: Product: syz [ 87.690815][ T6014] usb 8-1: Manufacturer: syz [ 87.695956][ T6014] cdc_wdm 8-1:1.0: skipping garbage [ 87.697615][ T6014] cdc_wdm 8-1:1.0: skipping garbage [ 87.700668][ T6014] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 87.703086][ T6014] cdc_wdm 8-1:1.0: Unknown control protocol [ 87.784629][ T8357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=8357 comm=syz.1.567 [ 87.903635][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.905805][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.907880][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.910016][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.912169][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.914227][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.916339][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.918403][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.920529][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.922600][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.924870][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.926935][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.929213][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.931275][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.933657][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.935740][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.937834][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.939930][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 87.942181][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 87.944232][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 88.021659][ T8393] __nla_validate_parse: 15 callbacks suppressed [ 88.021732][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 88.032269][ T8393] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 88.048078][ T8393] ptrace attach of "/syz-executor exec"[8397] was attempted by "/syz-executor exec"[8393] [ 88.067847][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 88.086533][ T8316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.560'. [ 88.103450][ T8406] tmpfs: Bad value for 'mpol' [ 88.121439][ T61] usb 8-1: USB disconnect, device number 8 [ 88.123467][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 88.350997][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 88.475702][ T8065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.477816][ T8065] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 88.480743][ T8065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.483165][ T8065] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 88.487148][ T8065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.489744][ T8065] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 88.513423][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.525119][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.536057][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.540228][ T60] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.547200][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.550984][ T60] usb 6-1: config 0 descriptor?? [ 88.562848][ T8434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.889773][ T8525] ata1.00: invalid cdb length 6 [ 88.896139][ T8528] ata1.00: invalid cdb length 6 [ 88.975220][ T60] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 89.106125][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 89.117700][ T8558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=8558 comm=syz.0.593 [ 89.123704][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 89.240623][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 89.240636][ T40] audit: type=1400 audit(2000000007.629:510): avc: denied { listen } for pid=8580 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.249189][ T40] audit: type=1400 audit(2000000007.639:511): avc: denied { ioctl } for pid=8580 comm="syz.0.595" path="socket:[21320]" dev="sockfs" ino=21320 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.255432][ T8581] kernel profiling enabled (shift: 63) [ 89.259798][ T8581] profiling shift: 63 too large [ 89.321545][ T40] audit: type=1400 audit(2000000007.709:512): avc: denied { ioctl } for pid=8596 comm="syz.0.599" path="socket:[21340]" dev="sockfs" ino=21340 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.596614][ T40] audit: type=1400 audit(2000000007.989:513): avc: denied { mount } for pid=8620 comm="syz.2.604" name="/" dev="ramfs" ino=20195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.597607][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.604'. [ 89.609482][ T40] audit: type=1400 audit(2000000007.999:514): avc: denied { write } for pid=8617 comm="syz.0.603" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 89.661711][ T40] audit: type=1400 audit(2000000008.059:515): avc: denied { ioctl } for pid=8662 comm="syz.0.605" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 89.839897][ T40] audit: type=1400 audit(2000000008.229:516): avc: denied { setopt } for pid=8681 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.887937][ T40] audit: type=1400 audit(2000000008.269:517): avc: denied { read } for pid=8687 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.923536][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 89.924338][ T40] audit: type=1400 audit(2000000008.319:518): avc: denied { mount } for pid=8693 comm="syz.3.613" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 89.957481][ T8704] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 89.962036][ T8703] syz_tun: entered promiscuous mode [ 89.964288][ T8703] batadv_slave_0: entered promiscuous mode [ 89.968504][ T8704] veth0_macvtap: left promiscuous mode [ 90.004650][ T40] audit: type=1400 audit(2000000008.399:519): avc: denied { read append } for pid=8708 comm="syz.3.617" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.006694][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 90.019537][ T8709] netlink: 830 bytes leftover after parsing attributes in process `syz.3.617'. [ 90.159252][ T8731] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 90.412386][ T8754] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 90.424473][ T8754] vxcan1: tx address claim with dlc 0 [ 90.452288][ T6007] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 90.474959][ T8759] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=23065 sclass=netlink_xfrm_socket pid=8759 comm=syz.3.626 [ 90.479324][ T8759] ptrace attach of "/syz-executor exec"[5967] was attempted by "/syz-executor exec"[8759] [ 90.634649][ T6007] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 90.640410][ T6007] usb 7-1: config 1 has no interface number 0 [ 90.643720][ T6007] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 90.648338][ T6007] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 90.652906][ T6007] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 90.656797][ T6007] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.664194][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 90.669261][ T6007] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 90.673087][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.676286][ T6007] usb 7-1: Product: syz [ 90.678020][ T6007] usb 7-1: Manufacturer: syz [ 90.679905][ T6007] usb 7-1: SerialNumber: syz [ 90.689173][ T8737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.692792][ T8737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.896568][ T8815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.898885][ T8815] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.911923][ T8813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.915481][ T8813] IPv6: NLM_F_CREATE should be set when creating new route [ 90.916604][ T6007] usb 7-1: Error in usbnet_get_endpoints (-71) [ 90.918662][ T8813] IPv6: NLM_F_CREATE should be set when creating new route [ 90.923599][ T8813] IPv6: NLM_F_CREATE should be set when creating new route [ 90.931439][ T8813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.942593][ T6007] usb 7-1: USB disconnect, device number 4 [ 90.959720][ T8828] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 90.967140][ T8828] overlayfs: overlapping lowerdir path [ 91.004254][ T8843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8843 comm=syz.3.639 [ 91.044649][ T8854] use of bytesused == 0 is deprecated and will be removed in the future, [ 91.047523][ T61] usb 6-1: USB disconnect, device number 10 [ 91.049600][ T8854] use the actual size instead. [ 91.053586][ T8858] netlink: 'syz.3.641': attribute type 1 has an invalid length. [ 91.094692][ T8858] ISOFS: Unable to identify CD-ROM format. [ 91.128454][ T8905] syzkaller0: entered promiscuous mode [ 91.130765][ T8905] syzkaller0: entered allmulticast mode [ 91.238557][ T8965] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.519021][ T9000] rdma_op ffff88805547d9f0 conn xmit_rdma 0000000000000000 [ 91.522873][ T8975] 9pnet_virtio: no channels available for device syz [ 92.528596][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.576599][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.867087][ T9095] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 92.870122][ T9095] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 93.168571][ T9121] __nla_validate_parse: 5 callbacks suppressed [ 93.168585][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 93.176719][ C3] vcan0: j1939_xtp_rx_dat: no tx connection found [ 