last executing test programs: 45.449546389s ago: executing program 3 (id=668): syz_emit_ethernet(0xae, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000a00000000000019078ac1e01010000000003019078030000004f00000000000000002f0005ac14140ae000000107130500000000ac141440ffffffff0a0101028606ffffffff441441d1e000000200000007ace1bb5426010000863700000002070dc9f8b392cb54ecf97e043107065eaf2860060a0d5eb1bf135a5f2f07020612dad7e9865d84ea59dc42827b93ba857400000000040022eb00000000"], 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x3cc6673b6717ad02, &(0x7f00000000c0)='\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfa5, 0x7f, &(0x7f00000000c0)) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000280)=0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00350000ac1a994acc8e451e06d190da401dd05710ecb23306723de0c2cdaa560738997f3733ea1f01ddea6178fa1e22b37d4051d9aa25d685731051fbb9a7ef3fc787e7da632e1752ab1e4ba237f811c3fc1e7f5519b3842c41b0d420f06e02c65a07f6189fb4e3f83611102a9ea47e09513e"]) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000021c0)=""/18, 0x12, 0x42, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, &(0x7f0000004380)) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff97011210, 0x10, 0x0, 0x6}}, 0x50) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a020, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r4, r5, 0x6, 0xfff7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002200)={0x10, 0x0, r6}, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) bind$alg(r8, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000002180)={'sit0\x00', &(0x7f0000002140)={@private2={0xfc, 0x2, '\x00', 0x1}, @broadcast, 0xd, 0x8}}) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) faccessat2(r1, &(0x7f0000000100)='./file0\x00', 0x108, 0x0) r9 = syz_open_dev$dri(&(0x7f00000001c0), 0xebac, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000000040)={0x1, r10, 0xd, 0x2, 0x27f, 0x400, 0x6}) sysfs$1(0x64, 0x0) 45.039227585s ago: executing program 3 (id=677): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) landlock_restrict_self(r0, 0xad37f7b20e3450cb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd5) r3 = getpgrp(0xffffffffffffffff) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r3}) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8004042) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) 44.639273003s ago: executing program 3 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000205fcffffff00000000000000002aab43567423287443d40101000072dd5936d23308e225329dfa614e63129b9a2e26c866d8532956f27e27438fd58e7f681ca57ddba07854ab8afcd875e4726abb", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280060002404e20000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8090}, 0x44000) 44.638968065s ago: executing program 3 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup2(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x300000, &(0x7f0000000780)={[{@memory_localevents}, {}, {}, {@favordynmods}, {@favordynmods}, {@pids_localevents}], [{@fowner_gt={'fowner>', r0}}, {@uid_lt={'uid<', r1}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@flag='mand'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@uid_lt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 44.637325085s ago: executing program 3 (id=681): mkdir(&(0x7f0000000040)='./control\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000080)="480000001400197f09004b0101048c590288ffff800100001f0000010028213ee20600d4ff5bffff00f83bf8617c63b7c7e5ed5e00000000000000000000ea040018125d4b18857a", 0x48}], 0x1) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans!virtio,cache=readahead,cachetag=@:(,debug=0x00000000000003']) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) r2 = inotify_init1(0x0) r3 = socket$caif_stream(0x25, 0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bind(r3, &(0x7f0000000100)=@ieee802154, 0x80) sendmmsg(r3, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c400) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000080)='./control\x00', 0x4, 0x88) inotify_add_watch(r4, &(0x7f0000000000)='./control\x00', 0x40000000) ftruncate(r5, 0x72ef) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, &(0x7f0000000180)=0xfef835e5e20f46c0, 0x4) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x73, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) 44.518528525s ago: executing program 3 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000000)) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x48c5) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000080)) (async) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xd8, 