last executing test programs: 48.860486517s ago: executing program 1 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x42802) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x4042}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0xee01, &(0x7f0000000340)={0x0, 0x111, 0x9, 0x40008, 0x8, 0x200000001, 0x48cd, 0x0, 0xfff}) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) bind$packet(r7, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e1406020000", 0x1e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1813c1, 0x0) fchown(r10, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 48.665173194s ago: executing program 1 (id=85): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) sendto$inet6(r0, &(0x7f00000003c0)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001300)={0x0, 0x400}, 0x8) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="1e697c314e99dd7679b0ee1e654819126bb5f46faaf532a3953c32afb215ddeabd53a9d42817bfc2e6455d30d50acc271e6a444a3c2cb6999a050ca74f898c77f41ca520dac911a0f21279a844f7279979ddc44f5f1bfc5237d00bb6af22b9ba786bb60b1880ef362623ab841e35184fbb6b", &(0x7f0000000100)=@tcp=r4, 0x4}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r6) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0xae01, 0x1) (async) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000bfe000/0x400000)=nil) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000080)={0x397000, 0x388000, 0x8}) (async, rerun: 32) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/3, 0x3}, 0xa}], 0x1, 0x0, 0x0) (rerun: 32) 48.46958932s ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3594], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x44000000, 0xfffffffffffffe85, 0xa6, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x25) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = io_uring_setup(0x5323, &(0x7f0000000300)={0x0, 0xeb11, 0x20, 0x0, 0xaa}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xf83f, 0x20, 0x2, 0x10000004, 0x0, r6}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}) (async) unshare(0x22020600) (async) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=@ipv6_getnetconf={0x24, 0x52, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x24}}, 0x20000080) 48.469095237s ago: executing program 1 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x10d8020, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0x1}}]}) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) 48.389472285s ago: executing program 1 (id=93): r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x600000}) r1 = dup(r0) write$binfmt_misc(r1, &(0x7f0000000280)="df", 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x9) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) tkill(0x0, 0x7) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000620007ac1414aaac1414bb8677ffffffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706dc0bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d86060000002000000015405a03a322ecaa7dd18c8213c4c99cfd7b1b462207eb582795fb47a1d9"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000500)) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x80, 0x80, 0x7f, 0xfd5a, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @empty}}}}) bind$xdp(r9, &(0x7f0000000300)={0x2c, 0x4ab36fa164e25b00, r10, 0x23}, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 48.097954681s ago: executing program 1 (id=105): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x313b, &(0x7f0000000240)={0x0, 0x9d80, 0x0, 0x1, 0x2bc}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x4004084) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x66, 0x0, @fd_index=0x6, 0x5, 0x0, 0x9, 0x5, 0x1, {0x0, r4}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0xffffffffffffff90) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xbae) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010020bd70100600010007000000080009000200000008000b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01009462cb3841f86143ba9b01ebc428064285745f024226bd7000ffdbdf25caeca792"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r8) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r12, 0x10c, 0x2, &(0x7f0000000300), &(0x7f00000002c0)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x820) open(&(0x7f0000000300)='./file0\x00', 0x111000, 0x2) 33.070986189s ago: executing program 32 (id=105): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x313b, &(0x7f0000000240)={0x0, 0x9d80, 0x0, 0x1, 0x2bc}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x4004084) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x66, 0x0, @fd_index=0x6, 0x5, 0x0, 0x9, 0x5, 0x1, {0x0, r4}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020}, 0xffffffffffffff90) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0xbae) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010020bd70100600010007000000080009000200000008000b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01009462cb3841f86143ba9b01ebc428064285745f024226bd7000ffdbdf25caeca792"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008b04"]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r8) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r12, 0x10c, 0x2, &(0x7f0000000300), &(0x7f00000002c0)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x820) open(&(0x7f0000000300)='./file0\x00', 0x111000, 0x2) 16.438693696s ago: executing program 0 (id=556): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) r1 = dup(r0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000002280)={0x7, 0x1, 0xffc0, 0x0, 0x9, "803d5490e545a3eb"}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000280)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5a8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x80) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x25}}, './file0\x00'}) sendmsg$nl_generic(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x314, 0x32, 0x8, 0x70bd26, 0x25dfdbfc, {0xd}, [@nested={0x104, 0xe7, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@local}, @typed={0xeb, 0x151, 0x0, 0x0, @binary="34d6900d68ccdcd298320ab17ff2bc548f35024e21962eaf0963efa20b38b150237f5a040bf9eef195ecda1d241ae9903feedd0eabe18b7e3fbc1925bf26d4beaadaacf8d2e47c2a915a9be4fbac94ad0884c51c186cca6afe24d75da8befd6072e5f64595a1cbad4e40bd4e1ac362626ce41cd0cdfd943ad6a542d63c9ccd5301e7d7861bef0dc22640f81c8175cd1323a0b1f47e89441edb5a5243937e68801f229b69be1a86352a4c1520e937d551f23c390f8e10a29c84b98c4cadb49620ff32ad4c5c291a050227a436970684da9d4ce00446a0bbcbb71f9becfb0034cddcda7be6016ede"}, @generic="1e9c60c76849dfb3600f468e"]}, @generic="5abd4c100e9a425eae9d96aa74835fd9570d58a23d48fe1fa76590dcbed9a022a0529251", @generic="5c980d66b3e496bb7781608620c5b4bf350fc699c965c51fffaf40655c26530312e1136a9a45d3e5e93c8029d2beacb86a2f6a2e4f1240503835ca47e91167e000e1adbcf81302051ea2fa55fea5d436f18a3b7a4b9764a46511e873966d9c89904bce15084ad2adf9f8b8063d8d98cfbf63a31eea5024ca5d53124581eae5a304c51ed5261b7d97fb8703a7e52300003384a88c8235d0fd068552368417930e40", @generic="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", @typed={0xc, 0x8b, 0x0, 0x0, @u64=0x7}, @generic="4817bdfbd0149b2db911d1740056f4e6816f1467ba5cae25d7b01d04a47c63766c07330d6d59e0ee", @typed={0x8, 0x123, 0x0, 0x0, @u32=0x796}]}, 0x314}}, 0x400c094) (async) close(r6) (async) ioctl$TIOCL_SELLOADLUT(r8, 0x541c, &(0x7f0000000180)={0x5, 0x101, 0x6b, 0x1, 0x40}) 16.436305707s ago: executing program 0 (id=558): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000025000000000000004831ff48c7c6000004004881c60001000048893ec300000066baa100ed3e650f38f16ed7", @ANYRES32=0x0, @ANYRESOCT], 0x70}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04"], 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x75, 0x0, 0x181, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x400000000005, 0x0, 0x9, 0x0, 0x4801000000000005, 0x0, 0xbdb], 0x1, 0x3c4210}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.270571256s ago: executing program 0 (id=562): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x52, 0x2, 0x7, {0xfff7, 0x2}, {0x8, 0x9}, @ramp={0xfff, 0x8, {0x866, 0x1, 0x515}}}) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="7168b7c51958994c", 0x8}, {&(0x7f00000000c0)="2d4747c770d8e38466cd3ad4278d70f37be7f79f15e56833bc2551ca5878486aead5cd5073832e3829aa9ff2739c0b7cb431c5aa9d1c60e66bdc621aa828610127fbeeff66b7dd0a8021f928eb728023697ca872ed7c8b60a272c941d6a2597b54d1370ca5448b311b77967d7bdb9dca71796d8931071a85141476d64792f06f5b697ccc439942a03a20", 0x8a}], 0x2, 0x751, 0x800, 0x9) 16.270286145s ago: executing program 0 (id=563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000600776c616e31000000000000000000000014000300fe8000000000000000000000000000aa040002"], 0x50}, 0x1, 0x0, 0x0, 0x30}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) (async) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000600776c616e31000000000000000000000014000300fe8000000000000000000000000000aa040002"], 0x50}, 0x1, 0x0, 0x0, 0x30}, 0x0) (async) 16.079412766s ago: executing program 0 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000280)={0xffff, "27a3f503235822da1b182e6c90a60ced709a796245c8bcff4ce09fdba84a86b8", 0x764, 0x27e, 0x5f0, 0x4, 0x5}) setpgid(r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setpgid(0x0, r1) syz_open_dev$sndmidi(&(0x7f0000000000), 0x1, 0x42100) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 15.980301646s ago: executing program 0 (id=571): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x0, 0x1}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x2, 0xdf4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0xefe}], 0x0, 0x0, 0x0, 0x0, 0x6}}) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@overlay={0x3b387c8f, 0x1, 0x4, 0x0, 0x9, {r1, r2/1000+60000}, {0x3, 0x8, 0x4, 0x21, 0xfd, 0x74, "9c909ac8"}, 0x7, 0x3, {}, 0x1a89}) 5.810153939s ago: executing program 4 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.698371499s ago: executing program 4 (id=762): r0 = open(&(0x7f0000000000)='./file0\x00', 0x200003, 0x6) r1 = getuid() mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80010, &(0x7f00000000c0)={[{@redirect_dir_off}, {@verity_off}, {@uuid_on}, {@index_on}, {@uuid_null}, {@redirect_dir_off}], [{@euid_lt={'euid<', r1}}, {@hash}, {@subj_user={'subj_user', 0x3d, '/'}}, {@dont_measure}]}) mount_setattr(r0, &(0x7f0000000180)='./file0\x00', 0x9900, &(0x7f00000001c0)={0x100000, 0x4, 0x180000, {r0}}, 0x20) connect$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) mount$afs(&(0x7f0000000300)=@cell={0x23, '', 'syz0'}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2004820, &(0x7f00000003c0)={[{@flock_write}, {@dyn}, {@flock_openafs}, {@flock_local}, {@flock_openafs}, {}, {@flock_openafs}, {}], [{@obj_role={'obj_role', 0x3d, 'dont_measure'}}]}) setfsuid(r1) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000002480)='./file0\x00', 0x4000, 0x100, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) statx(r0, &(0x7f0000002680)='./file0\x00', 0x0, 0x100, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() write$FUSE_DIRENTPLUS(r0, &(0x7f00000027c0)={0x348, 0x0, r2, [{{0x3, 0x3, 0xf7d, 0x3, 0x4, 0x6, {0x5, 0x48, 0x7, 0x7, 0x100, 0x8000, 0xffff, 0x2, 0x7fffffff, 0x2800, 0x7, r1, r5, 0x60c, 0x62a}}, {0x2, 0xfffffffffffffc00, 0x9, 0x6, 'subj_user'}}, {{0x2, 0x2, 0xff, 0x6, 0x7ff, 0x51, {0x6, 0x6, 0x2, 0x2, 0x0, 0x1, 0x6, 0x4, 0x2, 0xd000, 0x4, r1, r6, 0x4000, 0x8}}, {0x4, 0x7fff, 0x8, 0x8, 'index=on'}}, {{0x4, 0x0, 0xc, 0x7, 0x1, 0x6, {0x3, 0x3997, 0x5, 0x0, 0x8, 0x8, 0x3, 0x80000001, 0x5, 0x1000, 0x2, r1, r7, 0x4, 0x4}}, {0x3, 0xfffffffffffffff9, 0x2, 0xffff97b0, '/!'}}, {{0x6, 0x2, 0x3, 0x4, 0x2, 0x5, {0x3, 0x7f, 0x6, 0xb, 0x3, 0x48000, 0x4, 0x3f, 0xffffffff, 0x6000, 0x4, r1, r8, 0x5, 0x774}}, {0x0, 0xc999, 0x9, 0x4, 'uuid=null'}}, {{0x1, 0x1, 0x8ae6, 0x8, 0x7f, 0x0, {0x0, 0x3, 0x8000000000000001, 0x1, 0x1, 0x6, 0x0, 0x80000000, 0x4, 0x1000, 0x8, r1, 0xee00, 0x2, 0x38}}, {0x2, 0x7b, 0xb, 0x101, 'flock=local'}}]}, 0x348) chdir(&(0x7f0000002b40)='./file0\x00') ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000002b80)=[0xd953, 0x0, 0x9, 0x80, 0x1, 0x0, 0x10000, 0x9]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002c80)={r0, 0x58, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002d40)={'syztnl0\x00', &(0x7f0000002cc0)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xff, 0x8, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x20, 0x8000, 0xffff7fff, 0x8f5a}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003040)={r0, 0xe0, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000002e40)=[{}, {}], 0x10, 0x10, &(0x7f0000002e80), &(0x7f0000002ec0), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000002f00)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000003140)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)=@RTM_DELMDB={0x58, 0x55, 0x4, 0x70bd2b, 0x25dfdbfb, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x3, {@in6_addr=@mcast1, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x0, 0x2, {@in6_addr=@mcast1, 0x400}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000) umount2(&(0x7f0000003180)='./file0\x00', 0x0) r13 = syz_open_dev$mouse(&(0x7f00000031c0), 0x9, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) migrate_pages(r4, 0x7f, &(0x7f0000003200)=0xd, &(0x7f0000003240)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003280)={r9, 0xffff, 0x28}, 0xc) r15 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r15, &(0x7f00000035c0)={0x0, &(0x7f00000032c0)=[@uexit={0x0, 0x18, 0x180000000000}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0xca}, @cpuid={0x2, 0x18, {0x3, 0x5}}, @cpuid={0x2, 0x18, {0x1, 0x6}}, @code={0x1, 0x60, {"3e42f7a7a6000000b9a10a0000b886540000ba000000000f3026430f0176a8660f38811fb9800000c00f3235010000000f3066660f38319af4afed3fc4a1b1683cb8470f3267410f35466879c00000"}}, @code={0x1, 0x58, {"c422fd23b56f000000430f011ab9060900000f32c4c27d21d3c4a3854844fc7d42c483710290000001001a66b839018ed866ba200066b8000066efc441e4c2cc0066ba400066ed"}}, @cpuid={0x2, 0x18, {0x9, 0xfff}}, @uexit={0x0, 0x18, 0xa034}, @cpuid={0x2, 0x18, {0x8001, 0x4}}, @code={0x1, 0x42, {"6640d91ec423b56bf014f345de67f5b8010000000f01c1c4e2199334d6450f06b9230900000f32410f320f78fb260fc72e"}}, @uexit={0x0, 0x18, 0x3454}, @code={0x1, 0x63, {"c462f1ddef66b8d8000f00d80f0f1ba6f2440f5d3a0f013ab8010000000f01d90f08c744240038000000c74424022f000000ff1c24c744240025000000c7442402e3000000ff2c2466bad10466b8506e66ef"}}, @uexit={0x0, 0x18, 0x7fffffffffffffff}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x5}, @cpuid={0x2, 0x18, {0x20, 0x401}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xfffffffffffffffb}], 0x2dd}) quotactl_fd$Q_QUOTAOFF(r13, 0xffffffff80000300, r3, 0x0) ioctl$sock_ifreq(r14, 0x8992, &(0x7f0000003640)={'bond_slave_1\x00', @ifru_data=&(0x7f0000003600)="417e368d9baa83d5edda4a6ec96cdafdda781c955f29983fcf51f2557354ea4d"}) 5.640061172s ago: executing program 4 (id=763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x4040000) 5.639459798s ago: executing program 4 (id=765): socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000000)="66bad004ec440f20c0350d000000440f22c00f30670f01c5b93e030000b0ae9c9cbaf80cb8da6ada8bef66bafc0c66edc1c81fc4c159f656330f380a6c414a", 0x3f}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) write(r5, &(0x7f0000000480)="082ac72e66b23d42f5d412cbafdc7b3733b18f4ede79aa8bed31402c31c94575bc84a2e2436cee425609c842500187fe21cd2eda1e79bf75abab1dcb6d3dbefe34cafbff4cd59717b330555826e49cdb72b6c5fa617bb9d7eb6c01ff8e491b6926a38306b42675eaab4bd02678019e2abb6a6bfd5f76f139050133493549bc04c207b254b2787102efd42bda7a38f64c0b5b470200fb3b67481aa2235df9cf4082e61b8ea96b3857cb74f36f5f7e51f1ee58cc243f70c9ca4fb47ce297c6b24511dc", 0xc2) sendmmsg$alg(r4, &(0x7f0000000400), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x110, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.768846171s ago: executing program 4 (id=788): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 4.659916971s ago: executing program 4 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x38}}, 0x4000084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', r5, 0x40, 0x8, 0x89e, 0x990, {{0x11, 0x4, 0x0, 0x2, 0x44, 0x66, 0x0, 0x1, 0x2f, 0x0, @loopback, @private=0xa010100, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x43, [@multicast1, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x0, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0x8103}, {@remote, 0x4}]}, @end]}}}}}) 4.259905615s ago: executing program 3 (id=797): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x30, 0x1, 0x3, "1c0bebdaf2f20d55806b26b1d750185fd7022df43bb0e6781e97edb1389b1cc2", 0x31324947}) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8, 0xe) 4.180343533s ago: executing program 3 (id=798): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, 0x0) 4.179074941s ago: executing program 3 (id=799): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = syz_open_dev$video(&(0x7f0000000080), 0x485, 0x40400) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x5, 0xfffffffd, 0x4, 0x4}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0x4aaf) mremap(&(0x7f0000169000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00005db000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) 4.12960347s ago: executing program 3 (id=800): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x8, 0x3, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0xa, 0x9, 0x10, 0x11, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="2e003300d00000000802110000010802110000005050505050500004", @ANYRES64=r3], 0x4c}}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r7, 0x0, 0x5b, 0x40, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000630104000000000095000000000000000136b7e39683aa58a76d7d859c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.019866795s ago: executing program 3 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x940}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0) 3.424039522s ago: executing program 3 (id=804): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000540)={0xd, 0xffffff81}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x48040, 0x40) r4 = fanotify_init(0x208, 0x1) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xbb2, 