93.179939][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.183326][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.186547][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.189844][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.193207][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.196496][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.199736][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.203086][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.206327][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.209646][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.213007][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.216282][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.219487][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.222924][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.226168][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.229548][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.232994][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.236241][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.239496][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.242897][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.246220][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.249506][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.252842][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.256198][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.259438][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.262811][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.266036][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.269285][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.272729][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.276039][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.279328][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.282693][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.285945][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.289208][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.292495][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.295847][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.299085][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.302541][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.305787][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.309077][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.312431][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.315645][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.318944][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.322418][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.325684][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.329037][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.332337][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.335657][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.338874][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.342263][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.345523][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.348836][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.352139][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.355421][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.358712][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.362149][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.365407][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.368671][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.371961][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.375257][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.378546][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.381950][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.385172][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.388431][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.391765][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.395065][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.398284][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.401687][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.404933][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.408222][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.411596][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.414887][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 93.418097][ C3] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.462833][ T9134] netlink: 'syz.3.669': attribute type 5 has an invalid length. [ 93.580144][ T9157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9157 comm=syz.2.673 [ 93.646379][ T9160] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 93.684318][ T9160] syz.2.674 (9160) used greatest stack depth: 17752 bytes left [ 93.740157][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 93.845481][ T9184] netlink: 'syz.1.679': attribute type 1 has an invalid length. [ 93.879491][ T9184] bond2: (slave geneve2): making interface the new active one [ 93.883980][ T9184] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 94.221576][ T6007] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.226903][ T9264] netlink: 'syz.1.689': attribute type 29 has an invalid length. [ 94.231904][ T9264] netlink: 'syz.1.689': attribute type 29 has an invalid length. [ 94.394546][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.399463][ T6007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.404026][ T6007] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.409309][ T6007] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.413858][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.419602][ T6007] usb 5-1: config 0 descriptor?? [ 94.838285][ T9243] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 94.840543][ T9243] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.843323][ T9243] vhci_hcd vhci_hcd.0: Device attached [ 94.847738][ T9274] vhci_hcd: connection closed [ 94.852327][ T6718] vhci_hcd: stop threads [ 94.852537][ T6007] usbhid 5-1:0.0: can't add hid device: -71 [ 94.854733][ T6718] vhci_hcd: release socket [ 94.855971][ T6007] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 94.858477][ T6718] vhci_hcd: disconnect device [ 94.864550][ T6007] usb 5-1: USB disconnect, device number 6 [ 95.209131][ T9267] IPVS: Unknown mcast interface: dv_slave_0 [ 95.331967][ T9326] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.461003][ T9345] veth0: entered promiscuous mode [ 95.464401][ T9343] veth0: left promiscuous mode [ 95.662892][ T9373] vlan4: entered allmulticast mode [ 95.666842][ T9373] bond0: entered allmulticast mode [ 95.668501][ T9373] bond_slave_0: entered allmulticast mode [ 95.670320][ T9373] bond_slave_1: entered allmulticast mode [ 95.678338][ T9373] batadv0: entered allmulticast mode [ 95.696259][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 95.696269][ T40] audit: type=1400 audit(2000000014.089:538): avc: denied { ioctl } for pid=9364 comm="syz.1.698" path="socket:[26809]" dev="sockfs" ino=26809 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.769586][ T40] audit: type=1400 audit(2000000014.159:539): avc: denied { transfer } for pid=9392 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.771437][ T9393] binder: 9392:9393 ioctl c0189377 200000000180 returned -22 [ 95.778781][ T9393] binder: 9392:9393 ioctl c020f509 200000000240 returned -22 [ 95.870570][ T40] audit: type=1400 audit(2000000014.259:540): avc: denied { name_bind } for pid=9392 comm="syz.3.703" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 95.881797][ T9393] dvmrp17: entered allmulticast mode [ 95.883817][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 95.887625][ T9393] dvmrp17: left allmulticast mode [ 95.941107][ T6549] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.101001][ T6549] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 96.104579][ T6549] usb 6-1: config 1 has no interface number 0 [ 96.107420][ T6549] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 96.111899][ T6549] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 96.124176][ T6549] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 96.128267][ T6549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.133954][ T6549] usb 6-1: Product: syz [ 96.135863][ T6549] usb 6-1: Manufacturer: syz [ 96.137893][ T6549] usb 6-1: SerialNumber: syz [ 96.147937][ T9365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.150452][ T9365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.164692][ T6549] usb 6-1: Error in usbnet_get_endpoints (-22) [ 96.190323][ T40] audit: type=1400 audit(2000000014.579:541): avc: denied { execute } for pid=9444 comm="syz.3.708" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 96.361643][ T6549] usb 6-1: USB disconnect, device number 11 [ 96.502511][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 96.505518][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 96.532461][ T9491] bad cache= option: none [ 96.532461][ T9491] [ 96.534775][ T9491] CIFS: VFS: bad cache= option: none [ 96.565277][ T9499] netlink: 'syz.2.717': attribute type 7 has an invalid length. [ 96.569878][ T40] audit: type=1400 audit(2000000014.959:542): avc: denied { watch watch_reads } for pid=9498 comm="syz.2.717" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.645430][ T40] audit: type=1400 audit(2000000015.029:543): avc: denied { read write } for pid=9511 comm="syz.2.721" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 96.646317][ T6014] hid-generic 0362:07FF:7FFFFFFF.0003: item fetching failed at offset 0/2 [ 96.659466][ T9515] SELinux: policydb magic number 0xf97cff81 does not match expected magic number 0xf97cff8c [ 96.662858][ T9515] SELinux: failed to load policy [ 96.667286][ T6014] hid-generic 0362:07FF:7FFFFFFF.0003: probe with driver hid-generic failed with error -22 [ 96.670646][ T40] audit: type=1400 audit(2000000015.029:544): avc: denied { open } for pid=9511 comm="syz.2.721" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 96.680131][ T9520] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 96.685012][ T40] audit: type=1400 audit(2000000015.039:545): avc: denied { setattr } for pid=9512 comm="syz.3.722" name="KCM" dev="sockfs" ino=23972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.763849][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 96.767488][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 96.770781][ T9569] netlink: 'syz.2.724': attribute type 7 has an invalid length. [ 96.810952][ T9378] comedi comedi2: reset error (fatal) [ 97.025414][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.734'. [ 97.029195][ T9607] openvswitch: netlink: Flow key attr not present in new flow. [ 97.039495][ T40] audit: type=1400 audit(2000000015.429:546): avc: denied { connect } for pid=9605 comm="syz.3.