0x6, 0x27, @empty, @empty, 0x40, 0x700, 0x80000001, 0x1000}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8cc0, '\x00', r7, r6, 0x0, 0x1, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xfffffffc, 0x80000000, 0x1800000, 0x11cc, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="39fdc16effe100000000a75c4ed2000018280000", @ANYRES32=r8, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x1e86b4fb, 0x0, 0x0, 0x41000, 0x2, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xf, 0x94d, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r9, r10], &(0x7f0000000900)=[{0x5, 0x3, 0xa, 0xd}], 0x10, 0x4}, 0x94) 44.514598121s ago: executing program 32 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000000)) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x48c5) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000080)) (async) sendmsg$nl_route(r3, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xd8, 0x6, 0x27, @empty, @empty, 0x40, 0x700, 0x80000001, 0x1000}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8cc0, '\x00', r7, r6, 0x0, 0x1, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xfffffffc, 0x80000000, 0x1800000, 0x11cc, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="39fdc16effe100000000a75c4ed2000018280000", @ANYRES32=r8, @ANYBLOB="00000000050000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x1e86b4fb, 0x0, 0x0, 0x41000, 0x2, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xf, 0x94d, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[r9, r10], &(0x7f0000000900)=[{0x5, 0x3, 0xa, 0xd}], 0x10, 0x4}, 0x94) 44.458213997s ago: executing program 1 (id=686): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@random={'system.', 'workdir'}) 44.457133219s ago: executing program 1 (id=687): syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08ff4500001c"], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70b92d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0xfffffffffffffe65, 0x16, 0xe384}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40851}, 0x4014) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = semget$private(0x0, 0x3, 0x0) semop(r1, &(0x7f0000000000)=[{0x1, 0xff00, 0x3000}], 0x1) semctl$GETNCNT(r1, 0x1, 0xe, 0x0) 43.568498933s ago: executing program 1 (id=690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000000), 0x4080) socket$kcm(0x11, 0x200000000000002, 0x300) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0422108a"], 0x13) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000300)='syzkaller\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r4}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="7472616e733d66b263e36140de554126e32c595b64c727242c7266646e3bb92e1af9823e0783ea5af8f3706f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',k']) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r11, r11, r11}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'sha384\x00'}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r9, r10, 0x25, 0x6, @val=@kprobe_multi=@syms={0x1, 0x5, &(0x7f0000000440)=[&(0x7f00000002c0)='T}\x00', &(0x7f0000000340)='\x00', &(0x7f00000004c0)='!,*(\x00B\x14\x06<(\x0f\xf3N\x8d6]\x90\x89y\xeaa\x89\xf1\xe8+pJ\x98\xfc=#0\t\x10\xc9kb\xcd\x12\xc71\xcckC\xb4\tq\xb5\r(\xd8\x12\xf4\xeaY-X\xa7\x8e\xe8\x1a\xf36\'\x1a\xa9\x941\x13\xb8\x14\xdd\xc5J7\xf3\xfc\xce\xfa\xbdbt\x01\x86\xa2\xc0\x84B\xc0\"\x86\x9f\bN|\x8c\x00n|\xca\x1d\a\xc9\xcb\x11hO*a^\x00F\x99\x8b\x19\x88\xc2XV\xa0I\x95\xfb\xd9\x82\xbb\xb5\xca\xb2\xc9', &(0x7f00000003c0)='wg0\x00', &(0x7f0000000400)='wg0\x00'], 0x0, 0x7fffffff}}, 0x30) syz_emit_ethernet(0xe, &(0x7f0000000680)={@random="4283438d3e96", @random="61f9f18e534c", @void, {@generic={0xc}}}, 0x0) 43.478625201s ago: executing program 1 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x250100, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0}, {0x0}, {0x0, 0xfffffffffffffdbe, 0x3}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$binfmt_format(r1, &(0x7f0000000240)='1\x00', 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448df, &(0x7f0000000080)='\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000380)=0x0) mount$9p_unix(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0xc0002, &(0x7f00000003c0)={'trans=unix,', {[{@cache_mmap}, {@cachetag={'cachetag', 0x3d, '/dev/snd/seq\x00'}}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r5}}], [{@flag='lazytime'}, {@smackfsdef={'smackfsdef', 0x3d, '&/-\'\\\x99'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/snd/seq\x00'}}]}}) sendmmsg(r0, &(0x7f0000000f80), 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000001040), &(0x7f00000010c0)=0x80) 