0x3) pipe2$9p(&(0x7f0000000080), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000540)={0xd, 0xffffff81}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x48040, 0x40) (async) fanotify_init(0x208, 0x1) (async) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) (async) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0) (async) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xbb2, 0x3) (async) 976.057009ms ago: executing program 33 (id=571): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x0, 0x1}) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x2, 0xdf4}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325258, 0x0, 0xb, [{}, {0x0, 0xffffffff}, {0x4}, {0x2}, {}, {}, {0xefe}], 0x0, 0x0, 0x0, 0x0, 0x6}}) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@overlay={0x3b387c8f, 0x1, 0x4, 0x0, 0x9, {r1, r2/1000+60000}, {0x3, 0x8, 0x4, 0x21, 0xfd, 0x74, "9c909ac8"}, 0x7, 0x3, {}, 0x1a89}) 777.592974ms ago: executing program 2 (id=814): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@privport}]}}) 777.316413ms ago: executing program 2 (id=815): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="53427c180ac6", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x10}, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x11}]}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @remote, @local}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @remote, @remote, @local}}}}, 0x0) 669.803363ms ago: executing program 2 (id=816): r0 = fsopen(&(0x7f0000000340)='mqueue\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x180, 0x4) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x3600, 0x40002000, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x8, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x3e, @rand_addr=' \x01\x00', @remote, 0x80, 0x0, 0x3}}) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="ccd70000138f0d050c87010f05030beb18df"]) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/190, 0xbe}], 0x1}, 0x8}, {{&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f00000014c0)=""/138, 0x8a}, {&(0x7f0000000300)=""/47, 0x2f}], 0x6, &(0x7f0000001600)=""/252, 0xfc}, 0x8}, {{&(0x7f0000001700)=@rc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001780)=""/161, 0xa1}, {&(0x7f0000001840)=""/56, 0x38}, {&(0x7f0000001880)=""/4, 0x4}, {&(0x7f00000018c0)=""/187, 0xbb}, {&(0x7f0000001980)=""/137, 0x89}, {&(0x7f0000001a40)=""/222, 0xde}, {&(0x7f0000001b40)=""/163, 0xa3}], 0x7, &(0x7f0000001c80)=""/168, 0xa8}, 0x1}, {{&(0x7f0000001d40)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004140)=[{&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/14, 0xe}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/124, 0x7c}, {&(0x7f0000002f40)=""/116, 0x74}, {&(0x7f0000002fc0)=""/90, 0x5a}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/220, 0xdc}], 0x8, &(0x7f00000041c0)=""/95, 0x5f}, 0x2}, {{&(0x7f0000004240)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000066c0)=[{&(0x7f00000042c0)=""/197, 0xc5}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/235, 0xeb}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/117, 0x75}, {&(0x7f0000006540)=""/144, 0x90}, {&(0x7f0000006600)=""/149, 0x95}], 0x7, &(0x7f0000006740)=""/1, 0x1}, 0x7}], 0x5, 0x60, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045519, &(0x7f0000000480)=0x1) recvfrom$inet(r5, &(0x7f00000068c0)=""/96, 0x60, 0x10060, &(0x7f0000006940)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) 418.180046ms ago: executing program 2 (id=817): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001380)={'ip6tnl0\x00', &(0x7f00000012c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x80, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, 0x8000, 0x10, 0x1, 0x8}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000001400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000023c0)={0x1240, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_WOL_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_MODES={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{-+:%[,(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\xa1*\'\x8d\\-]]$#-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan1\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "885c951f389b9aee12326c824d70793b6f3ab5b8de4e6aca5ba52cfde47dc1a3e3a252424a34bbb5acd785ce78356620d533def1b5a9c5616f040d416a73bc5292e31fd0eea87beae61b9e08a7839e748ae4f58daeae4cc959c3f779d4a91d0c251f2d379395292120cc4d7c49f9af188bc3ef9cb22bf994f5423b5379cb525dbbebf9fe8eb715eac4c7df3854162a96f94f88a09da6f7a8b4be9b0dc060c228ec"}]}, @ETHTOOL_A_WOL_SOPASS={0x28, 0x3, "9f8fe6f41792cfb7e112d8380df07fa2625a27a1565047acb2506d522b084eb99da8086f"}]}, 0x1240}, 0x1, 0x0, 0x0, 0x4048000}, 0x4001) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @loopback, 0xfee}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x500, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x2dd2, 0x10100, 0x0, 0xffffffdc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket(0x18, 0xa, 0x3) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x7c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x148, 0x10000, 0x12345}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r12, &(0x7f0000001500)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, r2, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00', r2, 0x0, 0x1, {0x0, r13}}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@dellink={0x34, 0x11, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40400, 0x810}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 190.321012ms ago: executing program 2 (id=818): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x3, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000680)={0x1, 0x100, 0x4, {0x0, 0xb, 0x0, 0x287f}}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030400"], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08001300e0"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'macvtap0\x00'}) (async) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) 0s ago: executing program 2 (id=819): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010071ec7c45f2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c20500000000000000cceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fda4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1a5e1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9cdf99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0010067fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e800fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a086535bd07820e690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd0700000000000011b64b378ee96af15cbbc65d72ae980b6df22b5ca3ea377f36beb44b45c6f84b3f4d2c62ca91b4df16fc8cc5d18b35213e5f67ec200e768ab28feaff2195724b2965ebca822af6c0a4e598d34f9b5f1eb43de209cd5541fe72d89d5f9819c1529c242b72ccdb9541e54fcccf12457df695126458ebffaaebe98748dea4f0a0b0a1683ff327ca05070000000000000088a571761be31e4fdd530604d32149c22f81adc983adc81b335d0579f47763a97af46500c91d5b2640242661beca1b4e695f7aac5ae46a72ac99ec395bdf16e3fc75e7acbb2d10060bef6a793082f8cfd4721588787c8a8c6257a8a11d49f7f7ed9de6efb7dd8058fb0c8125ee9c1691afa39b5a70d489efcd3e95a483c59f8fa7443e795eac454a68ab647e0d5381df6528858895d57274e97046659ac9488c85e5728987fa9d43660eb28b7befbb981f8fde8754d792146e49ee14bff102540e247a8780c80e3ff0688e8cb5c500446756d0b76244766deecc69c4c3435c125f0f06c772a051b690113e59485586e0ff"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6e72e3fe705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6e72e3fe705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000029c0)='fdinfo/3\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0) preadv(r6, &(0x7f0000002a80)=[{&(0x7f0000002a40)=""/47, 0x2f}], 0x1, 0x9, 0x2) (async) preadv(r6, &(0x7f0000002a80)=[{&(0x7f0000002a40)=""/47, 0x2f}], 0x1, 0x9, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @flat=@weak_handle={0x77682a85, 0x1000}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000000940)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000002980)={0x18, 0x0, r7, {0x9}}, 0x18) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f00000005c0)={0x2, {0x6, 0xfffffff9, 0x2, 0x40}}) recvmsg$can_raw(r1, &(0x7f0000000200)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/37, 0x25}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f0000000340)=""/142, 0x8e}], 0x4, &(0x7f0000000400)=""/4096, 0x1000}, 0x20) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x1, 0xffffffffffffffff}}, 0x28) (async) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)={0x28, 0x4, 0x0, {0x1, 0xffffffffffffffff}}, 0x28) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 54.830344][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.834185][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.836949][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.853795][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.863029][ T5953] veth0_macvtap: entered promiscuous mode [ 54.867357][ T5953] veth1_macvtap: entered promiscuous mode [ 54.873690][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.910935][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.927498][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.933693][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.937414][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.956401][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.959995][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.964579][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.968069][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.977752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.981859][ T5940] veth0_vlan: entered promiscuous mode [ 54.981952][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.008635][ T5949] veth0_vlan: entered promiscuous mode [ 55.013190][ T5940] veth1_vlan: entered promiscuous mode [ 55.026327][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.051117][ T5949] veth1_vlan: entered promiscuous mode [ 55.064275][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.066938][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.067183][ T5940] veth0_macvtap: entered promiscuous mode [ 55.078537][ T5940] veth1_macvtap: entered promiscuous mode [ 55.107239][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.111656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.114906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.119732][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.125198][ T5949] veth0_macvtap: entered promiscuous mode [ 55.135232][ T5940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.137967][ T5940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.140657][ T5940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.144528][ T5940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.151734][ T5949] veth1_macvtap: entered promiscuous mode [ 55.175677][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.194421][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.198616][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.201378][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.205675][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.208663][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.240042][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.245065][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.306471][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.309069][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.312562][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.315004][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.333506][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.335997][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.406378][ T6012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 55.407239][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 55.410126][ T6012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 55.418016][ T6012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 55.421758][ T6012] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 55.424483][ T6017] Zero length message leads to an empty skb [ 55.496764][ T6023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.579336][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'. [ 55.608260][ T6030] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 55.631550][ T6030] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 55.789012][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 56.253230][ T5948] Bluetooth: hci1: command tx timeout [ 56.254948][ T5948] Bluetooth: hci0: command tx timeout [ 56.255797][ T5952] Bluetooth: hci3: command tx timeout [ 56.287008][ T6050] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 56.342614][ T5952] Bluetooth: hci2: command tx timeout [ 56.987988][ T40] kauditd_printk_skb: 851 callbacks suppressed [ 56.988003][ T40] audit: type=1400 audit(1749142492.249:941): avc: denied { read write } for pid=6056 comm="syz.0.17" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.004904][ T40] audit: type=1400 audit(1749142492.249:942): avc: denied { open } for pid=6056 comm="syz.0.17" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.014166][ T40] audit: type=1400 audit(1749142492.249:943): avc: denied { ioctl } for pid=6056 comm="syz.0.17" path="/dev/video0" dev="devtmpfs" ino=956 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 57.043130][ T40] audit: type=1400 audit(1749142492.309:944): avc: denied { create } for pid=6060 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.049714][ T40] audit: type=1400 audit(1749142492.309:945): avc: denied { write } for pid=6060 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.058596][ T40] audit: type=1400 audit(1749142492.309:946): avc: denied { write } for pid=6060 comm="syz.3.18" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 57.302508][ T5982] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.318819][ T40] audit: type=1400 audit(1749142492.579:947): avc: denied { read write } for pid=6070 comm="syz.1.21" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.326474][ T40] audit: type=1400 audit(1749142492.579:948): avc: denied { open } for pid=6070 comm="syz.1.21" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 57.371600][ T40] audit: type=1400 audit(1749142492.629:949): avc: denied { create } for pid=6075 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.386022][ T40] audit: type=1400 audit(1749142492.649:950): avc: denied { ioctl } for pid=6075 comm="syz.1.22" path="socket:[8558]" dev="sockfs" ino=8558 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.464058][ T5982] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 57.469547][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.473432][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.477883][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.482594][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.486306][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.490790][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.496215][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.499661][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.503478][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.507804][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.511481][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.516164][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.519881][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.523688][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.527075][ T6079] xt_hashlimit: size too large, truncated to 1048576 [ 57.528025][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.529270][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.537956][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.542767][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.547048][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.550257][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.554184][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.557290][ T5982] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 57.560033][ T5982] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 57.563487][ T5982] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.567944][ T5982] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 57.571372][ T5982] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 57.574755][ T5982] usb 8-1: Product: syz [ 57.576148][ T5982] usb 8-1: Manufacturer: syz [ 57.577774][ T5982] usb 8-1: SerialNumber: syz [ 57.583169][ T5982] usb 8-1: config 0 descriptor?? [ 57.695538][ T6086] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 57.775150][ T6092] KVM: debugfs: duplicate directory 6092-5 [ 57.791298][ T6061] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18'. [ 57.800962][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 57.814735][ T5982] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 57.823248][ T5982] usb 8-1: USB disconnect, device number 2 [ 57.830353][ T5982] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 57.938033][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 58.112644][ T6010] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.152405][ T6002] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.273904][ T6010] usb 5-1: config 0 has no interfaces? [ 58.276918][ T6010] usb 5-1: config 0 has no interfaces? [ 58.280369][ T6010] usb 5-1: config 0 has no interfaces? [ 58.285625][ T6010] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 58.289270][ T6010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 58.292883][ T6010] usb 5-1: Product: syz [ 58.294571][ T6010] usb 5-1: Manufacturer: syz [ 58.296077][ T6010] usb 5-1: SerialNumber: syz [ 58.303001][ T6010] usb 5-1: config 0 descriptor?? [ 58.308985][ T6002] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.313851][ T6002] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.318036][ T6002] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.322529][ T6002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.329999][ T6098] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 58.334052][ T5952] Bluetooth: hci3: command tx timeout [ 58.339227][ T6002] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.342711][ T63] Bluetooth: hci1: command tx timeout [ 58.344261][ T5952] Bluetooth: hci0: command tx timeout [ 58.352011][ T1144] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 58.356591][ T6112] 9pnet_fd: Insufficient options for proto=fd [ 58.412478][ T5952] Bluetooth: hci2: command tx timeout [ 58.587557][ T837] usb 6-1: USB disconnect, device number 2 [ 58.667458][ T6002] usb 5-1: USB disconnect, device number 2 [ 59.215713][ T6131] block nbd2: NBD_DISCONNECT [ 59.221131][ T5952] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 59.228226][ T5952] CPU: 1 UID: 0 PID: 5952 Comm: kworker/u33:6 Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 59.228243][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.228258][ T5952] Workqueue: hci0 hci_rx_work [ 59.228290][ T5952] Call Trace: [ 59.228294][ T5952] [ 59.228299][ T5952] dump_stack_lvl+0x16c/0x1f0 [ 59.228317][ T5952] sysfs_warn_dup+0x7f/0xa0 [ 59.228341][ T5952] sysfs_create_dir_ns+0x24b/0x2b0 [ 59.228355][ T5952] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 59.228370][ T5952] ? find_held_lock+0x2b/0x80 [ 59.228386][ T5952] ? do_raw_spin_unlock+0x172/0x230 [ 59.228400][ T5952] kobject_add_internal+0x2c4/0x9b0 [ 59.228419][ T5952] kobject_add+0x16e/0x240 [ 59.228434][ T5952] ? __pfx_kobject_add+0x10/0x10 [ 59.228449][ T5952] ? do_raw_spin_unlock+0x172/0x230 [ 59.228460][ T5952] ? kobject_put+0xab/0x5a0 [ 59.228477][ T5952] device_add+0x288/0x1a70 [ 59.228488][ T5952] ? __pfx_dev_set_name+0x10/0x10 [ 59.228500][ T5952] ? __pfx_device_add+0x10/0x10 [ 59.228510][ T5952] ? mgmt_send_event_skb+0x2fb/0x460 [ 59.228527][ T5952] hci_conn_add_sysfs+0x17e/0x230 [ 59.228542][ T5952] le_conn_complete_evt+0x1075/0x1d70 [ 59.228559][ T5952] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 59.228572][ T5952] ? hci_event_packet+0x459/0x11c0 [ 59.228588][ T5952] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 59.228602][ T5952] ? skb_pull_data+0x166/0x210 [ 59.228616][ T5952] hci_le_meta_evt+0x354/0x5e0 [ 59.228630][ T5952] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 59.228645][ T5952] hci_event_packet+0x685/0x11c0 [ 59.228658][ T5952] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 59.228672][ T5952] ? __pfx_hci_event_packet+0x10/0x10 [ 59.228687][ T5952] ? kcov_remote_start+0x3c9/0x6d0 [ 59.228698][ T5952] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.228715][ T5952] hci_rx_work+0x2c5/0x16b0 [ 59.228729][ T5952] ? rcu_is_watching+0x12/0xc0 [ 59.228743][ T5952] process_one_work+0x9cf/0x1b70 [ 59.228759][ T5952] ? __pfx_process_one_work+0x10/0x10 [ 59.228773][ T5952] ? assign_work+0x1a0/0x250 [ 59.228786][ T5952] worker_thread+0x6c8/0xf10 [ 59.228801][ T5952] ? __kthread_parkme+0x19e/0x250 [ 59.228815][ T5952] ? __pfx_worker_thread+0x10/0x10 [ 59.228825][ T5952] kthread+0x3c5/0x780 [ 59.228834][ T5952] ? __pfx_kthread+0x10/0x10 [ 59.228844][ T5952] ? rcu_is_watching+0x12/0xc0 [ 59.228855][ T5952] ? __pfx_kthread+0x10/0x10 [ 59.228865][ T5952] ret_from_fork+0x5d4/0x6f0 [ 59.228879][ T5952] ? __pfx_kthread+0x10/0x10 [ 59.228888][ T5952] ret_from_fork_asm+0x1a/0x30 [ 59.228912][ T5952] [ 59.228925][ T5952] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 59.266844][ T837] IPVS: starting estimator thread 0... [ 59.268777][ T5952] Bluetooth: hci0: failed to register connection device [ 59.382709][ T6139] IPVS: using max 27 ests per chain, 64800 per kthread [ 59.416214][ T6151] netlink: 'syz.1.43': attribute type 32 has an invalid length. [ 59.614254][ T6170] team0: Device gtp0 is of different type [ 59.663905][ T6178] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 59.673904][ T6178] team0: Device hsr_slave_0 failed to register rx_handler [ 59.800407][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.862430][ T6198] misc userio: The device must be registered before sending interrupts [ 59.969697][ T6213] overlayfs: cannot append lower layer [ 60.413974][ T5952] Bluetooth: hci1: command tx timeout [ 60.414052][ T63] Bluetooth: hci0: command tx timeout [ 60.414081][ T5948] Bluetooth: hci3: command tx timeout [ 60.492511][ T63] Bluetooth: hci2: command tx timeout [ 60.774229][ T6230] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 60.796762][ T6230] veth3: entered promiscuous mode [ 60.827995][ T6234] veth3: entered promiscuous mode [ 60.835390][ T6235] vlan2: entered allmulticast mode [ 60.836987][ T6235] geneve0: entered allmulticast mode [ 60.843054][ T6232] warning: `syz.2.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.003482][ T6249] ip6tnl1: entered promiscuous mode [ 61.005284][ T6249] ip6tnl1: entered allmulticast mode [ 61.008218][ T6249] team0: Device ip6tnl1 is of different type [ 61.256443][ T6261] __nla_validate_parse: 3 callbacks suppressed [ 61.256454][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 61.261194][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 61.265679][ T6261] netlink: 'syz.1.75': attribute type 12 has an invalid length. [ 61.517541][ T6269] syz.0.77: attempt to access beyond end of device [ 61.517541][ T6269] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 61.591006][ T6273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1112 sclass=netlink_route_socket pid=6273 comm=syz.0.79 [ 61.690948][ T6281] tmpfs: Unknown parameter 'usrquota$' [ 61.948433][ T6299] binder: BINDER_SET_CONTEXT_MGR already set [ 61.950738][ T6299] binder: 6296:6299 ioctl 4018620d 200000000040 returned -16 [ 62.079420][ T6308] syz.3.88 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.089078][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 62.089088][ T40] audit: type=1400 audit(1749142497.349:1040): avc: denied { unlink } for pid=6306 comm="syz.2.89" name="#1" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.098049][ T40] audit: type=1400 audit(1749142497.349:1041): avc: denied { mount } for pid=6306 comm="syz.2.89" name="/" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.131690][ T40] audit: type=1400 audit(1749142497.389:1042): avc: denied { mount } for pid=6314 comm="syz.1.91" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.138839][ T40] audit: type=1400 audit(1749142497.389:1043): avc: denied { remount } for pid=6314 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.148048][ T40] audit: type=1400 audit(1749142497.409:1044): avc: denied { unmount } for pid=5953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.242358][ T838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.284084][ T40] audit: type=1400 audit(1749142497.549:1045): avc: denied { create } for pid=6323 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.290960][ T40] audit: type=1400 audit(1749142497.549:1046): avc: denied { connect } for pid=6323 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.302639][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 62.305378][ T6337] veth2: entered promiscuous mode [ 62.306780][ T6337] veth2: entered allmulticast mode [ 62.311313][ T6319] syz.1.93 uses obsolete (PF_INET,SOCK_PACKET) [ 62.314875][ T40] audit: type=1400 audit(1749142497.579:1047): avc: denied { create } for pid=6318 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.317361][ T6337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 62.320692][ T40] audit: type=1400 audit(1749142497.579:1048): avc: denied { bind } for pid=6318 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.329334][ T40] audit: type=1400 audit(1749142497.579:1049): avc: denied { ioctl } for pid=6318 comm="syz.1.93" path="socket:[10832]" dev="sockfs" ino=10832 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.346148][ T6343] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 62.355946][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 62.388878][ T52] hid-generic 0362:07FF:7FFFFFFF.0002: item fetching failed at offset 0/2 [ 62.391935][ T52] hid-generic 0362:07FF:7FFFFFFF.0002: probe with driver hid-generic failed with error -22 [ 62.392471][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 62.392579][ T6348] ======================================================= [ 62.392579][ T6348] WARNING: The mand mount option has been deprecated and [ 62.392579][ T6348] and is ignored by this kernel. Remove the mand [ 62.392579][ T6348] option from the mount to silence this warning. [ 62.392579][ T6348] ======================================================= [ 62.392677][ T6348] devpts: Bad value for 'max' [ 62.410384][ T838] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 62.413859][ T838] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.418252][ T838] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.425124][ T838] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 62.428659][ T838] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.432618][ T838] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.438284][ T838] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 62.441570][ T838] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 62.445968][ T838] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.453862][ T838] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.457583][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.460993][ T838] usb 5-1: Product: syz [ 62.462838][ T838] usb 5-1: Manufacturer: syz [ 62.464812][ T838] usb 5-1: SerialNumber: syz [ 62.623798][ T6358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=544 sclass=netlink_route_socket pid=6358 comm=syz.2.106 [ 62.663481][ T6360] capability: warning: `syz.2.107' uses 32-bit capabilities (legacy support in use) [ 62.773456][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 62.783878][ T6304] Can't find a SQUASHFS superblock on nullb0 [ 62.787681][ T6304] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 62.790303][ T6304] [U] J"—e:ÀÆ" [ 62.920052][ T6373] sp0: Synchronizing with TNC [ 62.956893][ T6379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=6379 comm=syz.3.112 [ 62.965401][ T6379] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 63.236824][ T6395] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.272507][ T6397] usb usb8: usbfs: process 6397 (syz.2.119) did not claim interface 0 before use [ 63.316411][ T6399] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 63.789697][ T6418] syz.2.125: attempt to access beyond end of device [ 63.789697][ T6418] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 63.799998][ T6418] MINIX-fs: unable to read superblock [ 63.868669][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 63.927852][ T6420] IPv6: addrconf: prefix option has invalid lifetime [ 63.929833][ T6421] IPVS: length: 184 != 24 [ 63.980450][ T6426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.128'. [ 64.141012][ T6430] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.222384][ T1347] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 64.259463][ T6434] trusted_key: encrypted_key: master key parameter '' is invalid [ 64.317523][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 64.320866][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 64.373681][ T1347] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 64.378086][ T1347] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 64.381987][ T1347] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 64.389934][ T1347] usb 8-1: string descriptor 0 read error: -22 [ 64.392818][ T1347] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.394348][ T6446] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 64.396178][ T1347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.406385][ T6426] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 64.413066][ T6446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.428487][ T6446] bond3: (slave geneve2): making interface the new active one [ 64.440419][ T6446] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 64.474592][ T6446] veth3: entered promiscuous mode [ 64.480122][ T6446] bond3: (slave veth3): Enslaving as an active interface with a down link [ 64.491107][ T6446] vlan2: entered allmulticast mode [ 64.493562][ T6446] bond3: entered allmulticast mode [ 64.495342][ T6446] geneve2: entered allmulticast mode [ 64.498442][ T6446] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 64.612022][ T1347] cdc_ncm 8-1:1.0: bind() failure [ 64.615757][ T1347] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 64.617910][ T1347] cdc_ncm 8-1:1.1: bind() failure [ 64.621558][ T1347] usb 8-1: USB disconnect, device number 3 [ 65.021850][ T838] adutux 5-1:168.0: interrupt endpoints not found [ 65.038004][ T838] usb 5-1: USB disconnect, device number 3 [ 65.222056][ T6470] tipc: Started in network mode [ 65.223123][ T63] Bluetooth: hci1: unexpected event 0x09 length: 20 > 3 [ 65.226022][ T6470] tipc: Node identity eab0914809d9, cluster identity 4711 [ 65.231987][ T6470] tipc: Enabled bearer , priority 0 [ 65.242102][ T6473] tipc: Enabling of bearer rejected, already enabled [ 65.246793][ T6469] syzkaller0: entered promiscuous mode [ 65.248544][ T6469] syzkaller0: entered allmulticast mode [ 65.260164][ T6469] tipc: Resetting bearer [ 65.266480][ T6468] tipc: Resetting bearer [ 65.273366][ T6468] tipc: Disabling bearer [ 65.401212][ T6481] random: crng reseeded on system resumption [ 65.580520][ T6493] snd_dummy snd_dummy.0: control 0:0:4:syz0:0 is already present [ 65.586193][ T6493] random: crng reseeded on system resumption [ 65.852362][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.982386][ T29] usb 7-1: device descriptor read/64, error -71 [ 66.156743][ T6510] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 66.159459][ T6510] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 66.224360][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 66.352608][ T29] usb 7-1: device descriptor read/64, error -71 [ 66.380457][ T6521] [U] [ 66.381658][ T6521] [U] [ 66.382889][ T6521] [U] [ 66.384098][ T6521] [U] [ 66.386215][ T6521] [U] [ 66.387416][ T6521] [U] [ 66.388619][ T6521] [U] [ 66.389813][ T6521] [U] [ 66.391142][ T6521] [U] [ 66.392383][ T6521] [U] [ 66.393379][ T6521] [U] [ 66.394532][ T6521] [U] [ 66.396913][ T6521] [U] [ 66.398046][ T6521] [U] [ 66.399126][ T6521] [U] [ 66.400213][ T6521] [U] [ 66.407762][ T6521] __nla_validate_parse: 3 callbacks suppressed [ 66.407806][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 66.415573][ T6520] [U] [ 66.463582][ T29] usb usb7-port1: attempt power cycle [ 66.812378][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 66.842883][ T29] usb 7-1: device descriptor read/8, error -71 [ 66.949231][ T6542] fuse: Bad value for 'rootmode' [ 67.092423][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.104881][ T6546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.168'. [ 67.113365][ T29] usb 7-1: device descriptor read/8, error -71 [ 67.179523][ T6548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2834047395 (22672379160 ns) > initial count (8751802360 ns). Using initial count to start timer. [ 67.195042][ T6548] kvm: pic: single mode not supported [ 67.195119][ T6548] kvm: pic: level sensitive irq not supported [ 67.210420][ T6532] syz.0.164 (6532): drop_caches: 1 [ 67.222958][ T29] usb usb7-port1: unable to enumerate USB device [ 67.240745][ T6532] syz.0.164 (6532): drop_caches: 1 [ 67.405952][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 67.405963][ T40] audit: type=1400 audit(1749142502.669:1109): avc: denied { mount } for pid=6555 comm="syz.3.172" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.430368][ T40] audit: type=1400 audit(1749142502.689:1110): avc: denied { unmount } for pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.492504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.516534][ T40] audit: type=1400 audit(1749142502.779:1111): avc: denied { write } for pid=6566 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.751228][ T40] audit: type=1400 audit(1749142503.009:1112): avc: denied { bind } for pid=6578 comm="syz.3.179" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.757412][ T40] audit: type=1400 audit(1749142503.009:1113): avc: denied { name_bind } for pid=6578 comm="syz.3.179" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.763840][ T40] audit: type=1400 audit(1749142503.009:1114): avc: denied { node_bind } for pid=6578 comm="syz.3.179" saddr=ff02::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 67.770539][ T40] audit: type=1400 audit(1749142503.019:1115): avc: denied { write } for pid=6578 comm="syz.3.179" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.004878][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.152309][ T59] usb 8-1: Using ep0 maxpacket: 8 [ 68.155520][ T59] usb 8-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 68.159513][ T59] usb 8-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 68.163323][ T59] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 68.166802][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.378937][ T6579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.179'. [ 68.434231][ T6579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.439253][ T6579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.445843][ T6579] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 68.452710][ T6579] bond0 (unregistering): Released all slaves [ 68.509092][ T838] usb 8-1: USB disconnect, device number 4 [ 68.567961][ T6597] block device autoloading is deprecated and will be removed. [ 68.575710][ T6598] Bluetooth: Invalid esc byte 0x05 [ 68.654409][ T40] audit: type=1400 audit(1749142503.919:1116): avc: denied { setattr } for pid=6608 comm="syz.0.187" name="seq" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 68.656617][ T6609] Bluetooth: MGMT ver 1.23 [ 68.663866][ T40] audit: type=1400 audit(1749142503.919:1117): avc: denied { write } for pid=6608 comm="syz.0.187" path="socket:[11063]" dev="sockfs" ino=11063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.728784][ T6612] qnx6: unable to set blocksize [ 68.902329][ T40] audit: type=1400 audit(1749142504.159:1118): avc: denied { create } for pid=6624 comm="syz.0.