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.044412][ T9607] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 97.056236][ T9607] cramfs: wrong magic [ 97.321049][ T2198] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 97.501006][ T2198] usb 7-1: Using ep0 maxpacket: 16 [ 97.504397][ T2198] usb 7-1: config 8 has an invalid interface number: 86 but max is 1 [ 97.507092][ T2198] usb 7-1: config 8 has an invalid interface number: 31 but max is 1 [ 97.509715][ T2198] usb 7-1: config 8 has no interface number 0 [ 97.512248][ T2198] usb 7-1: config 8 has no interface number 1 [ 97.514331][ T2198] usb 7-1: config 8 interface 86 altsetting 250 endpoint 0x4 has an invalid bInterval 41, changing to 7 [ 97.517902][ T2198] usb 7-1: config 8 interface 86 altsetting 250 has a duplicate endpoint with address 0x4, skipping [ 97.521660][ T2198] usb 7-1: config 8 interface 86 altsetting 250 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 97.525192][ T2198] usb 7-1: config 8 interface 86 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 97.528831][ T2198] usb 7-1: config 8 interface 31 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 97.532402][ T2198] usb 7-1: config 8 interface 31 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 97.535816][ T2198] usb 7-1: config 8 interface 31 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 97.539430][ T2198] usb 7-1: config 8 interface 31 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 97.542993][ T2198] usb 7-1: config 8 interface 31 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 97.546518][ T2198] usb 7-1: config 8 interface 31 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 97.550336][ T2198] usb 7-1: config 8 interface 31 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 97.553988][ T2198] usb 7-1: config 8 interface 86 has no altsetting 0 [ 97.556162][ T2198] usb 7-1: config 8 interface 31 has no altsetting 0 [ 97.560034][ T2198] usb 7-1: Dual-Role OTG device on HNP port [ 97.562451][ T2198] usb 7-1: New USB device found, idVendor=04e8, idProduct=2018, bcdDevice= b.d1 [ 97.565390][ T2198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.568542][ T2198] usb 7-1: Product: syz [ 97.570095][ T2198] usb 7-1: Manufacturer: syz [ 97.571738][ T2198] usb 7-1: SerialNumber: syz [ 97.640478][ T9638] sp0: Synchronizing with TNC [ 97.679361][ T9637] [U] è` [ 97.779746][ T40] audit: type=1400 audit(2000000016.169:547): avc: denied { setattr } for pid=9611 comm="syz.2.735" name="dsp1" dev="devtmpfs" ino=1322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 97.801071][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 97.819461][ T2198] usb 7-1: bad CDC descriptors [ 97.824823][ T2198] usb 7-1: USB disconnect, device number 5 [ 97.988689][ T9688] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 98.014890][ T9688] bond7: entered promiscuous mode [ 98.016964][ T9688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 98.023455][ T9688] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 98.439601][ T9901] dlm: non-version read from control device 0 [ 98.500389][ T9909] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 98.503260][ T9909] overlayfs: failed to set xattr on upper [ 98.505062][ T9909] overlayfs: ...falling back to redirect_dir=nofollow. [ 98.507164][ T9909] overlayfs: ...falling back to index=off. [ 98.508982][ T9909] overlayfs: ...falling back to uuid=null. [ 98.513810][ T9909] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 98.546838][ T9913] netlink: 64 bytes leftover after parsing attributes in process `syz.2.756'. [ 98.698016][ T9996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9996 comm=syz.3.761 [ 98.707514][ T9998] 9pnet_fd: Insufficient options for proto=fd [ 98.747624][T10001] netlink: 14 bytes leftover after parsing attributes in process `syz.1.762'. [ 98.816197][T10001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.819361][T10001] bond_slave_0: left allmulticast mode [ 98.823783][T10001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.827242][T10001] bond_slave_1: left allmulticast mode [ 98.832934][T10001] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 98.835741][T10001] batadv0: left allmulticast mode [ 98.840181][T10001] bond0 (unregistering): Released all slaves [ 98.924787][T10064] netlink: 'syz.3.764': attribute type 15 has an invalid length. [ 98.956170][T10068] syz.1.765 (10068): /proc/10067/oom_adj is deprecated, please use /proc/10067/oom_score_adj instead. [ 99.180200][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.772'. [ 99.183088][T10110] Invalid source name [ 99.183099][T10110] UBIFS error (pid: 10110): cannot open "./file0", error -22 [ 99.186776][T10110] netlink: zone id is out of range [ 99.191148][T10110] netlink: zone id is out of range [ 99.193540][T10110] netlink: zone id is out of range [ 99.195487][T10110] netlink: zone id is out of range [ 99.203257][T10110] netlink: zone id is out of range [ 99.205320][T10110] netlink: zone id is out of range [ 99.213329][T10110] netlink: set zone limit has 4 unknown bytes [ 99.256767][T10128] block nbd3: Attempted send on invalid socket [ 99.259279][T10128] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.264229][T10128] vxfs: unable to read disk superblock at 1 [ 99.266636][T10128] block nbd3: Attempted send on invalid socket [ 99.268785][T10128] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 99.272895][T10128] vxfs: unable to read disk superblock at 8 [ 99.275469][T10128] vxfs: can't find superblock. [ 99.290561][T10128] binder: Unknown parameter 'fowner<00000000000000000000' [ 99.303849][T10128] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.358075][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'. [ 99.360901][T10174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.780'. [ 99.459679][T10191] ptrace attach of "/syz-executor exec"[5973] was attempted by ""[10191] [ 99.490763][T10197] netlink: ct family unspecified [ 99.492615][T10197] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.496745][T10198] 9pnet_fd: Insufficient options for proto=fd [ 99.537246][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'. [ 99.720414][T10231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 99.725059][T10231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 99.729322][T10231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.825659][T10231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 99.829877][T10231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 99.834188][T10231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.912547][T10231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 99.915767][T10231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 99.918922][T10231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.016366][T10231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 100.019999][T10231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 100.023617][T10231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.245368][ T6729] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.248772][ T6729] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 100.252445][ T6729] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.264085][ T6729] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.266769][ T6729] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 100.269578][ T6729] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.281561][ T6729] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.285988][ T6729] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 100.289532][ T6729] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.302258][ T6733] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.305299][ T6733] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 100.307881][ T6733] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.347046][T10254] rpc_pipefs: Unknown parameter '^iscard' [ 100.722322][T10295] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 100.778465][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 100.989210][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 101.023219][T10350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=10350 comm=syz.0.813 [ 101.067755][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 101.171251][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 101.171264][ T40] audit: type=1400 audit(2000000019.559:566): avc: denied { execute } for pid=10361 comm="syz.0.817" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.216314][T10365] program syz.3.818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.228000][ T40] audit: type=1400 audit(2000000019.619:567): avc: denied { execute } for pid=10372 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.238682][ T40] audit: type=1400 audit(2000000019.619:568): avc: denied { execute_no_trans } for pid=10372 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 101.255020][T10374] GUP no longer grows the stack in syz.0.820 (10374): 200000007000-20000000a000 (200000004000) [ 101.258471][T10374] CPU: 3 UID: 0 PID: 10374 Comm: syz.0.820 Not tainted syzkaller #0 PREEMPT(full) [ 101.258486][T10374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.258493][T10374] Call Trace: [ 101.258497][T10374] [ 101.258502][T10374] dump_stack_lvl+0x16c/0x1f0 [ 101.258531][T10374] gup_vma_lookup+0x1d2/0x220 [ 101.258557][T10374] __get_user_pages+0x243/0x34a0 [ 101.258576][T10374] ? xsk_setsockopt+0x6db/0x9a0 [ 101.258586][T10374] ? do_sock_setsockopt+0xf0/0x1d0 [ 101.258602][T10374] ? __sys_setsockopt+0x1a0/0x230 [ 101.258614][T10374] ? __x64_sys_setsockopt+0xbd/0x160 [ 101.258627][T10374] ? __pfx___get_user_pages+0x10/0x10 [ 101.258647][T10374] __gup_longterm_locked+0x2dd/0x17e0 [ 101.258663][T10374] ? __lock_acquire+0xb80/0x1ce0 [ 101.258684][T10374] ? __pfx___gup_longterm_locked+0x10/0x10 [ 101.258706][T10374] pin_user_pages+0x13c/0x160 [ 101.258721][T10374] ? __pfx_pin_user_pages+0x10/0x10 [ 101.258738][T10374] ? xdp_umem_create+0x652/0x1270 [ 101.258753][T10374] xdp_umem_create+0x73c/0x1270 [ 101.258768][T10374] xsk_setsockopt+0x6db/0x9a0 [ 101.258780][T10374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.258790][T10374] ? find_held_lock+0x2b/0x80 [ 101.258805][T10374] ? selinux_socket_setsockopt+0x6a/0x80 [ 101.258821][T10374] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.258832][T10374] do_sock_setsockopt+0xf0/0x1d0 [ 101.258849][T10374] __sys_setsockopt+0x1a0/0x230 [ 101.258864][T10374] __x64_sys_setsockopt+0xbd/0x160 [ 101.258875][T10374] ? do_syscall_64+0x91/0x4e0 [ 101.258893][T10374] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.258907][T10374] do_syscall_64+0xcd/0x4e0 [ 101.258922][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.258933][T10374] RIP: 0033:0x7f338578eec9 [ 101.258942][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.258953][T10374] RSP: 002b:00007f33866d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.258967][T10374] RAX: ffffffffffffffda RBX: 00007f33859e5fa0 RCX: 00007f338578eec9 [ 101.258973][T10374] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 101.258980][T10374] RBP: 00007f3385811f91 R08: 0000000000000020 R09: 0000000000000000 [ 101.258986][T10374] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 101.258992][T10374] R13: 00007f33859e6038 R14: 00007f33859e5fa0 R15: 00007ffc0f676a58 [ 101.259005][T10374] [ 101.360923][ C3] vkms_vblank_simulate: vblank timer overrun [ 101.368631][T10374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 101.386606][ T5971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.392077][ T5971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.394911][ T5971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.398108][ T5971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.401169][ T5971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.416427][ T5331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.418787][ T5331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.421503][ T5331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.424171][ T5331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.427251][ T5331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.469089][T10428] fuse: Bad value for 'fd' [ 101.491034][ T60] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 101.565483][T10378] chnl_net:caif_netlink_parms(): no params data found [ 101.650792][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.652447][ T60] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 101.656297][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.656560][ T60] usb 8-1: config 128 has no interfaces? [ 101.659032][T10378] bridge_slave_0: entered allmulticast mode [ 101.662329][ T60] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 101.663758][T10378] bridge_slave_0: entered promiscuous mode [ 101.665335][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.668510][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.670088][ T60] usb 8-1: Product: syz [ 101.672443][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.672541][T10378] bridge_slave_1: entered allmulticast mode [ 101.675525][ T60] usb 8-1: Manufacturer: syz [ 101.676721][T10378] bridge_slave_1: entered promiscuous mode [ 101.677636][ T60] usb 8-1: SerialNumber: syz [ 101.732274][T10378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.736641][T10378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.774138][T10378] team0: Port device team_slave_0 added [ 101.777500][T10378] team0: Port device team_slave_1 added [ 101.812045][T10378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.814287][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.822920][T10378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.827198][T10378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.829409][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.837399][T10378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.880230][T10378] hsr_slave_0: entered promiscuous mode [ 101.882574][T10378] hsr_slave_1: entered promiscuous mode [ 101.884713][T10378] debugfs: 'hsr0' already exists in 'hsr' [ 101.886890][T10378] Cannot create hsr debugfs directory [ 101.967601][ T6549] usb 8-1: USB disconnect, device number 9 [ 102.247016][T10444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.253606][T10378] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.258314][T10378] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.268097][T10378] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.281189][T10378] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.302820][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.305025][ T40] audit: type=1400 audit(2000000020.699:569): avc: denied { ioctl } for pid=11443 comm="syz.0.827" path="socket:[27338]" dev="sockfs" ino=27338 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.305185][T10378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.316014][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.318296][T10378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.378215][T10378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.387130][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.391874][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.407716][T10378] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.415380][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.418304][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.427741][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.430583][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.484333][T10378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.596397][T11472] syzkaller1: entered promiscuous mode [ 102.598512][T11472] syzkaller1: entered allmulticast mode [ 102.604119][T10378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.711406][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 102.769011][T10378] veth0_vlan: entered promiscuous mode [ 102.776457][T10378] veth1_vlan: entered promiscuous mode [ 102.794209][T10378] veth0_macvtap: entered promiscuous mode [ 102.798857][T10378] veth1_macvtap: entered promiscuous mode [ 102.808751][T10378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.816731][T10378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.835735][ T6733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.839652][ T6733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.843713][ T6733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.846487][ T6733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.879731][ T60] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.883832][ T40] audit: type=1804 audit(2000000021.279:570): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.834" name="/newroot/182/file0" dev="tmpfs" ino=975 res=1 errno=0 [ 102.884177][ T60] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 102.890729][ T40] audit: type=1800 audit(2000000021.279:571): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.834" name="file0" dev="tmpfs" ino=975 res=0 errno=0 [ 102.892082][ T6733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.894812][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.902586][ T6733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.904887][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 102.913972][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 102.919494][ T60] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.924092][ T60] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.924234][ T6733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.926564][ T60] usb 5-1: Product: syz [ 102.929733][ T6733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.933956][ T60] usb 5-1: Manufacturer: syz [ 102.935773][ T40] audit: type=1400 audit(2000000021.329:572): avc: denied { mounton } for pid=10378 comm="syz-executor" path="/syzkaller.gMN5U7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 102.948910][ T40] audit: type=1400 audit(2000000021.339:573): avc: denied { mounton } for pid=10378 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 102.953273][ T60] cdc_wdm 5-1:1.0: skipping garbage [ 102.961155][ T60] cdc_wdm 5-1:1.0: skipping garbage [ 102.963617][ T60] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 102.965426][ T60] cdc_wdm 5-1:1.0: Unknown control protocol [ 103.042466][T11532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=11532 comm=syz.1.836 [ 103.049672][T11532] gretap0: entered allmulticast mode [ 103.055577][T11531] gretap0: left allmulticast mode [ 103.080125][ T40] audit: type=1400 audit(2000000021.469:574): avc: denied { mount } for pid=11534 comm="syz.1.837" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 103.087732][ T40] audit: type=1400 audit(2000000021.469:575): avc: denied { search } for pid=11534 comm="syz.1.837" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 103.148558][ C0] wdm_int_callback: 953 callbacks suppressed [ 103.148583][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 103.150526][ T839] usb 5-1: USB disconnect, device number 7 [ 103.151111][ C0] wdm_int_callback: 953 callbacks suppressed [ 103.151128][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 103.151147][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 103.364707][T11457] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 103.378012][T11457] cramfs: wrong magic [ 103.492566][T11611] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.496072][T11611] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 103.502259][ T5971] Bluetooth: hci0: command tx timeout [ 103.619661][T11627] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 103.654914][T11631] __nla_validate_parse: 8 callbacks suppressed [ 103.654924][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.847'. [ 103.696857][T11635] netlink: 72 bytes leftover after parsing attributes in process `syz.3.849'. [ 103.795865][T11656] netlink: 44 bytes leftover after parsing attributes in process `syz.1.852'. [ 103.838327][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 103.873574][T11671] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 103.942194][T11682] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.945184][T11682] MINIX-fs: unable to read superblock [ 103.945489][T11683] geneve3: entered promiscuous mode [ 103.948906][T11683] geneve3: entered allmulticast mode [ 103.958519][ T6728] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.961112][T11682] block nbd3: Attempted send on invalid socket [ 103.961496][ T6728] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.963369][T11682] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 103.966058][ T6728] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.966078][ T6728] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.970003][T11682] exFAT-fs (nbd3): unable to read boot sector [ 103.978889][T11682] exFAT-fs (nbd3): failed to read boot sector [ 103.980798][T11682] exFAT-fs (nbd3): failed to recognize exfat type [ 104.001366][ T839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 104.153825][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.156853][ T839] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 104.159630][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.164052][ T839] usb 9-1: config 0 descriptor?? [ 104.167632][ T839] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 104.204328][T11698] syzkaller1: entered promiscuous mode [ 104.206110][T11698] syzkaller1: entered allmulticast mode [ 104.381872][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 105.416372][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 105.458983][T11822] ata1.00: invalid cdb length 6 [ 105.578184][T11844] bridge0: entered promiscuous mode [ 105.580002][T11844] bridge0: entered allmulticast mode [ 105.581603][ T5971] Bluetooth: hci0: command tx timeout [ 105.705359][T11858] can0: slcan on ttyS3. [ 105.771872][ T839] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 105.933184][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.936294][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.940654][ T839] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.945691][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.950267][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.955016][ T6014] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 105.959636][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.963088][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.967158][ T839] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.972227][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.976502][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 105.982000][ T839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 105.985694][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.990031][ T839] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.995055][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 105.999446][ T839] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 106.006434][ T839] usb 5-1: string descriptor 0 read error: -22 [ 106.009117][ T839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 106.013073][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.019993][ T839] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 106.101107][ T6014] usb 8-1: Using ep0 maxpacket: 16 [ 106.104342][ T6014] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.108005][ T6014] usb 8-1: config 0 has no interfaces? [ 106.110879][ T6014] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 106.114261][ T6014] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 106.116767][ T6014] usb 8-1: Product: syz [ 106.118160][ T6014] usb 8-1: SerialNumber: syz [ 106.124230][ T6014] usb 8-1: config 0 descriptor?? [ 106.222122][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'. [ 106.224866][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.887'. [ 106.232818][ T60] usb 5-1: USB disconnect, device number 8 [ 106.234537][T11881] geneve4: entered promiscuous mode [ 106.236332][T11881] geneve4: entered allmulticast mode [ 106.273011][T11894] fuse: Unknown parameter 'rootmode00000000' [ 106.307535][T11898] netlink: 'syz.1.889': attribute type 21 has an invalid length. [ 106.310635][T11898] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.328060][T11858] tmpfs: Bad value for 'mpol' [ 106.329782][T11858] program syz.3.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.403083][T11858] can0 (unregistered): slcan off ttyS3. [ 106.407292][ T6014] usb 8-1: USB disconnect, device number 10 [ 106.516384][ T839] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 106.522976][ T839] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 106.553429][T11931] fido_id[11931]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci0/hci0:200/report_descriptor': No such file or directory [ 106.566407][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 106.566417][ T40] audit: type=1400 audit(2000000024.959:610): avc: denied { nlmsg_read } for pid=11938 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.714672][ T6014] usb 9-1: USB disconnect, device number 2 [ 106.757938][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 106.784039][T11972] can0: slcan on ttyS3. [ 106.950052][ T40] audit: type=1400 audit(2000000025.339:611): avc: denied { accept } for pid=12013 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.021126][ T9026] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 107.064288][T12014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.904'. [ 107.105451][ T40] audit: type=1400 audit(2000000025.499:612): avc: denied { watch_sb } for pid=12026 comm="syz.3.906" path="/274/bus" dev="tmpfs" ino=1495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.117294][ T40] audit: type=1400 audit(2000000025.499:613): avc: denied { audit_control } for pid=12012 comm="syz.4.904" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 107.170969][ T9026] usb 6-1: Using ep0 maxpacket: 32 [ 107.174314][ T9026] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.177180][ T9026] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.179970][ T9026] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.183115][ T9026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.186220][ T9026] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.189488][ T9026] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.193813][ T9026] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.196693][ T9026] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.201086][ T9026] usb 6-1: config 0 descriptor?? [ 107.405633][ T9026] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.411913][ T9026] usb 6-1: USB disconnect, device number 12 [ 107.416314][ T9026] usblp0: removed [ 107.439602][ T40] audit: type=1400 audit(2000000025.829:614): avc: denied { create } for pid=12060 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 107.448909][T12063] sctp: [Deprecated]: syz.3.909 (pid 12063) Use of int in maxseg socket option. [ 107.448909][T12063] Use struct sctp_assoc_value instead [ 107.454878][ T40] audit: type=1400 audit(2000000025.849:615): avc: denied { create } for pid=12046 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.461411][ T40] audit: type=1400 audit(2000000025.849:616): avc: denied { ioctl } for pid=12046 comm="syz.3.909" path="socket:[30047]" dev="sockfs" ino=30047 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 107.497054][ T40] audit: type=1400 audit(2000000025.889:617): avc: denied { mount } for pid=12067 comm="syz.4.912" name="/" dev="hugetlbfs" ino=29256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 107.661306][ T5971] Bluetooth: hci0: command tx timeout [ 107.671740][T12085] can0 (unregistered): slcan off ttyS3. [ 107.675880][T12085] netlink: 'syz.4.914': attribute type 29 has an invalid length. [ 107.678731][T12085] netlink: 'syz.4.914': attribute type 29 has an invalid length. [ 107.800200][T12115] netem: incorrect ge model size [ 107.804195][T12115] netem: change failed [ 107.842688][ T839] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 107.919750][T12137] netlink: 'syz.4.922': attribute type 10 has an invalid length. [ 107.934149][T12137] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.986750][T12137] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 107.990987][ T839] usb 6-1: Using ep0 maxpacket: 32 [ 107.995187][ T839] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.998462][ T839] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 108.001465][ T839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 108.004249][ T839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 108.007234][ T839] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 108.010244][ T839] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 108.014708][ T839] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 108.018035][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.031865][ T839] usb 6-1: config 0 descriptor?? [ 108.106400][T12168] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 108.107222][T12163] kvm: MONITOR instruction emulated as NOP! [ 108.116069][T12168] CIFS: Unable to determine destination address [ 108.237835][ T839] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.288265][T12183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12183 comm=syz.3.932 [ 108.436685][ T40] audit: type=1400 audit(2000000026.829:618): avc: denied { read write } for pid=11971 comm="syz.1.898" name="lp0" dev="devtmpfs" ino=3243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 108.443962][ T40] audit: type=1400 audit(2000000026.829:619): avc: denied { open } for pid=11971 comm="syz.1.898" path="/dev/usb/lp0" dev="devtmpfs" ino=3243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 108.446686][ T6014] usb 6-1: USB disconnect, device number 13 [ 108.454694][ T6014] usblp0: removed [ 108.941070][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 108.945553][T12214] xfs: Unknown parameter 'grpquota' [ 108.975510][T12171] 9pnet_fd: p9_fd_create_tcp (12171): problem connecting socket to 127.0.0.1 [ 109.099808][T12241] hugetlbfs: Bad value 'e' for mount option 'size' [ 109.099808][T12241] [ 109.610210][T12261] macvlan2: entered promiscuous mode [ 109.611993][T12261] macvlan2: entered allmulticast mode [ 109.614503][T12261] veth1_vlan: entered allmulticast mode [ 109.618230][T12261] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 109.741508][ T5971] Bluetooth: hci0: command tx timeout [ 110.211538][T12332] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 110.214077][T12332] netlink: 'syz.3.962': attribute type 3 has an invalid length. [ 110.216450][T12332] netlink: 'syz.3.962': attribute type 3 has an invalid length. [ 110.253859][T12336] dlm: no locking on control device [ 110.282932][ T6014] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.412323][ T6014] usb 5-1: device descriptor read/64, error -71 [ 110.493767][T12374] fuseblk: Bad value for 'fd' [ 110.651171][ T6014] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 110.781252][ T6014] usb 5-1: device descriptor read/64, error -71 [ 110.891591][ T6014] usb usb5-port1: attempt power cycle [ 111.091907][T12396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9611 sclass=netlink_route_socket pid=12396 comm=syz.1.973 [ 111.234114][ T6014] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 111.261781][ T6014] usb 5-1: device descriptor read/8, error -71 [ 111.493182][T12425] bond0: (slave nr0): Error: Device can not be enslaved while up [ 111.500089][T12425] bridge_slave_0: left allmulticast mode [ 111.502536][T12425] bridge_slave_0: left promiscuous mode [ 111.502975][ T6014] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 111.504485][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.513013][T12425] bridge_slave_1: left allmulticast mode [ 111.514817][T12425] bridge_slave_1: left promiscuous mode [ 111.516906][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.524132][ T6014] usb 5-1: device descriptor read/8, error -71 [ 111.529556][T12425] team0: Port device team_slave_0 removed [ 111.536084][T12425] team0: Port device team_slave_1 removed [ 111.538284][T12425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.540754][T12425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.544418][ T2198] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 111.550987][T12427] __nla_validate_parse: 3 callbacks suppressed [ 111.550996][T12427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.979'. [ 111.556250][T12425] bond2: (slave geneve2): Releasing active interface [ 111.556324][T12427] syz.1.979: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.563693][T12427] CPU: 1 UID: 0 PID: 12427 Comm: syz.1.979 Not tainted syzkaller #0 PREEMPT(full) [ 111.563709][T12427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.563716][T12427] Call Trace: [ 111.563720][T12427] [ 111.563725][T12427] dump_stack_lvl+0x16c/0x1f0 [ 111.563763][T12427] warn_alloc+0x248/0x3a0 [ 111.563785][T12427] ? __pfx_warn_alloc+0x10/0x10 [ 111.563796][T12427] ? __pfx_stack_trace_save+0x10/0x10 [ 111.563818][T12427] ? kasan_save_stack+0x42/0x60 [ 111.563828][T12427] ? kasan_save_stack+0x33/0x60 [ 111.563839][T12427] ? kasan_save_track+0x14/0x30 [ 111.563850][T12427] ? xskq_create+0x52/0x1d0 [ 111.563862][T12427] ? xsk_setsockopt+0x792/0x9a0 [ 111.563872][T12427] ? do_sock_setsockopt+0xf0/0x1d0 [ 111.563889][T12427] ? xskq_create+0xfb/0x1d0 [ 111.563900][T12427] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 111.563921][T12427] ? xskq_create+0xfb/0x1d0 [ 111.563935][T12427] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.563956][T12427] ? xskq_create+0xfb/0x1d0 [ 111.563967][T12427] vmalloc_user_noprof+0x9e/0xe0 [ 111.563982][T12427] ? xskq_create+0xfb/0x1d0 [ 111.563993][T12427] xskq_create+0xfb/0x1d0 [ 111.564006][T12427] xsk_setsockopt+0x792/0x9a0 [ 111.564017][T12427] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.564027][T12427] ? find_held_lock+0x2b/0x80 [ 111.564043][T12427] ? selinux_socket_setsockopt+0x6a/0x80 [ 111.564058][T12427] ? __pfx_xsk_setsockopt+0x10/0x10 [ 111.564069][T12427] do_sock_setsockopt+0xf0/0x1d0 [ 111.564086][T12427] __sys_setsockopt+0x1a0/0x230 [ 111.564101][T12427] __x64_sys_setsockopt+0xbd/0x160 [ 111.564113][T12427] ? do_syscall_64+0x91/0x4e0 [ 111.564131][T12427] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.564145][T12427] do_syscall_64+0xcd/0x4e0 [ 111.564160][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.564176][T12427] RIP: 0033:0x7ff36bb8eec9 [ 111.564186][T12427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.564198][T12427] RSP: 002b:00007ff369df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.564209][T12427] RAX: ffffffffffffffda RBX: 00007ff36bde6090 RCX: 00007ff36bb8eec9 [ 111.564216][T12427] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 111.564223][T12427] RBP: 00007ff36bc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 111.564230][T12427] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 111.564237][T12427] R13: 00007ff36bde6128 R14: 00007ff36bde6090 R15: 00007fff664ba1d8 [ 111.564251][T12427] [ 111.564256][T12427] Mem-Info: [ 111.611171][T12425] team0: Mode changed to "activebackup" [ 111.612265][T12427] active_anon:14122 inactive_anon:47 isolated_anon:0 [ 111.612265][T12427] active_file:5630 inactive_file:43081 isolated_file:0 [ 111.612265][T12427] unevictable:2792 dirty:78 writeback:0 [ 111.612265][T12427] slab_reclaimable:9239 slab_unreclaimable:75681 [ 111.612265][T12427] mapped:24879 shmem:3447 pagetables:1550 [ 111.612265][T12427] sec_pagetables:312 bounce:0 [ 111.612265][T12427] kernel_misc_reclaimable:0 [ 111.612265][T12427] free:446735 free_pcp:18561 free_cma:0 [ 111.631336][ T6014] usb usb5-port1: unable to enumerate USB device [ 111.632937][T12427] Node 0 active_anon:56488kB inactive_anon:188kB active_file:22512kB inactive_file:172120kB unevictable:7632kB isolated(anon):0kB isolated(file):0kB mapped:99508kB dirty:296kB writeback:0kB shmem:10252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:14736kB pagetables:5972kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 111.683540][T12427] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.691928][ T2198] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 111.694533][T12427] Node 0 DMA free:15104kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:256kB local_pcp:104kB free_cma:0kB [ 111.698020][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.706422][T12427] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 111.709779][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.711567][T12427] Node 0 DMA32 free:174244kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56400kB inactive_anon:188kB active_file:22512kB inactive_file:172120kB unevictable:7632kB writepending:296kB