43.117996949s ago: executing program 1 (id=700): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) 43.013896356s ago: executing program 1 (id=705): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = epoll_create1(0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x80002013}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x6a, &(0x7f0000001980)=@generic={0x8, 0x0, 0x62, "a3855d62", "1724f60f30c63f5ccd9f0e47d37f9eb77701e6226bb7959e52c798d67a757281583bf7a958593fc9d6900a14e772bc5a62ff19585ad2653b7dadfb373f687d1c9d33b3c17c4f813145c428c2c31f8b18477d0e98667dd5b4cde2e79e498ff5d27e5c"}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x1000000) inotify_rm_watch(r3, r4) r5 = syz_usb_connect(0x2, 0x12cc, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xf2, 0x29, 0x9d, 0x20, 0x16d8, 0x6280, 0xfc72, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12ba, 0x4, 0xf1, 0x3, 0x30, 0x6, [{{0x9, 0x4, 0x46, 0xbc, 0x10, 0x32, 0xd6, 0x4f, 0x4, [@generic={0xc9, 0xd, "c7a736569ff0ae10199644847474941995bab173daf4059e1f290d2ce2ae3c00a234d0cb1d829743d2c05db44144693fcaf4eb61ade3d82df02ff02fd3ab4377ad8348d55a96b758a49c7ed589622e7def2a4f49d34c749eca7f04f09ed21d7de8cc0d623690a10d097b9dc641026995849e12c7e451a005e620f6fb80010d850da7738d6bcb08c32a6d8188f0d02c53d4bd94c4f532a83f4b6950ae6c7fa346c43f8acc0a52077cb832c7df2eae52235e5aa985c6c81c3caceb3dbecd624040cd7a5b4766d805"}], [{{0x9, 0x5, 0xd, 0x10, 0x59f, 0x7, 0x0, 0x5, [@generic={0x1d, 0x5, "12432f224d2ade1dbf94f9511d650059b523fd1f4ee9832382ad78"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x1, 0x0, [@generic={0x7, 0x7, "40b1cc6393"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x8, 0x54, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x6, 0x81, 0xec, [@generic={0x86, 0x4, "1a0dec34ed5c2dda1b274ee37943e6859e6b65a6207cd88b617a9760a5fd214fb293b7722438a276cedcffb2e9507ff24effe221f6dfe97570b06b275655a580f3497fe5354d157b8763fc9d5e2ec3c6cb0fbfa54aa39fa6e03bfa7a1969969642609e853e99dd3c87abec7919ff35d1a7c8de4b910dde40b4690d1aa514fadcf7434b11"}, @generic={0x25, 0x7, "0721409c3f5f9e77e6ac4a045f62a806f9509b5807e5970c1d6a252b04a20a67121710"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x6, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x40, 0x9}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x10, 0x6, 0x0, [@generic={0x7a, 0x11, "a536af86a51c153f796f21bd421a8dca101cffb8c406a152999e931b342378db620c5a5ddeeabe57c20c8e7767da459c043fe5eb1a9ab29c88ca4f85fc82fa2aa9c0dce9fbcd19d28b78d81282ce55335e58d5c3ee5d5e5f9d4b707c58ab9ec7ecb9f374469baaacf118a7d2b5a1876811b9270a5e7a8c3b"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0x3, 0x8, 0xb2, [@generic={0x11, 0x31, "a4e5947bd35dfac9e805dcc7d25283"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x2, 0x10, 0x8, [@generic={0xb, 0x0, ']Bg\aS0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @empty, 0x3, 0x2, 0x0, 0x400, 0xb3, 0xc20022, r8}) sendto$packet(r7, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r8, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r11, &(0x7f0000000540), 0xfffffdd8) bind$rds(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r11, &(0x7f0000003b40)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000001c0)=""/102, 0x66}], 0x5, &(0x7f0000000500)=""/29, 0x1d}, 0xfffffff7}, {{&(0x7f0000000680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/193, 0xc1}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/9, 0x9}], 0x2, &(0x7f00000019c0)=""/86, 0x56}, 0x9}, {{&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001ac0)=""/58, 0x3a}], 0x1, &(0x7f0000001b40)=""/77, 0x4d}, 0x7f}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001bc0)=""/88, 0x58}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/185, 0xb9}, {&(0x7f0000002d00)=""/142, 0x8e}, {&(0x7f0000002dc0)=""/164, 0xa4}], 0x5, &(0x7f0000003d80)=""/205, 0xcd}, 0x1}, {{&(0x7f0000002fc0)=@tipc, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003040)=""/87, 0x57}, {&(0x7f00000030c0)=""/89, 0x59}, {&(0x7f0000003140)=""/234, 0xea}, {&(0x7f0000003240)=""/14, 0xe}, {&(0x7f0000003280)=""/13, 0xd}], 0x5, &(0x7f0000003340)=""/95, 0x5f}, 0x7}, {{&(0x7f00000033c0)=@ax25={{0x3, @bcast}, [@rose, @rose, @netrom, @remote, @rose, @bcast, @null, @rose]}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003440)=""/182, 0xb6}, {&(0x7f0000003500)=""/190, 0xbe}, {&(0x7f00000035c0)=""/174, 0xae}, {&(0x7f0000003680)=""/194, 0xc2}], 0x4}, 0x3}, {{&(0x7f00000037c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003840)=""/166, 0xa6}, {&(0x7f0000003900)=""/136, 0x88}, {&(0x7f00000039c0)=""/15, 0xf}, {&(0x7f0000003a00)=""/78, 0x4e}], 