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.068389][ T6637] ªªªªªªaaaaaaaaa: renamed from lo (while UP) [ 69.074036][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 69.078064][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.194'. [ 69.080895][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.194'. [ 69.112316][ T59] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 69.223710][ T6641] netlink: 52 bytes leftover after parsing attributes in process `syz.3.196'. [ 69.239577][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 69.272299][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 69.275351][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.278734][ T59] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.281555][ T59] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 69.285313][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.289769][ T59] usb 7-1: config 0 descriptor?? [ 69.296986][ T6648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6648 comm=syz.3.198 [ 69.304739][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 69.309499][ T6648] bridge_slave_1: left allmulticast mode [ 69.311305][ T6648] bridge_slave_1: left promiscuous mode [ 69.314778][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.318903][ T6648] bridge_slave_0: left allmulticast mode [ 69.320726][ T6648] bridge_slave_0: left promiscuous mode [ 69.322801][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.495345][ T59] usb 7-1: USB disconnect, device number 6 [ 69.602771][ T838] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 69.732382][ T838] usb 8-1: device descriptor read/64, error -71 [ 69.884251][ T6672] binder: 6671:6672 unknown command 0 [ 69.886577][ T6672] binder: 6671:6672 ioctl c0306201 200000000180 returned -22 [ 69.951119][ T6673] binder: 6671:6673 ioctl 400454ca 200000000000 returned -22 [ 69.972361][ T838] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 70.102346][ T838] usb 8-1: device descriptor read/64, error -71 [ 70.222742][ T838] usb usb8-port1: attempt power cycle [ 70.573288][ T838] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 70.603138][ T838] usb 8-1: device descriptor read/8, error -71 [ 70.733116][ T63] Bluetooth: hci0: command tx timeout [ 70.842320][ T838] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 70.876170][ T838] usb 8-1: device descriptor read/8, error -71 [ 70.982444][ T838] usb usb8-port1: unable to enumerate USB device [ 71.055470][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.057523][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.303631][ T6695] tipc: Started in network mode [ 71.305559][ T6695] tipc: Node identity 7f000001, cluster identity 4711 [ 71.308013][ T6695] tipc: New replicast peer: 0.0.0.0 [ 71.310709][ T6695] tipc: Enabled bearer , priority 10 [ 71.497012][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.501056][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.505982][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.508847][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.511790][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.514875][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.517870][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.217'. [ 71.704603][ T6727] capability: warning: `syz.0.222' uses deprecated v2 capabilities in a way that may be insecure [ 72.003464][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 72.006226][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 72.049578][ T6767] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 72.052588][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.056662][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 72.060421][ T6767] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 72.062522][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.065131][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 72.067999][ T6767] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 72.070052][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.073626][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 72.076081][ T6767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.079877][ T6767] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 72.081953][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.084535][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 72.087906][ T6767] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 72.089980][ T6767] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 72.092641][ T6767] vhci_hcd vhci_hcd.0: Device attached [ 72.095049][ T6767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.098503][ T6767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.101396][ T6767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.106962][ T6767] vhci_hcd vhci_hcd.0: port 0 already used [ 72.115392][ T6774] vhci_hcd: connection closed [ 72.115780][ T6772] vhci_hcd: connection closed [ 72.117148][ T60] vhci_hcd: stop threads [ 72.117187][ T6770] vhci_hcd: connection closed [ 72.118200][ T6768] vhci_hcd: connection closed [ 72.118386][ T6776] vhci_hcd: connection closed [ 72.119434][ T60] vhci_hcd: release socket [ 72.128664][ T60] vhci_hcd: disconnect device [ 72.131477][ T60] vhci_hcd: stop threads [ 72.133305][ T60] vhci_hcd: release socket [ 72.135087][ T60] vhci_hcd: disconnect device [ 72.137258][ T60] vhci_hcd: stop threads [ 72.138789][ T60] vhci_hcd: release socket [ 72.140313][ T60] vhci_hcd: disconnect device [ 72.142796][ T60] vhci_hcd: stop threads [ 72.144412][ T60] vhci_hcd: release socket [ 72.145895][ T60] vhci_hcd: disconnect device [ 72.147559][ T60] vhci_hcd: stop threads [ 72.148981][ T60] vhci_hcd: release socket [ 72.150766][ T60] vhci_hcd: disconnect device [ 72.254207][ T838] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.302974][ T1347] tipc: Node number set to 2130706433 [ 72.412342][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 72.415325][ T838] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 72.417780][ T838] usb 5-1: config 0 has no interface number 0 [ 72.419686][ T838] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.423272][ T838] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.427542][ T838] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 72.430398][ T838] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 72.433136][ T838] usb 5-1: Product: syz [ 72.434480][ T838] usb 5-1: SerialNumber: syz [ 72.437682][ T838] usb 5-1: config 0 descriptor?? [ 72.441574][ T838] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 72.445043][ T838] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input6 [ 72.452549][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 72.452558][ T40] audit: type=1400 audit(1749142507.719:1156): avc: denied { read } for pid=5339 comm="acpid" name="event4" dev="devtmpfs" ino=2874 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.462121][ T40] audit: type=1400 audit(1749142507.719:1157): avc: denied { open } for pid=5339 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2874 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.471296][ T40] audit: type=1400 audit(1749142507.719:1158): avc: denied { ioctl } for pid=5339 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2874 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.642917][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 72.984302][ T6789] netlink: 'syz.2.240': attribute type 1 has an invalid length. [ 72.986812][ T6789] netlink: 224 bytes leftover after parsing attributes in process `syz.2.240'. [ 73.671327][ T40] audit: type=1400 audit(1749142508.929:1159): avc: denied { mount } for pid=6826 comm="syz.2.251" name="/" dev="configfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.677547][ T6827] pimreg: entered allmulticast mode [ 73.752335][ T59] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 73.785103][ T40] audit: type=1400 audit(1749142509.049:1160): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.903511][ T59] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 73.906737][ T59] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 73.909893][ T59] usb 8-1: config 1 interface 0 has no altsetting 0 [ 73.983677][ T40] audit: type=1400 audit(1749142509.249:1161): avc: denied { read open } for pid=6839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.995682][ T40] audit: type=1400 audit(1749142509.249:1162): avc: denied { getattr } for pid=6839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1904 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.005845][ T40] audit: type=1400 audit(1749142509.249:1163): avc: denied { add_name } for pid=6836 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.012893][ T40] audit: type=1400 audit(1749142509.249:1164): avc: denied { create } for pid=6836 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.019870][ T40] audit: type=1400 audit(1749142509.249:1165): avc: denied { write } for pid=6836 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=2617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.209989][ T6859] mmap: syz.2.258 (6859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.264328][ T6862] 9pnet: Could not find request transport: f [ 74.437617][ T6874] sctp: [Deprecated]: syz.2.263 (pid 6874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 74.437617][ T6874] Use struct sctp_sack_info instead [ 74.445253][ T6874] overlay: Bad value for 'workdir' [ 75.008178][ T6010] usb 5-1: USB disconnect, device number 4 [ 75.014332][ T6010] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 75.232313][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 75.386650][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.389514][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.392008][ T10] usb 7-1: Product: syz [ 75.393440][ T10] usb 7-1: Manufacturer: syz [ 75.394934][ T10] usb 7-1: SerialNumber: syz [ 75.399619][ T10] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.424790][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.644180][ T838] usb 7-1: USB disconnect, device number 7 [ 76.128512][ T6942] tmpfs: Unknown parameter 'noswap1' [ 76.129862][ T6940] tmpfs: Unknown parameter 'noswap1' [ 76.482465][ T6010] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.502502][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 76.505609][ T10] ath9k_htc: Failed to initialize the device [ 76.511709][ T59] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.512414][ T838] usb 7-1: ath9k_htc: USB layer deinitialized [ 76.521185][ T59] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.523853][ T59] usb 8-1: Product: 雧鳱ሾჄૼç½îž‘㿻扄蒤è§î‰¦â‚¯ë°¶í‰¹å–¿ì†• [ 76.526541][ T59] usb 8-1: Manufacturer: 㥘闯嬺짋á¯ï‡´êã¯æªªâ­¾è«éŠˆï„Ÿç´–შ∜ᑠì¢ïº€î«¼é¬½á‡¢áŽâ¦µî—邬礘ä’ឞ戗ã‰â¶›Ô à»»æª­â‘šïµŠì ‚ì»’çƒï¸’㧀㵘疱႖馹é’醳 [ 76.538752][ T59] usb 8-1: can't set config #1, error -71 [ 76.546613][ T59] usb 8-1: USB disconnect, device number 9 [ 76.549783][ T6972] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 76.552546][ T6972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.557871][ T6972] vhci_hcd vhci_hcd.0: Device attached [ 76.642291][ T6010] usb 5-1: Using ep0 maxpacket: 8 [ 76.645181][ T6010] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.648682][ T6010] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.651925][ T6010] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.655048][ T6010] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.659893][ T6010] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.664090][ T6010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.721609][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 76.724591][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 76.802609][ T837] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 76.862396][ T838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 76.881098][ T6010] usb 5-1: usb_control_msg returned -71 [ 76.883946][ T6010] usbtmc 5-1:16.0: can't read capabilities [ 76.890737][ T6010] usb 5-1: USB disconnect, device number 5 [ 77.014216][ T6990] input: syz0 as /devices/virtual/input/input7 [ 77.019741][ T838] usb 7-1: config 0 has no interfaces? [ 77.021555][ T838] usb 7-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 77.027348][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.032054][ T838] usb 7-1: config 0 descriptor?? [ 77.139510][ T6997] xt_hashlimit: size too large, truncated to 1048576 [ 77.241449][ T6973] usb 41-1: recv xbuf, 0 [ 77.249579][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 77.254869][ T59] usb 7-1: USB disconnect, device number 8 [ 77.262053][ T71] vhci_hcd: stop threads [ 77.263720][ T71] vhci_hcd: release socket [ 77.265885][ T71] vhci_hcd: disconnect device [ 77.333591][ T837] vhci_hcd: vhci_device speed not set [ 77.364143][ T7016] bridge0: port 3(batadv0) entered blocking state [ 77.367423][ T7016] bridge0: port 3(batadv0) entered disabled state [ 77.369733][ T7016] batadv0: entered allmulticast mode [ 77.372383][ T7016] batadv0: entered promiscuous mode [ 77.374619][ T7016] bridge0: port 3(batadv0) entered blocking state [ 77.376850][ T7016] bridge0: port 3(batadv0) entered forwarding state [ 77.467069][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 77.467084][ T40] audit: type=1400 audit(1749142512.729:1190): avc: denied { create } for pid=7025 comm="syz.0.301" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.506655][ T40] audit: type=1400 audit(1749142512.769:1191): avc: denied { write } for pid=7028 comm="syz.0.302" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.515241][ T40] audit: type=1400 audit(1749142512.769:1192): avc: denied { open } for pid=7028 comm="syz.0.302" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.523022][ T40] audit: type=1400 audit(1749142512.769:1193): avc: denied { execute } for pid=7033 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.531033][ T40] audit: type=1400 audit(1749142512.769:1194): avc: denied { execute_no_trans } for pid=7033 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 77.539199][ T40] audit: type=1400 audit(1749142512.789:1195): avc: denied { ioctl } for pid=7028 comm="syz.0.302" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 77.595146][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 77.598376][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 77.677073][ T40] audit: type=1400 audit(1749142512.939:1196): avc: denied { setopt } for pid=7040 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.678608][ T10] IPVS: starting estimator thread 0... [ 77.802396][ T7045] IPVS: using max 46 ests per chain, 110400 per kthread [ 78.070619][ T40] audit: type=1400 audit(1749142513.329:1197): avc: denied { execute } for pid=7069 comm="syz.0.312" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 78.192134][ T40] audit: type=1400 audit(1749142513.449:1198): avc: denied { name_connect } for pid=7076 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 78.206604][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.314'. [ 78.243329][ T1024] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 78.267930][ T7088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35550 sclass=netlink_route_socket pid=7088 comm=syz.0.317 [ 78.316374][ T7095] tmpfs: Unknown parameter 'mp' [ 78.404618][ T40] audit: type=1326 audit(1749142513.669:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.320" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccc458e929 code=0x0 [ 78.404693][ T1024] usb 8-1: Using ep0 maxpacket: 16 [ 78.416169][ T1024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.419549][ T1024] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.423110][ T1024] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.428216][ T1024] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.431802][ T1024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.437952][ T1024] usb 8-1: config 0 descriptor?? [ 78.644328][ T7067] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.682795][ T7118] netlink: 'syz.0.321': attribute type 11 has an invalid length. [ 78.706356][ T1024] usbhid 8-1:0.0: can't add hid device: -71 [ 78.708274][ T1024] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 78.717460][ T1024] usb 8-1: USB disconnect, device number 10 [ 78.819971][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7132 comm=syz.3.323 [ 78.824097][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7132 comm=syz.3.323 [ 78.875395][ T63] Bluetooth: hci1: ACL packet too small [ 79.132453][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 79.132460][ T63] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.132504][ T52] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 79.156060][ T7150] ref_ctr increment failed for inode: 0x1ca offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802d3b0000 [ 79.175904][ T7147] uprobe: syz.3.330:7147 failed to unregister, leaking uprobe [ 79.360387][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 79.371148][ T7171] syz.3.338: attempt to access beyond end of device [ 79.371148][ T7171] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 79.376576][ T7171] (syz.3.338,7171,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 79.379636][ T7171] (syz.3.338,7171,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 79.383181][ T7171] (syz.3.338,7171,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 79.386783][ T7171] (syz.3.338,7171,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 79.491535][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 79.491567][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.345'. [ 79.491591][ T7189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.345'. [ 79.551860][ T7198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 79.838223][ T7217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'. [ 79.962379][ T1024] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 80.112353][ T1024] usb 7-1: Using ep0 maxpacket: 16 [ 80.116223][ T1024] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.122383][ T1024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.127148][ T1024] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 80.136619][ T1024] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.140567][ T1024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.145629][ T1024] usb 7-1: SerialNumber: syz [ 80.156650][ T1024] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 80.226339][ T7234] Cannot find add_set index 4 as target [ 