present:2080628kB managed:1263416kB mlocked:0kB bounce:0kB free_pcp:46160kB local_pcp:12684kB free_cma:0kB [ 111.711604][T12427] lowmem_reserve[]: 0 [ 111.715200][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.724575][T12427] 0 0 0 0 [ 111.724596][T12427] Node 1 Normal free:1597700kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:3536kB writepending:16kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:27804kB local_pcp:10916kB free_cma:0kB [ 111.724630][T12427] lowmem_reserve[]: 0 0 0 0 0 [ 111.724675][T12427] Node 0 DMA: 6*4kB (U) 11*8kB (UM) 7*16kB (UM) 7*32kB (U) 7*64kB (U) 5*128kB (UM) 7*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 0*4096kB = 15104kB [ 111.724851][T12427] Node 0 DMA32: 689*4kB (UM) 304*8kB (UME) 174*16kB (UME) 172*32kB (UME) 210*64kB (UME) 101*128kB (UME) 85*256kB (UME) 94*512kB (UM) 25*1024kB (UM) 7*2048kB (UM) 6*4096kB (UM) = 174244kB [ 111.724948][T12427] Node 1 Normal: 47*4kB (UME) 67*8kB (UME) 75*16kB (UME) 190*32kB [ 111.726731][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.729397][T12427] (UME) 87*64kB [ 111.731628][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.740846][T12427] (UME) [ 111.742564][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.747601][T12427] 50*128kB (UME) 35*256kB (UM) 32*512kB (UME) 14*1024kB (UM) 9*2048kB (UME) 371*4096kB (UM) [ 111.756096][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.757526][T12427] = 1597700kB [ 111.757535][T12427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.760266][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.761660][T12427] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 111.765743][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.765786][T12427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.768459][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.771986][T12427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 111.771999][T12427] 52124 total pagecache pages [ 111.772003][T12427] 0 pages in swap cache [ 111.776010][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.776281][T12427] Free swap = 124996kB [ 111.776288][T12427] Total swap = 124996kB [ 111.776294][T12427] 1048443 pages RAM [ 111.776298][T12427] 0 pages HighMem/MovableOnly [ 111.776302][T12427] 283276 pages reserved [ 111.776306][T12427] 0 pages cma reserved [ 111.816713][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.819927][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.825338][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.829132][ T2198] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.833224][ T2198] usb 8-1: config 0 interface 0 has no altsetting 0 [ 111.837714][ T2198] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 111.841983][ T2198] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 111.845390][ T2198] usb 8-1: Product: syz [ 111.847098][ T2198] usb 8-1: Manufacturer: syz [ 111.849043][ T2198] usb 8-1: SerialNumber: syz [ 111.854411][ T2198] usb 8-1: config 0 descriptor?? [ 111.860337][ T2198] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.059813][ T6014] usb 8-1: USB disconnect, device number 11 [ 112.065968][ T6014] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 112.303055][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 112.329202][T12477] tmpfs: Unknown parameter 'usrquota_blocÁ' [ 112.404301][T12491] Bluetooth: MGMT ver 1.23 [ 112.431999][T12496] netlink: 208 bytes leftover after parsing attributes in process `syz.1.992'. [ 112.598639][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 112.650094][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 112.650111][ T40] audit: type=1400 audit(2000000031.039:632): avc: denied { mount } for pid=12557 comm="syz.4.999" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.665603][ T40] audit: type=1400 audit(2000000031.049:633): avc: denied { unmount } for pid=10378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 112.747946][T12572] loop9: detected capacity change from 0 to 8 [ 112.753487][ T6311] Dev loop9: unable to read RDB block 8 [ 112.755283][ T6311] loop9: unable to read partition table [ 112.757157][ T6311] loop9: partition table beyond EOD, truncated [ 112.761825][T12572] Dev loop9: unable to read RDB block 8 [ 112.764195][T12572] loop9: unable to read partition table [ 112.766907][T12572] loop9: partition table beyond EOD, truncated [ 112.769572][T12572] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5) [ 113.069047][T12631] ceph: No source [ 113.070139][T12629] ceph: No source [ 113.215994][ T40] audit: type=1400 audit(2000000031.609:634): avc: denied { write } for pid=12642 comm="syz.4.1011" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 113.631088][ T7454] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 113.783139][ T7454] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.786434][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.790803][ T7454] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.796202][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.800309][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.805997][ T7454] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.809651][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.813814][ T7454] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.817662][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.821806][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.827147][ T7454] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 113.829672][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 113.833799][ T7454] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.837529][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.842079][ T7454] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.849214][ T7454] usb 5-1: string descriptor 0 read error: -22 [ 113.852050][ T7454] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.855637][ T7454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.866468][ T7454] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 113.873898][T12697] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1020'. [ 113.878221][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 114.091524][ T10] usb 5-1: USB disconnect, device number 13 [ 114.096523][T12718] ================================================================== [ 114.096535][T12718] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 114.096566][T12718] Write of size 8 at addr ffffc90005331000 by task syz.1.1023/12718 [ 114.096581][T12718] [ 114.096591][T12718] CPU: 0 UID: 0 PID: 12718 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT(full) [ 114.096732][T12718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.096745][T12718] Call Trace: [ 114.096752][T12718] [ 114.096760][T12718] dump_stack_lvl+0x116/0x1f0 [ 114.096782][T12718] print_report+0xcd/0x630 [ 114.096803][T12718] ? __virt_addr_valid+0x81/0x610 [ 114.096831][T12718] ? sys_fillrect+0x15d4/0x17b0 [ 114.096856][T12718] kasan_report+0xe0/0x110 [ 114.096876][T12718] ? sys_fillrect+0x15d4/0x17b0 [ 114.096902][T12718] sys_fillrect+0x15d4/0x17b0 [ 114.096929][T12718] ? __pfx_sys_fillrect+0x10/0x10 [ 114.096956][T12718] ? __pfx_bit_putcs+0x10/0x10 [ 114.096976][T12718] ? bit_cursor+0xeca/0x17e0 [ 114.096998][T12718] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 114.097017][T12718] bit_clear+0x17d/0x220 [ 114.097036][T12718] ? __pfx_bit_clear+0x10/0x10 [ 114.097057][T12718] ? __pfx___might_resched+0x10/0x10 [ 114.097078][T12718] ? fb_get_color_depth+0x120/0x250 [ 114.097098][T12718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.097120][T12718] ? __pfx_bit_clear+0x10/0x10 [ 114.097137][T12718] __fbcon_clear+0x603/0x780 [ 114.097157][T12718] fbcon_scroll+0x48b/0x690 [ 114.097178][T12718] con_scroll+0x45c/0x690 [ 114.097200][T12718] do_con_write+0x5560/0x8280 [ 114.097223][T12718] ? call_rcu_tasks_generic+0x400/0x920 [ 114.097252][T12718] ? __pfx___mutex_lock+0x10/0x10 [ 114.097275][T12718] ? __pfx_do_con_write+0x10/0x10 [ 114.097297][T12718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.097325][T12718] con_write+0x23/0xb0 [ 114.097364][T12718] n_tty_write+0x41c/0x11e0 [ 114.097400][T12718] ? __pfx_n_tty_write+0x10/0x10 [ 114.097424][T12718] ? rcu_is_watching+0x12/0xc0 [ 114.097446][T12718] ? __pfx_woken_wake_function+0x10/0x10 [ 114.097468][T12718] ? kfree+0x24f/0x4d0 [ 114.097489][T12718] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 114.097511][T12718] ? __pfx_n_tty_write+0x10/0x10 [ 114.097537][T12718] file_tty_write.constprop.0+0x504/0x9b0 [ 114.097563][T12718] vfs_write+0x7d3/0x11d0 [ 114.097581][T12718] ? __pfx_tty_write+0x10/0x10 [ 114.097599][T12718] ? __pfx_vfs_write+0x10/0x10 [ 114.097617][T12718] ? find_held_lock+0x2b/0x80 [ 114.097645][T12718] ksys_write+0x12a/0x250 [ 114.097663][T12718] ? __pfx_ksys_write+0x10/0x10 [ 114.097685][T12718] do_syscall_64+0xcd/0x4e0 [ 114.097705][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.097724][T12718] RIP: 0033:0x7ff36bb8eec9 [ 114.097738][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.097755][T12718] RSP: 002b:00007ff36c95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.097774][T12718] RAX: ffffffffffffffda RBX: 00007ff36bde5fa0 RCX: 00007ff36bb8eec9 [ 114.097786][T12718] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 114.097797][T12718] RBP: 00007ff36bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.097807][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.097816][T12718] R13: 00007ff36bde6038 R14: 00007ff36bde5fa0 R15: 