0x4, &(0x7f0000003ac0)=""/97, 0x61}, 0xfffffbff}], 0x8, 0x40000000, &(0x7f0000003d40)) 36.217997657s ago: executing program 5 (id=847): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) accept4$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x400) (async) r2 = accept4$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x400) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000005180)={0x0, 'pimreg\x00', {0x200000}, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x45008600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000140)=[{r1, 0x8271}, {r4, 0x8c}], 0x2, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9dbde2353f035347270d076c93f1b1a810cb2c7d72ee9ce76e6da15600893bc36f6502f00"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4a", 0x4, r3) keyctl$link(0x8, r6, r3) 36.088992228s ago: executing program 5 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x80000000, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc891}, 0x11) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_KEYS={0x8, 0x1, 0xba37}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}}, 0x24040084) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) (async) bind$rds(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x24}}, 0x10) 35.919282205s ago: executing program 5 (id=851): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f0000000a00)="c021", 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) 35.913130196s ago: executing program 34 (id=851): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f0000000a00)="c021", 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) 16.21712144s ago: executing program 4 (id=1312): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) exit(0x42) exit(0x0) 15.468996527s ago: executing program 4 (id=1322): io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r0, 0x0, 0x0) (async) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x20000000, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x100) (async) landlock_create_ruleset(&(0x7f0000000040), 0x10, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x180000000) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r1, &(0x7f0000000280)="ca0e808b257a0957f1", 0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@loopback, 0x1c, r10}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x200, 0x2, 0x9, 0x5, 0x4], &(0x7f0000000180)=[0x0, 0x0, 0x1, 0x3], 0x6}}, 0x40) 15.144785028s ago: executing program 4 (id=1332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000206010100000000010000000c000780050015000900000005000500f5ff00000900020073797a3000000000050004000100000005000100060000000c000300686173683a69700000000000"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000206010100000000010000000c000780050015000900000005000500f5ff00000900020073797a3000000000050004000100000005000100060000000c000300686173683a69700000000000"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) 15.086993017s ago: executing program 4 (id=1334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2ae2c3d903f657e7, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000040), 0x2, r7, 0xcccccccc}) (rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000040), &(0x7f0000000600)=[r8], &(0x7f0000000200)}) (async, rerun: 32) r9 = socket(0x11, 0x80a, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) (async) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) (async, rerun: 64) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async, rerun: 64) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYRES16=r14], 0x0) 15.075260625s ago: executing program 4 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsync(0xffffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x18, 0x140b, 0x321, 0x70bd2c, 0x25cfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0080f4}, 0x840) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r4, 0x27d69000) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x12a34729, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x20}}, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 14.998915339s ago: executing program 4 (id=1338): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x7fffffff}, @code={0xa, 0x58, {"66baf80cb8c0d3b581ef66bafc0cb873000000ef440f20c0350c000000440f22c0470f01cbc442f924e53e40a50f20d835200000000f22d8c46175e9290f09460f00d4430f2090"}}, @wr_crn={0x46, 0x20, {0x7, 0x49b}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffffc0}}, @uexit={0x0, 0x18, 0x80000000}, @rdmsr={0x32, 0x18, {0x10b4}}, @rdmsr={0x32, 0x18}, @wr_crn={0x46, 0x20, {0x2, 0x1400000000000}}, @wr_crn={0x46, 0x20, {0x3, 0xff}}, @cpuid={0x14, 