80.365967][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.370681][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.476273][ T1024] usb 7-1: USB disconnect, device number 9 [ 80.603931][ T7261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.361'. [ 80.812731][ T59] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 80.932358][ T1024] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 80.984236][ T59] usb 5-1: not running at top speed; connect to a high speed hub [ 80.987691][ T59] usb 5-1: config 94 has an invalid interface number: 97 but max is 1 [ 80.990323][ T59] usb 5-1: config 94 has an invalid interface number: 20 but max is 1 [ 80.993302][ T59] usb 5-1: config 94 has an invalid interface association descriptor of length 4, skipping [ 80.997117][ T59] usb 5-1: config 94 has no interface number 0 [ 80.999051][ T59] usb 5-1: config 94 has no interface number 1 [ 81.000972][ T59] usb 5-1: config 94 interface 97 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 81.004560][ T59] usb 5-1: config 94 interface 20 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 81.007903][ T59] usb 5-1: config 94 interface 20 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 81.012354][ T59] usb 5-1: config 94 interface 20 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 81.016816][ T59] usb 5-1: config 94 interface 20 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 81.021185][ T59] usb 5-1: config 94 interface 20 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 81.025866][ T59] usb 5-1: config 94 interface 20 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 81.030166][ T59] usb 5-1: config 94 interface 20 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 81.034395][ T59] usb 5-1: config 94 interface 20 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 81.038566][ T59] usb 5-1: config 94 interface 20 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 81.042854][ T59] usb 5-1: config 94 interface 97 has no altsetting 0 [ 81.045706][ T59] usb 5-1: config 94 interface 20 has no altsetting 0 [ 81.050253][ T59] usb 5-1: New USB device found, idVendor=0fcf, idProduct=1008, bcdDevice=e5.32 [ 81.054302][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.057591][ T59] usb 5-1: Product: syz [ 81.059337][ T59] usb 5-1: Manufacturer: syz [ 81.060944][ T59] usb 5-1: SerialNumber: syz [ 81.094097][ T1024] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.097259][ T1024] usb 7-1: config 0 has no interface number 0 [ 81.099773][ T1024] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 81.104329][ T1024] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.108307][ T1024] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 81.112017][ T1024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.117877][ T1024] usb 7-1: config 0 descriptor?? [ 81.126655][ T1024] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 81.212395][ T52] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 81.214885][ T52] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 81.270220][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.274268][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.285974][ T59] usb_serial_simple 5-1:94.97: suunto converter detected [ 81.296026][ T59] usb 5-1: suunto converter now attached to ttyUSB0 [ 81.309966][ T1350] cfg80211: failed to load regulatory.db [ 81.312758][ T59] usb_serial_simple 5-1:94.20: suunto converter detected [ 81.319939][ T59] usb 5-1: suunto converter now attached to ttyUSB1 [ 81.327115][ T7266] iowarrior 7-1:0.1: Error -90 while submitting URB [ 81.334620][ T59] usb 5-1: USB disconnect, device number 6 [ 81.347960][ T59] suunto ttyUSB0: suunto converter now disconnected from ttyUSB0 [ 81.351746][ T59] usb_serial_simple 5-1:94.97: device disconnected [ 81.359160][ T59] suunto ttyUSB1: suunto converter now disconnected from ttyUSB1 [ 81.362433][ T59] usb_serial_simple 5-1:94.20: device disconnected [ 81.397661][ T7275] overlayfs: failed to resolve './file1': -2 [ 81.640771][ T7286] vivid-000: disconnect [ 81.642796][ T7286] vivid-000: reconnect [ 81.722863][ T7291] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 81.727077][ T7291] VFS: Can't find a romfs filesystem on dev nullb0. [ 81.727077][ T7291] [ 82.013700][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.380'. [ 82.213580][ T7324] netlink: 'syz.0.383': attribute type 39 has an invalid length. [ 82.551646][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 82.551660][ T40] audit: type=1326 audit(1749142517.809:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.386" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7909f8e929 code=0x0 [ 83.076121][ T40] audit: type=1400 audit(1749142518.339:1224): avc: denied { ioctl } for pid=7335 comm="syz.3.388" path="socket:[16170]" dev="sockfs" ino=16170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.292455][ T52] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 83.292466][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.294583][ T52] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 83.364579][ T7346] Process accounting resumed [ 83.396637][ T7349] netlink: 'syz.3.392': attribute type 4 has an invalid length. [ 83.403327][ T7349] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 83.408596][ T7349] team0: Cannot enslave team device to itself [ 83.431433][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.444566][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.448000][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.453136][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.457301][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.472688][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.476424][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.480045][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.483585][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.486896][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.588471][ T7371] batadv_slave_1: entered promiscuous mode [ 83.591737][ T7370] batadv_slave_1: left promiscuous mode [ 83.615400][ T7043] chnl_net:caif_netlink_parms(): no params data found [ 83.656360][ T7377] random: crng reseeded on system resumption [ 83.697343][ T837] usb 7-1: USB disconnect, device number 10 [ 83.708433][ T7043] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.710873][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.713811][ T7043] bridge_slave_0: entered allmulticast mode [ 83.717793][ T7043] bridge_slave_0: entered promiscuous mode [ 83.721879][ T7043] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.724546][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.727177][ T7043] bridge_slave_1: entered allmulticast mode [ 83.730347][ T7043] bridge_slave_1: entered promiscuous mode [ 83.785042][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.811702][ T7043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.826890][ T7043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.870027][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.880738][ T7043] team0: Port device team_slave_0 added [ 83.895588][ T7043] team0: Port device team_slave_1 added [ 83.925890][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.928162][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.936431][ T7043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.940930][ T7043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.944410][ T7043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.952737][ T7043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.968951][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.010883][ T7043] hsr_slave_0: entered promiscuous mode [ 84.013220][ T7043] hsr_slave_1: entered promiscuous mode [ 84.015323][ T7043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.017701][ T7043] Cannot create hsr debugfs directory [ 84.062677][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.141385][ T40] audit: type=1400 audit(1749142519.399:1225): avc: denied { module_request } for pid=7398 comm="syz.2.401" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.151742][ T7043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.164581][ T7043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.170555][ T7043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.180526][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 84.186108][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.199670][ T7043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.199704][ T7404] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.292692][ T1144] bridge_slave_1: left allmulticast mode [ 84.294687][ T1144] bridge_slave_1: left promiscuous mode [ 84.297296][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.308045][ T1144] bridge_slave_0: left allmulticast mode [ 84.309897][ T1144] bridge_slave_0: left promiscuous mode [ 84.311946][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.501572][ T7421] net_ratelimit: 1 callbacks suppressed [ 84.501583][ T7421] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 84.614439][ T40] audit: type=1400 audit(1749142519.879:1226): avc: denied { create } for pid=7426 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.620360][ T40] audit: type=1400 audit(1749142519.879:1227): avc: denied { accept } for pid=7426 comm="syz.2.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 84.699730][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.705112][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.710256][ T1144] bond0 (unregistering): Released all slaves [ 84.827224][ T7043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.846493][ T7043] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.905847][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.909412][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.926067][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.929002][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.977548][ T7452] cdrom: dropping to single frame dma [ 84.980530][ T7043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.984247][ T7043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.112469][ T1144] hsr_slave_0: left promiscuous mode [ 85.119751][ T1144] hsr_slave_1: left promiscuous mode [ 85.121886][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.128980][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.140316][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.143976][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.166191][ T1144] veth1_macvtap: left promiscuous mode [ 85.168181][ T1144] veth0_macvtap: left promiscuous mode [ 85.169975][ T1144] veth1_vlan: left promiscuous mode [ 85.172024][ T1144] veth0_vlan: left promiscuous mode [ 85.339311][ T7488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.544041][ T63] Bluetooth: hci4: command tx timeout [ 85.746642][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 85.777932][ T40] audit: type=1400 audit(1749142521.039:1228): avc: denied { block_suspend } for pid=7502 comm="syz.2.425" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.816735][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 86.354519][ T7043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.357636][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.418'. [ 86.492720][ T40] audit: type=1400 audit(1749142521.749:1229): avc: denied { read } for pid=7526 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.538125][ T7043] veth0_vlan: entered promiscuous mode [ 86.543228][ T7043] veth1_vlan: entered promiscuous mode [ 86.576068][ T7043] veth0_macvtap: entered promiscuous mode [ 86.579919][ T7043] veth1_macvtap: entered promiscuous mode [ 86.588452][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.595751][ T7043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.600266][ T7043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.609527][ T7043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.612198][ T7043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.615284][ T7043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.680577][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.690226][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.726500][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.727485][ T7551] netlink: 'syz.0.435': attribute type 1 has an invalid length. [ 86.729207][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.741747][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 86.746702][ T7551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.753614][ T7556] netlink: 7 bytes leftover after parsing attributes in process `syz.2.436'. [ 86.755375][ T40] audit: type=1400 audit(1749142522.019:1230): avc: denied { mounton } for pid=7043 comm="syz-executor" path="/syzkaller.qXwWcv/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 86.782692][ T7551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.785518][ T7551] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 86.791499][ T7551] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 86.832030][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 86.845175][ T7566] bond2: (slave dummy0): making interface the new active one [ 86.847811][ T7566] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 86.856071][ T40] audit: type=1400 audit(1749142522.119:1231): avc: denied { bind } for pid=7550 comm="syz.0.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 86.875468][ T40] audit: type=1400 audit(1749142522.139:1232): avc: denied { ioctl } for pid=7569 comm="syz.4.303" path="socket:[18759]" dev="sockfs" ino=18759 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.941002][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.033282][ T7586] binder: 7584:7586 ioctl 641e 0 returned -22 [ 87.033543][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.062045][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 87.104525][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.184542][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 87.194016][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.196547][ T7601] syz_tun: entered allmulticast mode [ 87.208309][ T7602] syz_tun (unregistering): left allmulticast mode [ 87.254750][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.315761][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.401826][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.456269][ T7553] xt_hashlimit: size too large, truncated to 1048576 [ 87.623459][ T63] Bluetooth: hci4: command tx timeout [ 87.655967][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 87.655985][ T40] audit: type=1400 audit(1749142522.919:1237): avc: denied { call } for pid=7637 comm="syz.2.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 88.008998][ T7660] atomic_op ffff888055b8e998 conn xmit_atomic 0000000000000000 [ 88.010071][ T40] audit: type=1400 audit(1749142523.269:1238): avc: denied { write } for pid=7659 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.083833][ T7668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.124123][ T40] audit: type=1326 audit(1749142523.389:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.2.450" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccc458e929 code=0x0 [ 88.137833][ T40] audit: type=1400 audit(1749142523.389:1240): avc: denied { write } for pid=7672 comm="syz.0.449" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.177803][ T7683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.450'. [ 88.202644][ T7686] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 88.205716][ T7686] veth1_macvtap: left promiscuous mode [ 88.377295][ T7693] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 88.379818][ T7693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.382379][ T7693] vhci_hcd vhci_hcd.0: Device attached [ 88.385695][ T7694] vhci_hcd: connection closed [ 88.385804][ T71] vhci_hcd: stop threads [ 88.388700][ T71] vhci_hcd: release socket [ 88.390116][ T71] vhci_hcd: disconnect device [ 88.477008][ T40] audit: type=1400 audit(1749142523.802:1241): avc: denied { create } for pid=7696 comm="syz.0.