00007fff664ba1d8 [ 114.097832][T12718] [ 114.097838][T12718] [ 114.097843][T12718] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90005031000 allocated at drm_gem_shmem_vmap_locked+0x561/0x7e0 [ 114.097876][T12718] Memory state around the buggy address: [ 114.097886][T12718] ffffc90005330f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 114.097900][T12718] ffffc90005330f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 114.097913][T12718] >ffffc90005331000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 114.097922][T12718] ^ [ 114.097930][T12718] ffffc90005331080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 114.097940][T12718] ffffc90005331100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 114.097950][T12718] ================================================================== [ 114.098241][T12718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.098256][T12718] CPU: 1 UID: 0 PID: 12718 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT(full) [ 114.098278][T12718] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.098289][T12718] Call Trace: [ 114.098293][T12718] [ 114.098298][T12718] dump_stack_lvl+0x3d/0x1f0 [ 114.098314][T12718] vpanic+0x6e8/0x7a0 [ 114.098335][T12718] ? __pfx_vpanic+0x10/0x10 [ 114.098363][T12718] ? sys_fillrect+0x15d4/0x17b0 [ 114.098385][T12718] panic+0xca/0xd0 [ 114.098399][T12718] ? __pfx_panic+0x10/0x10 [ 114.098424][T12718] ? sys_fillrect+0x15d4/0x17b0 [ 114.098442][T12718] ? preempt_schedule_common+0x44/0xc0 [ 114.098457][T12718] ? preempt_schedule_thunk+0x16/0x30 [ 114.098482][T12718] check_panic_on_warn+0xab/0xb0 [ 114.098497][T12718] end_report+0x107/0x170 [ 114.098515][T12718] kasan_report+0xee/0x110 [ 114.098534][T12718] ? sys_fillrect+0x15d4/0x17b0 [ 114.098560][T12718] sys_fillrect+0x15d4/0x17b0 [ 114.098582][T12718] ? __pfx_sys_fillrect+0x10/0x10 [ 114.098606][T12718] ? __pfx_bit_putcs+0x10/0x10 [ 114.098625][T12718] ? bit_cursor+0xeca/0x17e0 [ 114.098646][T12718] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 114.098668][T12718] bit_clear+0x17d/0x220 [ 114.098683][T12718] ? __pfx_bit_clear+0x10/0x10 [ 114.098702][T12718] ? __pfx___might_resched+0x10/0x10 [ 114.098722][T12718] ? fb_get_color_depth+0x120/0x250 [ 114.098740][T12718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.098761][T12718] ? __pfx_bit_clear+0x10/0x10 [ 114.098780][T12718] __fbcon_clear+0x603/0x780 [ 114.098795][T12718] fbcon_scroll+0x48b/0x690 [ 114.098815][T12718] con_scroll+0x45c/0x690 [ 114.098835][T12718] do_con_write+0x5560/0x8280 [ 114.098856][T12718] ? call_rcu_tasks_generic+0x400/0x920 [ 114.098881][T12718] ? __pfx___mutex_lock+0x10/0x10 [ 114.098901][T12718] ? __pfx_do_con_write+0x10/0x10 [ 114.098921][T12718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.098947][T12718] con_write+0x23/0xb0 [ 114.098965][T12718] n_tty_write+0x41c/0x11e0 [ 114.098990][T12718] ? __pfx_n_tty_write+0x10/0x10 [ 114.099014][T12718] ? rcu_is_watching+0x12/0xc0 [ 114.099034][T12718] ? __pfx_woken_wake_function+0x10/0x10 [ 114.099050][T12718] ? kfree+0x24f/0x4d0 [ 114.099071][T12718] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 114.099091][T12718] ? __pfx_n_tty_write+0x10/0x10 [ 114.099115][T12718] file_tty_write.constprop.0+0x504/0x9b0 [ 114.099138][T12718] vfs_write+0x7d3/0x11d0 [ 114.099152][T12718] ? __pfx_tty_write+0x10/0x10 [ 114.099179][T12718] ? __pfx_vfs_write+0x10/0x10 [ 114.099196][T12718] ? find_held_lock+0x2b/0x80 [ 114.099226][T12718] ksys_write+0x12a/0x250 [ 114.099240][T12718] ? __pfx_ksys_write+0x10/0x10 [ 114.099261][T12718] do_syscall_64+0xcd/0x4e0 [ 114.099285][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.099302][T12718] RIP: 0033:0x7ff36bb8eec9 [ 114.099315][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.099327][T12718] RSP: 002b:00007ff36c95b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.099344][T12718] RAX: ffffffffffffffda RBX: 00007ff36bde5fa0 RCX: 00007ff36bb8eec9 [ 114.099355][T12718] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 114.099366][T12718] RBP: 00007ff36bc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.099376][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.099386][T12718] R13: 00007ff36bde6038 R14: 00007ff36bde5fa0 R15: 00007fff664ba1d8 [ 114.099403][T12718] [ 114.100213][T12718] Kernel Offset: disabled VM DIAGNOSIS: 05:06:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801de80000 RSI=ffffffff81608c38 RDI=ffffffff93dbffe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b7ffc R10=ffffffff93dbffe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000005fa1a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003172 656c6c616b7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0f676f66 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc0f676f66 00007ffc0f676f6c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3385812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3385812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3385812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3385812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f338581305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f338581313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05080999ff004d03 030509004d74ca02 00000409000023a8 0100240209030302 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f338651d100 00007f33859b7460 00007f33859b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f33859b74b8 00007f33859b74b0 00007f33859b74a8 00007f33859b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c315 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc9000537f0f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=000000000000007a R14=ffffffff9b1180e0 R15=ffffffff8564c2b0 RIP=ffffffff8564c33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff36c95b6c0 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efeae3b9f98 CR3=000000005fa1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020100001 Opmask01=0000000028000000 Opmask02=0000000002fefefe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 126081c0508f77f9 c41cbd5468740169 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ae8f55514577244 84639d3d64197288 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 880bf5e691a4c953 7ab9125d5230cc36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2e25717075b95d2 b5d3712f26eaf31b ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000013440 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d3c000072920000 00464bc900464bcc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 973c0000804c0000 00000000a95a0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464b7000464a55 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464bd300464be1 9896000000464a38 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d0a3028683acb9e bdc3cf3c8ffa5169 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41dced5807bb9167 216f4e5b1b963bc9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a732520656c6261 7462650064656c69 61662029736e7465 6e28736e74657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f56000540494744 514740004140494c 4443050c564b5140 4b0d564b51405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff888024afa440 RSI=ffffffff81608c38 RDI=ffffffff93dbffe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b7ffc R10=ffffffff93dbffe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007efeae3db6c0 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555581d4b808 CR3=0000000062213000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca46e8e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca46e8e6 00007fffca46e8ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead612fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead612fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead612fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead612fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead61305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead61313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead7b74a8 00007efead7b74a0 00007efead7b7498 00007efead7b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efeae31d100 00007efead7b7460 00007efead7b7478 00007efead7b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efead7b74b8 00007efead7b74b0 00007efead7b74a8 00007efead7b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff8880350c0000 RSI=ffffffff81608c38 RDI=ffffffff93dbffe0 RBP=0000000000000003 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff27b7ffc R10=ffffffff93dbffe7 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555907f5500 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007efeae399d58 CR3=00000000372d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd03cc91f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd03cc91f6 00007ffd03cc91fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e812fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e812fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e812fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e812fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e81305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e81313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e9b74a8 00007fc33e9b74a0 00007fc33e9b7498 00007fc33e9b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33f51d100 00007fc33e9b7460 00007fc33e9b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc33e9b74b8 00007fc33e9b74b0 00007fc33e9b74a8 00007fc33e9b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000