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 88.487393][ T40] audit: type=1400 audit(1749142523.812:1242): avc: denied { sys_admin } for pid=7696 comm="syz.0.457" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 88.741699][ T40] audit: type=1400 audit(1749142524.062:1243): avc: denied { write } for pid=7701 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.743633][ T7702] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 88.757864][ T7702] tap0: tun_chr_ioctl cmd 1074025675 [ 88.759689][ T7702] tap0: persist enabled [ 88.761211][ T7702] tap0: tun_chr_ioctl cmd 1074025675 [ 88.764222][ T7702] tap0: persist disabled [ 89.005093][ T7722] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 89.007779][ T7722] netlink: 'syz.0.464': attribute type 4 has an invalid length. [ 89.010266][ T7722] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.464'. [ 89.028745][ T7724] evm: overlay not supported [ 89.157696][ T40] audit: type=1400 audit(1749142524.482:1244): avc: denied { setopt } for pid=7739 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 89.243607][ T7747] netlink: 'syz.2.473': attribute type 11 has an invalid length. [ 89.247187][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 89.260841][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 89.482380][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 89.523766][ T7767] netlink: 'syz.3.480': attribute type 16 has an invalid length. [ 89.526941][ T7767] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.480'. [ 89.621399][ T40] audit: type=1400 audit(1749142524.942:1245): avc: denied { setopt } for pid=7777 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.632301][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 89.634369][ T40] audit: type=1400 audit(1749142524.942:1246): avc: denied { connect } for pid=7777 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 89.653330][ T10] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 89.656496][ T10] usb 7-1: config 0 has no interface number 0 [ 89.658473][ T10] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.661981][ T10] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.666804][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 89.669668][ T10] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 89.672208][ T10] usb 7-1: Product: syz [ 89.673879][ T10] usb 7-1: SerialNumber: syz [ 89.676673][ T10] usb 7-1: config 0 descriptor?? [ 89.681935][ T10] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 89.685335][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input9 [ 89.692404][ T63] Bluetooth: hci4: command tx timeout [ 89.728390][ T7787] unknown channel width for channel at 909000KHz? [ 89.736722][ T7787] fuse: Bad value for 'rootmode' [ 89.740960][ T7787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.485'. [ 89.835210][ T7792] netlink: 232 bytes leftover after parsing attributes in process `syz.3.487'. [ 89.846033][ T7792] tmpfs: Unknown parameter 'hugô`£ÍFöÄ' [ 89.883183][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.886351][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.888674][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.891008][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.893433][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.895879][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.896865][ T7794] --map-set only usable from mangle table [ 89.898200][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.903115][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 89.905313][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 89.907809][ T10] usb 7-1: USB disconnect, device number 11 [ 89.910200][ T10] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 90.339839][ T7841] program syz.3.499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.443160][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.592419][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 90.603629][ T10] usb 5-1: config 0 has an invalid interface number: 22 but max is 3 [ 90.606900][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 3 [ 90.610672][ T10] usb 5-1: config 0 has an invalid interface number: 5 but max is 3 [ 90.614355][ T10] usb 5-1: config 0 has an invalid interface number: 101 but max is 3 [ 90.617600][ T10] usb 5-1: config 0 has no interface number 0 [ 90.620119][ T10] usb 5-1: config 0 has no interface number 1 [ 90.623170][ T10] usb 5-1: config 0 has no interface number 2 [ 90.625919][ T10] usb 5-1: config 0 has no interface number 3 [ 90.628581][ T10] usb 5-1: config 0 interface 22 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 90.632463][ T10] usb 5-1: config 0 interface 22 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 90.636831][ T10] usb 5-1: config 0 interface 22 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 90.640814][ T10] usb 5-1: config 0 interface 22 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 90.646465][ T10] usb 5-1: config 0 interface 22 altsetting 2 has an endpoint descriptor with address 0x61, changing to 0x1 [ 90.650726][ T10] usb 5-1: config 0 interface 22 altsetting 2 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 90.654819][ T10] usb 5-1: config 0 interface 22 altsetting 2 endpoint 0x1 has invalid maxpacket 58591, setting to 1024 [ 90.658690][ T10] usb 5-1: config 0 interface 22 altsetting 2 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 90.663124][ T10] usb 5-1: config 0 interface 22 altsetting 2 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 90.668039][ T10] usb 5-1: config 0 interface 132 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 90.668063][ T10] usb 5-1: config 0 interface 132 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 90.668083][ T10] usb 5-1: config 0 interface 132 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 90.668102][ T10] usb 5-1: config 0 interface 132 altsetting 5 endpoint 0x8D has invalid maxpacket 1024, setting to 64 [ 90.668124][ T10] usb 5-1: config 0 interface 132 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 90.668143][ T10] usb 5-1: config 0 interface 132 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 90.668160][ T10] usb 5-1: config 0 interface 132 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 90.668176][ T10] usb 5-1: config 0 interface 132 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 90.668203][ T10] usb 5-1: config 0 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 90.668220][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 90.668239][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 90.668255][ T10] usb 5-1: config 0 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 90.709430][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 90.709454][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 90.709475][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 90.709493][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 90.709509][ T10] usb 5-1: config 0 interface 5 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 90.709526][ T10] usb 5-1: config 0 interface 5 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 90.709544][ T10] usb 5-1: config 0 interface 22 has no altsetting 0 [ 90.709560][ T10] usb 5-1: config 0 interface 132 has no altsetting 0 [ 90.709603][ T10] usb 5-1: config 0 interface 5 has no altsetting 0 [ 90.709619][ T10] usb 5-1: config 0 interface 101 has no altsetting 0 [ 90.710286][ T10] usb 5-1: string descriptor 0 read error: -22 [ 90.710387][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=64.80 [ 90.710437][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.714845][ T10] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 90.727451][ T7868] loop6: detected capacity change from 0 to 63 [ 90.728678][ T10] usb 5-1: no configuration chosen from 1 choice [ 90.746446][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.776891][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.777320][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.782102][ T7873] netlink: 156 bytes leftover after parsing attributes in process `syz.4.507'. [ 90.784643][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.791684][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.798693][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.798946][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.799174][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.799397][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.799686][ T6123] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.838256][ T7877] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 91.120774][ T7900] No source specified [ 91.142557][ T34] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 91.295091][ T34] usb 8-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 91.299860][ T34] usb 8-1: config 1 interface 0 has no altsetting 0 [ 91.306544][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.310448][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.314068][ T34] usb 8-1: Product: syz [ 91.316003][ T34] usb 8-1: Manufacturer: syz [ 91.318137][ T34] usb 8-1: SerialNumber: syz [ 91.324376][ T7881] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.470801][ T7922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.502392][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 91.542849][ T34] usb 8-1: USB disconnect, device number 11 [ 91.662706][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 91.667426][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 91.671420][ T24] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 91.677633][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.681241][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.684861][ T24] usb 7-1: Product: à°š [ 91.686590][ T24] usb 7-1: Manufacturer: á [ 91.688548][ T24] usb 7-1: SerialNumber: И [ 91.782489][ T63] Bluetooth: hci4: command tx timeout [ 91.904460][ T24] cdc_ncm 7-1:1.0: bind() failure [ 91.908537][ T24] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 91.910660][ T24] cdc_ncm 7-1:1.1: bind() failure [ 91.914346][ T24] usb 7-1: USB disconnect, device number 12 [ 92.330019][ T7929] tipc: Started in network mode [ 92.332194][ T7929] tipc: Node identity 7f000001, cluster identity 4711 [ 92.335760][ T7929] tipc: New replicast peer: 0.0.0.0 [ 92.338545][ T7929] tipc: Enabled bearer , priority 10 [ 92.350742][ T7929] overlay: filesystem on ./file0 is read-only [ 92.505519][ T7932] syz.2.525: attempt to access beyond end of device [ 92.505519][ T7932] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 92.512050][ T7932] XFS (loop2): SB validate failed with error -5. [ 92.544853][ T7932] program syz.2.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.548851][ T7932] ata1.00: non-matching transfer count (32/0) [ 92.553205][ T7932] fuse: Bad value for 'group_id' [ 92.555211][ T7932] fuse: Bad value for 'group_id' [ 92.773550][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 92.773561][ T40] audit: type=1400 audit(1749142528.102:1271): avc: denied { create } for pid=7955 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.020136][ T7981] __nla_validate_parse: 3 callbacks suppressed [ 93.020152][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 93.214590][ T7994] tap0: tun_chr_ioctl cmd 1074025675 [ 93.216784][ T7994] tap0: persist enabled [ 93.218585][ T7994] tap0: tun_chr_ioctl cmd 1074025675 [ 93.220758][ T7994] tap0: persist disabled [ 93.225174][ T7994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.537'. [ 93.232723][ T10] usb 5-1: USB disconnect, device number 7 [ 93.274680][ T7996] netlink: 'syz.0.538': attribute type 11 has an invalid length. [ 93.343986][ T6002] tipc: Node number set to 2130706433 [ 93.349178][ T8008] netlink: 36 bytes leftover after parsing attributes in process `syz.4.541'. [ 93.386649][ T8012] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 93.468597][ T8016] veth3: entered promiscuous mode [ 93.651412][ T8032] tipc: Started in network mode [ 93.654130][ T8032] tipc: Node identity , cluster identity 4711 [ 93.656637][ T8032] tipc: Failed to obtain node identity [ 93.659003][ T8032] tipc: Enabling of bearer rejected, failed to enable media [ 93.668066][ T40] audit: type=1400 audit(1749142528.992:1272): avc: denied { map } for pid=8033 comm="syz.4.546" path="socket:[20036]" dev="sockfs" ino=20036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 93.850617][ T8045] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 93.872932][ T8045] bond0: (slave bond_slave_0): Releasing backup interface [ 93.879969][ T8045] bond4: (slave bond_slave_0): Enslaving as a backup interface with an up link [ 93.995663][ T40] audit: type=1400 audit(1749142529.322:1273): avc: denied { validate_trans } for pid=8058 comm="syz.4.553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.037331][ T8062] hashlimit_mt_check_common: 1 callbacks suppressed [ 94.037343][ T8062] xt_hashlimit: size too large, truncated to 1048576 [ 94.176544][ T40] audit: type=1326 audit(1749142529.502:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.558" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7909f8e929 code=0x0 [ 94.193132][ T40] audit: type=1400 audit(1749142529.522:1275): avc: denied { connect } for pid=8084 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.208231][ T8085] befs: (nullb0): No write support. Marking filesystem read-only [ 94.211756][ T8085] befs: (nullb0): invalid magic header [ 94.246090][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 94.286388][ T40] audit: type=1400 audit(1749142529.612:1276): avc: denied { create } for pid=8086 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.296668][ T59] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 94.300374][ T40] audit: type=1400 audit(1749142529.612:1277): avc: denied { getopt } for pid=8086 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.309175][ T40] audit: type=1400 audit(1749142529.642:1278): avc: denied { read write } for pid=8091 comm="syz.4.564" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.316873][ T63] Bluetooth: hci4: failed to read key size for handle 200 [ 94.316986][ T40] audit: type=1400 audit(1749142529.642:1279): avc: denied { open } for pid=8091 comm="syz.4.564" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.317010][ T40] audit: type=1400 audit(1749142529.642:1280): avc: denied { map } for pid=8091 comm="syz.4.564" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.393394][ T8098] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 94.396032][ T8098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.398058][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'. [ 94.408886][ T8100] netlink: 'syz.3.567': attribute type 29 has an invalid length. [ 94.415475][ T8101] netlink: 'syz.3.567': attribute type 29 has an invalid length. [ 94.435507][ T8101] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 94.442428][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 94.453344][ T59] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 94.456552][ T59] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 94.460122][ T59] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 94.464489][ T59] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 94.468574][ T59] usb 7-1: config 0 interface 0 has no altsetting 0 [ 94.475283][ T59] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 94.477977][ T59] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 94.480458][ T59] usb 7-1: Product: syz [ 94.481733][ T59] usb 7-1: Manufacturer: syz [ 94.483993][ T59] usb 7-1: SerialNumber: syz [ 94.492000][ T59] usb 7-1: config 0 descriptor?? [ 94.492861][ T8101] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8215 sclass=netlink_xfrm_socket pid=8101 comm=syz.3.567 [ 94.495723][ T59] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 94.506377][ T59] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.516887][ T8110] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 94.550156][ T8110] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 94.778330][ T8124] syz.4.574: attempt to access beyond end of device [ 94.778330][ T8124] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 94.782514][ T8124] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 95.051672][ T8130] ldusb 7-1:0.0: Write buffer overflow, 1 bytes dropped [ 95.260054][ T6002] usb 7-1: USB disconnect, device number 13 [ 95.264779][ T6002] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 95.722617][ T59] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 95.789145][ T8140] Cannot find del_set index 2 as target [ 95.793176][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.2.579'. [ 95.862719][ T59] usb 8-1: device descriptor read/64, error -71 [ 96.043458][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 96.112657][ T59] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 96.206926][ T24] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.210137][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.212886][ T24] usb 9-1: Product: syz [ 96.214229][ T24] usb 9-1: Manufacturer: syz [ 96.215666][ T24] usb 9-1: SerialNumber: syz [ 96.222457][ T24] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.242708][ T59] usb 8-1: device descriptor read/64, error -71 [ 96.246408][ T5984] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.303110][ T8166] Malformed UNC in devname [ 96.303110][ T8166] [ 96.305928][ T8166] CIFS: VFS: Malformed UNC in devname [ 96.310219][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 96.317889][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 96.352982][ T59] usb usb8-port1: attempt power cycle [ 96.456741][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.460821][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.702548][ T59] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 96.724975][ T59] usb 8-1: device descriptor read/8, error -71 [ 96.764070][ T34] usb 9-1: USB disconnect, device number 2 [ 96.972387][ T59] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 97.004629][ T59] usb 8-1: device descriptor read/8, error -71 [ 97.031793][ T8187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.071990][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 97.076342][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 97.114310][ T59] usb usb8-port1: unable to enumerate USB device [ 97.136963][ T8193] netlink: del zone limit has 4 unknown bytes [ 97.292483][ T5984] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 97.294900][ T5984] ath9k_htc: Failed to initialize the device [ 97.297269][ T34] usb 9-1: ath9k_htc: USB layer deinitialized [ 97.482016][ T8213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.536640][ T8223] input: syz1 as /devices/virtual/input/input12 [ 97.771211][ T8236] fuse: Bad value for 'fd' [ 97.776198][ T8236] netlink: 'syz.4.607': attribute type 21 has an invalid length. [ 97.945758][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 97.945777][ T40] audit: type=1400 audit(1749142533.272:1297): avc: denied { watch watch_reads } for pid=8238 comm="syz.4.608" path="/44" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 98.200202][ T8256] fuse: blksize only supported for fuseblk [ 98.239431][ T8258] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 98.279154][ T8261] __nla_validate_parse: 3 callbacks suppressed [ 98.279165][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 98.284689][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.615'. [ 98.377470][ T8267] xt_limit: Overflow, try lower: 1207959552/384 [ 98.387516][ T8269] overlay: ./bus is not a directory [ 98.550530][ T8288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.556933][ T8289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.804599][ T8308] fuse: Bad value for 'fd' [ 99.076627][ T40] audit: type=1400 audit(1749142534.402:1298): avc: denied { ioctl } for pid=8330 comm="syz.3.628" path="socket:[21845]" dev="sockfs" ino=21845 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.141593][ T8335] fuse: Bad value for 'fd' [ 99.405595][ T8347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.632'. [ 99.605995][ T8353] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 99.704852][ T8361] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 99.772330][ T40] audit: type=1400 audit(1749142535.092:1299): avc: denied { mounton } for pid=8369 comm="syz.3.640" path="/bus" dev="ramfs" ino=21884 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 99.777440][ T8370] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.782087][ T8370] overlayfs: failed to set xattr on upper [ 99.785231][ T8370] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.788139][ T8370] overlayfs: ...falling back to metacopy=off. [ 99.789044][ T40] audit: type=1400 audit(1749142535.112:1300): avc: denied { setopt } for pid=8371 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.790615][ T8370] overlayfs: ...falling back to index=off. [ 99.799520][ T40] audit: type=1400 audit(1749142535.122:1301): avc: denied { ioctl } for pid=8371 comm="syz.2.641" path="socket:[23664]" dev="sockfs" ino=23664 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.807350][ T8375] misc userio: Begin command sent, but we're already running [ 99.812845][ T8370] overlayfs: ...falling back to uuid=null. [ 99.816032][ T40] audit: type=1400 audit(1749142535.142:1302): avc: denied { execute } for pid=8373 comm="syz.4.642" path="/dev/userio" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.823935][ T40] audit: type=1400 audit(1749142535.142:1303): avc: denied { execute } for pid=8373 comm="syz.4.642" path="/dev/userio" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.852528][ T40] audit: type=1400 audit(1749142535.172:1304): avc: denied { ioctl } for pid=8379 comm="syz.2.643" path="socket:[22844]" dev="sockfs" ino=22844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.911011][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 99.989965][ T8401] tmpfs: Bad value for 'mode' [ 100.056555][ T8412] geneve2: entered promiscuous mode [ 100.118131][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 100.131934][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.225696][ T8419] bridge_slave_1 (unregistering): left allmulticast mode [ 100.228587][ T8419] bridge_slave_1 (unregistering): left promiscuous mode [ 100.231392][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.250977][ T40] audit: type=1400 audit(1749142535.572:1305): avc: denied { getopt } for pid=8423 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.286477][ T40] audit: type=1400 audit(1749142535.612:1306): avc: denied { read } for pid=8429 comm="syz.2.657" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.596602][ T8457] 9pnet_virtio: no channels available for device 127.0.0.1 [ 100.622397][ T8444] fuse: root generation should be zero [ 101.004374][ T8490] efs: device does not support 512 byte blocks [ 101.006790][ T8490] device does not support 512 byte blocks [ 101.006790][ T8490] [ 101.088037][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 101.218769][ T8503] process 'syz.3.677' launched '/dev/fd/5' with NULL argv: empty string added [ 101.338126][ T8511] sp0: Synchronizing with TNC [ 101.366017][ T8511] batadv_slave_1: entered promiscuous mode [ 101.369091][ T8511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 101.376897][ T8510] batadv_slave_1: left promiscuous mode [ 101.458885][ T8519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.684'. [ 101.465061][ T8519] netlink: 'syz.3.684': attribute type 4 has an invalid length. [ 101.611818][ T8532] xt_hashlimit: size too large, truncated to 1048576 [ 101.824120][ T8550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.871109][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.099118][ T8556] netlink: 'syz.2.694': attribute type 16 has an invalid length. [ 102.101381][ T8556] netlink: 'syz.2.694': attribute type 17 has an invalid length. [ 102.135565][ T8563] macsec1: entered promiscuous mode [ 102.137807][ T8563] macsec1: entered allmulticast mode [ 102.435006][ T8573] block device autoloading is deprecated and will be removed. [ 102.555998][ T8581] netlink: 44 bytes leftover after parsing attributes in process `syz.4.705'. [ 102.685905][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.709'. [ 102.765787][ T8599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8599 comm=syz.4.710 [ 102.770661][ T8599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=8599 comm=syz.4.710 [ 102.935476][ T8603] block nbd4: shutting down sockets [ 102.960968][ T8613] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 102.989813][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 103.098935][ T8625] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 103.102655][ T8625] overlayfs: missing 'lowerdir' [ 103.124564][ T8625] vivid-000: ================= START STATUS ================= [ 103.128102][ T8625] vivid-000: Test Pattern: 75% Colorbar [ 103.130406][ T8625] vivid-000: Fill Percentage of Frame: 1 [ 103.134268][ T8625] vivid-000: Horizontal Movement: Move Left [ 103.136294][ T8625] vivid-000: Vertical Movement: Move Up Slow [ 103.138318][ T8625] vivid-000: OSD Text Mode: All [ 103.139904][ T8625] vivid-000: Show Border: false [ 103.141454][ T8625] vivid-000: Show Square: false [ 103.143517][ T8625] vivid-000: Sensor Flipped Horizontally: false [ 103.145496][ T8625] vivid-000: Sensor Flipped Vertically: false [ 103.147561][ T8625] vivid-000: Insert SAV Code in Image: false [ 103.149584][ T8625] vivid-000: Insert EAV Code in Image: false [ 103.151502][ T8625] vivid-000: Insert Video Guard Band: false [ 103.153844][ T8625] vivid-000: Reduced Framerate: false [ 103.155587][ T8625] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 103.158014][ T8625] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 103.160583][ T8625] vivid-000: Enable Capture Cropping: true [ 103.163128][ T8625] vivid-000: Enable Capture Composing: true [ 103.165537][ T8625] vivid-000: Enable Capture Scaler: true [ 103.167771][ T8625] vivid-000: Timestamp Source: Start of Exposure [ 103.170251][ T8625] vivid-000: Colorspace: SMPTE 170M [ 103.172548][ T8625] vivid-000: Transfer Function: Default [ 103.174811][ T8625] vivid-000: Y'CbCr Encoding: Default [ 103.177024][ T8625] vivid-000: HSV Encoding: Hue 0-179 [ 103.179182][ T8625] vivid-000: Quantization: Default [ 103.181285][ T8625] vivid-000: Apply Alpha To Red Only: false [ 103.183788][ T8625] vivid-000: Standard Aspect Ratio: 14x9 [ 103.186060][ T8625] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 103.189033][ T8625] vivid-000: DV Timings: 640x480p59 inactive [ 103.191393][ T8625] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 103.194143][ T8625] vivid-000: Maximum EDID Blocks: 2 [ 103.196170][ T8625] vivid-000: Limited RGB Range (16-235): false [ 103.198183][ T8625] vivid-000: Rx RGB Quantization Range: Automatic [ 103.200295][ T8625] vivid-000: Power Present: 0x00000001 [ 103.202436][ T8625] tpg source WxH: 720x576 (R'G'B) [ 103.203223][ T838] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 103.204352][ T8625] tpg field: 4 [ 103.207707][ T8625] tpg crop: (0,0)/64x64 [ 103.209253][ T8625] tpg compose: (0,0)/16x16 [ 103.210927][ T8625] tpg colorspace: 1 [ 103.212471][ T8625] tpg transfer function: 0/0 [ 103.214307][ T8625] tpg quantization: 0/0 [ 103.215871][ T8625] tpg RGB range: 0/2 [ 103.218378][ T8625] vivid-000: ================== END STATUS ================== [ 103.303162][ T8636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.333677][ T8641] netlink: 'syz.4.725': attribute type 10 has an invalid length. [ 103.338952][ T8641] team0: Device hsr_slave_0 failed to register rx_handler [ 103.368399][ T838] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.371627][ T838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.376237][ T838] usb 8-1: Product: syz [ 103.377603][ T838] usb 8-1: Manufacturer: syz [ 103.379066][ T838] usb 8-1: SerialNumber: syz [ 103.388340][ T838] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 103.401192][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 103.401201][ T40] audit: type=1400 audit(1749142538.722:1328): avc: denied { firmware_load } for pid=6002 comm="kworker/1:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 103.421049][ T6002] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.565378][ T8668] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 103.569859][ T8668] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 103.802106][ T40] audit: type=1400 audit(1749142539.122:1329): avc: denied { search } for pid=8680 comm="syz.2.735" name="/" dev="configfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.809853][ T40] audit: type=1400 audit(1749142539.132:1330): avc: denied { add_name } for pid=8680 comm="syz.2.735" name="cgroup.freeze" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.818081][ T40] audit: type=1400 audit(1749142539.132:1331): avc: denied { create } for pid=8680 comm="syz.2.735" name="cgroup.freeze" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 103.920392][ T40] audit: type=1400 audit(1749142539.242:1332): avc: denied { getopt } for pid=8682 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.206994][ T8697] tipc: Started in network mode [ 104.212310][ T8697] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 104.215407][ T8697] tipc: Enabled bearer , priority 0 [ 104.306177][ T8703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=8703 comm=syz.4.746 [ 104.309981][ T8705] __nla_validate_parse: 1 callbacks suppressed [ 104.309991][ T8705] netlink: 136 bytes leftover after parsing attributes in process `syz.2.744'. [ 104.467884][ T8719] 9p: Unknown uid 00000000004294967295 [ 104.498477][ T6002] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 104.500839][ T6002] ath9k_htc: Failed to initialize the device [ 104.511456][ T40] audit: type=1400 audit(1749142539.832:1333): avc: denied { map } for pid=8720 comm="syz.2.752" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.540612][ T6002] usb 8-1: ath9k_htc: USB layer deinitialized [ 104.584377][ T8726] sp0: Synchronizing with TNC [ 104.586158][ T40] audit: type=1400 audit(1749142539.912:1334): avc: denied { mounton } for pid=8727 comm="syz.2.755" path="/265/file0" dev="tmpfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 104.587593][ T8726] [U] è [ 104.627549][ T8731] netlink: 'syz.2.756': attribute type 11 has an invalid length. [ 104.697008][ T40] audit: type=1400 audit(1749142540.022:1335): avc: denied { read write } for pid=8733 comm="syz.2.757" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.700161][ T8734] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 104.709576][ T40] audit: type=1400 audit(1749142540.022:1336): avc: denied { open } for pid=8733 comm="syz.2.757" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.715493][ T8734] trusted_key: encrypted_key: keylen parameter is missing [ 104.721343][ T40] audit: type=1400 audit(1749142540.032:1337): avc: denied { map } for pid=8738 comm="syz.4.759" path="socket:[23431]" dev="sockfs" ino=23431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.751598][ T34] usb 8-1: USB disconnect, device number 16 [ 104.884069][ T8744] block nbd2: NBD_DISCONNECT [ 104.887255][ T8744] block nbd2: Send disconnect failed -107 [ 104.892304][ T8745] block nbd2: NBD_DISCONNECT [ 104.893777][ T8745] block nbd2: Send disconnect failed -107 [ 104.899577][ T8743] block nbd2: Disconnected due to user request. [ 104.901709][ T8743] block nbd2: shutting down sockets [ 105.124605][ T8779] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 105.332752][ T29] tipc: Node number set to 11578026 [ 105.518692][ T8842] netlink: 'syz.2.781': attribute type 7 has an invalid length. [ 105.528608][ T8842] : entered promiscuous mode [ 105.573079][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 105.671916][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.675259][ T8862] IPv6: NLM_F_CREATE should be set when creating new route [ 105.890624][ T1144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.909750][ T8865] netlink: 160 bytes leftover after parsing attributes in process `syz.2.787'. [ 105.979974][ T1144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.030086][ T8892] sctp: [Deprecated]: syz.2.790 (pid 8892) Use of int in max_burst socket option deprecated. [ 106.030086][ T8892] Use struct sctp_assoc_value instead [ 106.058232][ T1144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.074049][ T8898] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 106.116995][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.120708][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.125534][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.129596][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.132379][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.138286][ T1144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.260374][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 106.388346][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.391491][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.395383][ T8900] bridge_slave_0: entered allmulticast mode [ 106.399602][ T8900] bridge_slave_0: entered promiscuous mode [ 106.407647][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.409893][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.413610][ T8900] bridge_slave_1: entered allmulticast mode [ 106.416635][ T8900] bridge_slave_1: entered promiscuous mode [ 106.472142][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.478657][ T1144] bridge_slave_0: left allmulticast mode [ 106.481837][ T1144] bridge_slave_0: left promiscuous mode [ 106.484692][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.545345][ T1144] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 106.756937][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.761832][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.766304][ T1144] bond0 (unregistering): Released all slaves [ 106.775851][ T1144] bond1 (unregistering): Released all slaves [ 106.785959][ T1144] bond2 (unregistering): Released all slaves [ 106.863173][ T1144] bond3 (unregistering): Released all slaves [ 106.870760][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.878574][ T8937] bridge0: entered promiscuous mode [ 106.957965][ T8900] team0: Port device team_slave_0 added [ 106.960390][ T1144] tipc: Disabling bearer [ 106.962979][ T1144] tipc: Left network mode [ 106.990080][ T8900] team0: Port device team_slave_1 added [ 107.076135][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.078655][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.089167][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.094771][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.097025][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.105196][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.205711][ T8900] hsr_slave_0: entered promiscuous mode [ 107.213131][ T8900] hsr_slave_1: entered promiscuous mode [ 107.215287][ T8900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.217989][ T8900] Cannot create hsr debugfs directory [ 107.230740][ T1144] hsr_slave_0: left promiscuous mode [ 107.234798][ T1144] hsr_slave_1: left promiscuous mode [ 107.236873][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.239328][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.242945][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.245338][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.273999][ T1144] veth1_macvtap: left promiscuous mode [ 107.275869][ T1144] veth0_macvtap: left promiscuous mode [ 107.277825][ T1144] veth1_vlan: left promiscuous mode [ 107.279922][ T1144] veth0_vlan: left promiscuous mode [ 107.382202][ T8975] openvswitch: netlink: Key type 5136 is out of range max 32 [ 107.926652][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 107.992717][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 108.184534][ T5952] Bluetooth: hci3: command tx timeout [ 109.104820][ T8900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.122718][ T8900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.139192][ T8900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.156309][ T8900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.229928][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.244326][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.251609][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.253858][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.267372][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.269613][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.381961][ T9023] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 109.400613][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.427404][ T9029] fuse: Bad value for 'group_id' [ 109.428963][ T9029] fuse: Bad value for 'group_id' [ 109.599473][ T8900] veth0_vlan: entered promiscuous mode [ 109.615964][ T8900] veth1_vlan: entered promiscuous mode [ 109.638258][ T8900] veth0_macvtap: entered promiscuous mode [ 109.647802][ T8900] veth1_macvtap: entered promiscuous mode [ 109.658317][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.669101][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.675762][ T8900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.678579][ T8900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.681286][ T8900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.684980][ T8900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.737134][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.739580][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.755919][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.758744][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.773638][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 109.773654][ T40] audit: type=1400 audit(1749142545.092:1346): avc: denied { mounton } for pid=8900 comm="syz-executor" path="/syzkaller.OnqZTb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 109.787076][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.790642][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.793594][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.797980][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.800655][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.816862][ T40] audit: type=1400 audit(1749142545.132:1347): avc: denied { mount } for pid=8900 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.824290][ T40] audit: type=1400 audit(1749142545.132:1348): avc: denied { mounton } for pid=8900 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 110.034116][ T9054] chnl_net:caif_netlink_parms(): no params data found [ 110.141585][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.145618][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.148381][ T9054] bridge_slave_0: entered allmulticast mode [ 110.151477][ T9054] bridge_slave_0: entered promiscuous mode [ 110.155855][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.158643][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.161470][ T9054] bridge_slave_1: entered allmulticast mode [ 110.167258][ T9054] bridge_slave_1: entered promiscuous mode [ 110.203860][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.228408][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.245994][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.294990][ T9054] team0: Port device team_slave_0 added [ 110.306664][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.316154][ T9054] team0: Port device team_slave_1 added [ 110.358833][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.361727][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.371962][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.374151][ T40] audit: type=1400 audit(1749142545.702:1349): avc: denied { ioctl } for pid=9084 comm="syz.2.818" path="socket:[25394]" dev="sockfs" ino=25394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.378382][ T9086] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.394858][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.397740][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.408346][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.414617][ T9085] veth0_macvtap: left promiscuous mode [ 110.433712][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.503664][ T9054] hsr_slave_0: entered promiscuous mode [ 110.505984][ T9054] hsr_slave_1: entered promiscuous mode [ 110.508043][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.510305][ T9054] Cannot create hsr debugfs directory [ 110.557293][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.558845][ T9089] fuse: Unknown parameter 'nrãþp_id' [ 110.558853][ T9090] fuse: Unknown parameter 'nrãþp_id' [ 110.561647][ T9090] binder_alloc: binder_alloc_mmap_handler: 9088 200000ffd000-200001000000 already mapped failed -16 [ 110.571919][ T9089] binder_alloc: 9088: binder_alloc_buf, no vma [ 110.662442][ C3] ------------[ cut here ]------------ [ 110.665025][ C3] refcount_t: addition on 0; use-after-free. [ 110.667800][ C3] WARNING: CPU: 3 PID: 5949 at lib/refcount.c:25 refcount_warn_saturate+0x1ca/0x210 [ 110.671449][ C3] Modules linked in: [ 110.673580][ C3] CPU: 3 UID: 0 PID: 5949 Comm: syz-executor Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 110.679204][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.683422][ C3] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 110.685991][ C3] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 80 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 110.689646][ T9054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.692719][ C3] RSP: 0018:ffffc900006f88b0 EFLAGS: 00010286 [ 110.696849][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 110.699320][ C3] RDX: ffff888023f0a440 RSI: ffffffff817ae375 RDI: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 110.701789][ C3] RBP: ffff8880273f016c R08: 0000000000000001 R09: 0000000000000000 [ 110.705114][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880273f016c [ 110.708075][ C3] R13: ffff8880273f0000 R14: ffff888106fc5b00 R15: ffff88804833f000 [ 110.710516][ C3] FS: 0000555564a20500(0000) GS:ffff8880d6a5a000(0000) knlGS:0000000000000000 [ 110.713627][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.716087][ C3] CR2: 00007fccc52e56c0 CR3: 000000004f0cc000 CR4: 0000000000352ef0 [ 110.718973][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.721986][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.725379][ C3] Call Trace: [ 110.726808][ C3] [ 110.728286][ C3] tipc_crypto_xmit+0x20c1/0x2550 [ 110.730377][ C3] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 110.732715][ C3] ? lock_acquire+0x179/0x350 [ 110.734744][ C3] ? find_held_lock+0x2b/0x80 [ 110.736799][ C3] ? net_generic+0xea/0x2a0 [ 110.738747][ C3] tipc_bearer_xmit_skb+0x15f/0x430 [ 110.740863][ C3] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 110.743269][ C3] ? mark_held_locks+0x49/0x80 [ 110.745308][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 110.746998][ C3] tipc_disc_timeout+0x5b2/0x850 [ 110.748581][ C3] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 110.750673][ C3] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 110.753095][ C3] call_timer_fn+0x19a/0x620 [ 110.755059][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 110.757128][ C3] ? mark_held_locks+0x49/0x80 [ 110.759160][ C3] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 110.761461][ C3] __run_timers+0x6ef/0x960 [ 110.763479][ C3] ? __pfx___run_timers+0x10/0x10 [ 110.765702][ C3] run_timer_base+0x114/0x190 [ 110.767288][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 110.768944][ C3] run_timer_softirq+0x1a/0x40 [ 110.770459][ C3] handle_softirqs+0x219/0x8e0 [ 110.772026][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 110.773881][ C3] __irq_exit_rcu+0x109/0x170 [ 110.775363][ C3] irq_exit_rcu+0x9/0x30 [ 110.776741][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 110.778499][ C3] [ 110.779451][ C3] [ 110.780390][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.782348][ C3] RIP: 0010:const_folio_flags.constprop.0+0x29/0x70 [ 110.784572][ C3] Code: 90 55 53 48 89 fb e8 a6 ea b4 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 3c 48 8b 6b 08 <31> ff 83 e5 01 48 89 ee e8 ea e5 b4 ff 48 85 ed 75 0f e8 70 ea b4 [ 110.790533][ C3] RSP: 0018:ffffc90004937690 EFLAGS: 00000246 [ 110.792637][ C3] RAX: dffffc0000000000 RBX: ffffea000140a940 RCX: ffffffff82072693 [ 110.795186][ C3] RDX: 1ffffd4000281529 RSI: ffffffff82072baa RDI: ffffea000140a948 [ 110.797665][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 110.800135][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 110.802784][ C3] R13: dffffc0000000000 R14: ffffea000140a940 R15: ffff88804f0d3f00 [ 110.805798][ C3] ? __folio_rmap_sanity_checks.constprop.0+0x163/0x410 [ 110.807968][ C3] ? const_folio_flags.constprop.0+0xa/0x70 [ 110.809831][ C3] copy_page_range+0x1dc6/0x5d90 [ 110.811412][ C3] ? __pfx_copy_page_range+0x10/0x10 [ 110.813431][ C3] ? __pfx___might_resched+0x10/0x10 [ 110.815285][ C3] ? __pfx_mas_store+0x10/0x10 [ 110.816800][ C3] ? __vma_enter_locked+0x163/0x3f0 [ 110.818438][ C3] ? dup_mmap+0xe38/0x21d0 [ 110.819850][ C3] ? down_write+0x14d/0x200 [ 110.821234][ C3] ? up_write+0x1b2/0x520 [ 110.822841][ C3] dup_mmap+0xe88/0x21d0 [ 110.824686][ C3] ? __pfx_dup_mmap+0x10/0x10 [ 110.826394][ C3] copy_process+0x4081/0x76a0 [ 110.827939][ C3] ? do_wp_page+0x1aa7/0x4f20 [ 110.829451][ C3] ? __pfx_copy_process+0x10/0x10 [ 110.831072][ C3] kernel_clone+0xfc/0x960 [ 110.832658][ C3] ? __pfx_kernel_clone+0x10/0x10 [ 110.834404][ C3] ? css_rstat_updated+0x9d/0xd30 [ 110.836002][ C3] __do_sys_clone+0xce/0x120 [ 110.837462][ C3] ? __pfx___do_sys_clone+0x10/0x10 [ 110.839150][ C3] ? handle_mm_fault+0x2ab/0xd10 [ 110.840731][ C3] ? do_user_addr_fault+0x843/0x1370 [ 110.842557][ C3] do_syscall_64+0xcd/0x4c0 [ 110.844159][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.846018][ C3] RIP: 0033:0x7fccc4585193 [ 110.847436][ C3] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 110.853497][ C3] RSP: 002b:00007ffd3ed8c438 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 110.856251][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fccc4585193 [ 110.858717][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 110.861198][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 110.863983][ C3] R10: 0000555564a207d0 R11: 0000000000000246 R12: 0000000000000000 [ 110.866532][ C3] R13: 00000000000927c0 R14: 000000000001afb4 R15: 00007ffd3ed8c5d0 [ 110.869003][ C3] [ 110.869997][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.872321][ C3] CPU: 3 UID: 0 PID: 5949 Comm: syz-executor Not tainted 6.15.0-syzkaller-12141-gec7714e49479 #0 PREEMPT(full) [ 110.875965][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.879277][ C3] Call Trace: [ 110.880340][ C3] [ 110.881237][ C3] dump_stack_lvl+0x3d/0x1f0 [ 110.882808][ C3] panic+0x71c/0x800 [ 110.884416][ C3] ? __pfx_panic+0x10/0x10 [ 110.885881][ C3] ? show_trace_log_lvl+0x29b/0x3e0 [ 110.887464][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 110.888987][ C3] ? refcount_warn_saturate+0x1ca/0x210 [ 110.890675][ C3] check_panic_on_warn+0xab/0xb0 [ 110.892174][ C3] __warn+0xf6/0x3c0 [ 110.893448][ C3] ? __pfx_vprintk_emit+0x10/0x10 [ 110.895020][ C3] ? refcount_warn_saturate+0x1ca/0x210 [ 110.896719][ C3] report_bug+0x3c3/0x580 [ 110.898058][ C3] ? refcount_warn_saturate+0x1ca/0x210 [ 110.899775][ C3] handle_bug+0x184/0x210 [ 110.901106][ C3] exc_invalid_op+0x17/0x50 [ 110.902620][ C3] asm_exc_invalid_op+0x1a/0x20 [ 110.904167][ C3] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 110.906079][ C3] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 80 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 110.911968][ C3] RSP: 0018:ffffc900006f88b0 EFLAGS: 00010286 [ 110.913937][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 110.916395][ C3] RDX: ffff888023f0a440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 110.919232][ C3] RBP: ffff8880273f016c R08: 0000000000000001 R09: 0000000000000000 [ 110.922148][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880273f016c [ 110.925096][ C3] R13: ffff8880273f0000 R14: ffff888106fc5b00 R15: ffff88804833f000 [ 110.927998][ C3] ? __warn_printk+0x198/0x350 [ 110.929790][ C3] ? __warn_printk+0x1a5/0x350 [ 110.931597][ C3] tipc_crypto_xmit+0x20c1/0x2550 [ 110.933335][ C3] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 110.935204][ C3] ? lock_acquire+0x179/0x350 [ 110.936863][ C3] ? find_held_lock+0x2b/0x80 [ 110.938592][ C3] ? net_generic+0xea/0x2a0 [ 110.940306][ C3] tipc_bearer_xmit_skb+0x15f/0x430 [ 110.942382][ C3] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 110.944716][ C3] ? mark_held_locks+0x49/0x80 [ 110.946700][ C3] ? __local_bh_enable_ip+0xa4/0x120 [ 110.948878][ C3] tipc_disc_timeout+0x5b2/0x850 [ 110.950911][ C3] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 110.953164][ C3] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 110.955260][ C3] call_timer_fn+0x19a/0x620 [ 110.957085][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 110.959063][ C3] ? mark_held_locks+0x49/0x80 [ 110.960905][ C3] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 110.962876][ C3] __run_timers+0x6ef/0x960 [ 110.964602][ C3] ? __pfx___run_timers+0x10/0x10 [ 110.966495][ C3] run_timer_base+0x114/0x190 [ 110.968301][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 110.970293][ C3] run_timer_softirq+0x1a/0x40 [ 110.972164][ C3] handle_softirqs+0x219/0x8e0 [ 110.974013][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 110.976161][ C3] __irq_exit_rcu+0x109/0x170 [ 110.978092][ C3] irq_exit_rcu+0x9/0x30 [ 110.979766][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 110.981952][ C3] [ 110.983154][ C3] [ 110.984363][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 110.986735][ C3] RIP: 0010:const_folio_flags.constprop.0+0x29/0x70 [ 110.989341][ C3] Code: 90 55 53 48 89 fb e8 a6 ea b4 ff 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 3c 48 8b 6b 08 <31> ff 83 e5 01 48 89 ee e8 ea e5 b4 ff 48 85 ed 75 0f e8 70 ea b4 [ 110.996825][ C3] RSP: 0018:ffffc90004937690 EFLAGS: 00000246 [ 110.999225][ C3] RAX: dffffc0000000000 RBX: ffffea000140a940 RCX: ffffffff82072693 [ 111.002357][ C3] RDX: 1ffffd4000281529 RSI: ffffffff82072baa RDI: ffffea000140a948 [ 111.005484][ C3] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 111.008585][ C3] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 111.011697][ C3] R13: dffffc0000000000 R14: ffffea000140a940 R15: ffff88804f0d3f00 [ 111.014868][ C3] ? __folio_rmap_sanity_checks.constprop.0+0x163/0x410 [ 111.017633][ C3] ? const_folio_flags.constprop.0+0xa/0x70 [ 111.020005][ C3] copy_page_range+0x1dc6/0x5d90 [ 111.022007][ C3] ? __pfx_copy_page_range+0x10/0x10 [ 111.024113][ C3] ? __pfx___might_resched+0x10/0x10 [ 111.026176][ C3] ? __pfx_mas_store+0x10/0x10 [ 111.028107][ C3] ? __vma_enter_locked+0x163/0x3f0 [ 111.030171][ C3] ? dup_mmap+0xe38/0x21d0 [ 111.031975][ C3] ? down_write+0x14d/0x200 [ 111.033812][ C3] ? up_write+0x1b2/0x520 [ 111.035545][ C3] dup_mmap+0xe88/0x21d0 [ 111.037271][ C3] ? __pfx_dup_mmap+0x10/0x10 [ 111.039174][ C3] copy_process+0x4081/0x76a0 [ 111.040730][ C3] ? do_wp_page+0x1aa7/0x4f20 [ 111.042250][ C3] ? __pfx_copy_process+0x10/0x10 [ 111.043852][ C3] kernel_clone+0xfc/0x960 [ 111.045257][ C3] ? __pfx_kernel_clone+0x10/0x10 [ 111.046846][ C3] ? css_rstat_updated+0x9d/0xd30 [ 111.048437][ C3] __do_sys_clone+0xce/0x120 [ 111.049890][ C3] ? __pfx___do_sys_clone+0x10/0x10 [ 111.051522][ C3] ? handle_mm_fault+0x2ab/0xd10 [ 111.053119][ C3] ? do_user_addr_fault+0x843/0x1370 [ 111.054731][ C3] do_syscall_64+0xcd/0x4c0 [ 111.056157][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.058014][ C3] RIP: 0033:0x7fccc4585193 [ 111.059428][ C3] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 111.065311][ C3] RSP: 002b:00007ffd3ed8c438 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 111.067833][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fccc4585193 [ 111.070260][ C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 111.072705][ C3] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 111.075145][ C3] R10: 0000555564a207d0 R11: 0000000000000246 R12: 0000000000000000 [ 111.077595][ C3] R13: 00000000000927c0 R14: 000000000001afb4 R15: 00007ffd3ed8c5d0 [ 111.080029][ C3] [ 111.081680][ C3] Kernel Offset: disabled [ 111.083061][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:55:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=0000000000000007 RCX=0000000091581180 RDX=0000000000000000 RSI=0000000020ff8a63 RDI=ffff8880292cc880 RBP=ffff8880292cc880 RSP=ffffc900060decd8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000118 R11=0000000000000001 R12=ffff8880292cd370 R13=ffff8880292cd488 R14=0000000000000007 R15=0000000000000001 RIP=ffffffff81985e72 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d675a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2c56f7 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4784488 00007fccc4784480 00007fccc4784478 00007fccc4784450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc52ed100 00007fccc4784440 00007fccc4780004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4784498 00007fccc4784490 00007fccc4784488 00007fccc4784480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000048 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006740000 RBX=0000000000000000 RCX=ffff888029841070 RDX=000000000000009d RSI=ffffffff86a818a8 RDI=ffff8880298412d0 RBP=0000000000000001 RSP=ffffc900006a0b78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000004e20 R14=ffff888029841070 R15=0000000000000001 RIP=ffffffff86a818e5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9839555300 ffffffff 00c00000 GS =0000 ffff8880d685a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fccc47b7bac CR3=0000000032234000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0334000000020000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 016c000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0334000000200000 0002000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008ffffff5e0000 03e6000000080004 0000000800080000 0014000000280000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003c000000500000 0064000000780000 0098000000b00000 00c4000000e40000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000000000000 0000000000000000 012e0000000002cd 29c0000000180000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00200000000e0014 000c000000080004 0020000e00000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffee00000000 0300000000000008 ffffffde00000000 0300000000000009 ZMM25=f15074fbf15074fb f15074fbf15074fb f15074fbf15074fb f15074fbf15074fb f15074fbf15074fb f15074fbf15074fb f15074fbf15074fb f15074fbf15074fb ZMM26=7857137578571375 7857137578571375 7857137578571375 7857137578571375 7857137578571375 7857137578571375 7857137578571375 7857137578571375 ZMM27=4786e13e4786e13e 4786e13e4786e13e 4786e13e4786e13e 4786e13e4786e13e 4786e13e4786e13e 4786e13e4786e13e 4786e13e4786e13e 4786e13e4786e13e ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8104000081040000 8104000081040000 8104000081040000 8104000081040000 8104000081040000 8104000081040000 8104000081040000 8104000081040000 info registers vcpu 2 CPU#2 RAX=00000000000f31b9 RBX=0000000000000002 RCX=ffffffff8b7f1c99 RDX=0000000000000000 RSI=ffffffff8de14d4b RDI=ffffffff8c157020 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90a7ff50 R15=0000000000000000 RIP=ffffffff8b7f07ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d695a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5e5c4e35c0 CR3=0000000063e22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0c400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000004300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811ae7 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811adf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5e5b811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697376656474656e 0001000e00000107 0000000100000000 0022001700000070 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000001004e0008 00000000004d0006 0000000000940005 0000000030687465 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b2985 RDI=ffffffff9b082320 RBP=ffffffff9b0822e0 RSP=ffffc900006f8220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0822e0 R15=ffffffff855b2920 RIP=ffffffff855b29af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555564a20500 ffffffff 00c00000 GS =0000 ffff8880d6a5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fccc52e56c0 CR3=000000004f0cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd3ed8c540 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccc4611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000