0x18, {0x400, 0x5e6d4d46}}, @code={0xa, 0x66, {"460f0096550000006467660fc7b700080000400f78a4c2c800000066410f388033c7442400e9000000c744240200600000ff1c24c401a172d3000f01c3260f01cf66baf80cb82d70a386ef66bafc0cb090ee0f01c8"}}, @wr_crn={0x46, 0x20, {0x9, 0xae}}], 0x1d6}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x804e0003, r5}) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x7, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 6.928567338s ago: executing program 6 (id=1535): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) 6.826452949s ago: executing program 6 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000004000000080000000d00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000432a477f285b459ce80583490eb15e1034fc624923d10c962a95eda0ad43c840407701beb34889a429885c5dde53a42512e209659b169dd008f54ff0163ddb0c1a30b00b15b576d01478fcc426df76daddff298d7a663bb4f896efcd1be5846d13", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb6263ec}, [@alu={0x7, 0x1, 0xb, 0x5, 0x5, 0xfffffffffffffff8, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xb7}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000000300)=""/180, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[r0, r0, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x4, 0x8, 0x8}, {0x2, 0x5, 0x0, 0x9}], 0x10, 0xf399}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r1, r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.825452861s ago: executing program 6 (id=1539): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090}], 0x1, 0x1) 6.813388974s ago: executing program 6 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x10, 0x2, 0x3, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x65, 0x0, 0xb, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0x9f, [@loopback, @multicast2, @private=0xa010102, @loopback, @multicast2]}, @end]}}}}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xb, 0x400, 0x60, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x1, 0x2}}) timerfd_create(0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='task_rename\x00', r3, 0x0, 0x1049c}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='+}[@\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0xd39}, 0x8) close_range(r4, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, &(0x7f0000000700)="66b880008ed80f20d835200000000f22d8b8010000000f01c1b9ad080000b800000000ba010000000f30f20f20d864f6f20f01cbb9da090000b800000000ba000000000f3066baf80cb8eb5d6383ef66bafc0cec66bad004b800500000ef", 0x5e}], 0x1, 0x73, &(0x7f0000000780)=[@cr0={0x0, 0x20000018}, @flags={0x3, 0x82}], 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@dev, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="10002abd7000fedbdf2511000000040001800c000180080003000000000020000180140002000000000000000000000000000000000008000300010000007400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020067656e65766531000000000000000000140002006e657464657673696d30000000000000140002007767320000000000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="14000200626f6e645f736c6176655f31000000004c00018014000200766c616e300000000000000000000000080003000100000014000200677265300000000000000000000000000800030001000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="2c00018008000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="41b89f5a967e92bae0fd77947039ad883047fa6e4c8cfd9033a35feba01759c1c2f008a36a6b667b8decd3d1313c7dacf792a70ff17f07d406b59b7c5c1f21ad8f5e226c8f13063b0e1866ef2e8b54a88c57584d13c321e09af7d3f4e47768e63f42c61559604432a956bc"], 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x44000) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2000e83ab8abaccc0000041420002abd7000ffdbdf2508000100010000000800d66c3bddb4cade6a673e2a6f202a92d47d96b5c0c08843f99a1cc88dc931f005e8a4c5caf1cbdf53ddead02e54c50039c098"], 0x20}}, 0x2000) 6.028830664s ago: executing program 6 (id=1545): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r7, 0x18, 0xfff4, 0x4) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x48801) ioctl$LOOP_GET_STATUS(r8, 0x4c00, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r9, @ANYBLOB="36810000001a0000ff050000000000000000000080417f05c5b30694b8031631513f594deeb684f26cb5a332cb8cf83a0b71f931a60700c32cd30ca0e0768803f3df6232dac1fea0e2d93ae56e438b6a995aa271e1f2f88687dad2725df9afb8320779cd78f06568c2fb4087", @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) setsockopt$MRT_PIM(r9, 0x0, 0xcf, &(0x7f0000000440)=0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000040)=0xd0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0001000000000000f06017a0725b3c1e0d5ebbe5c6001da5ab670000", @ANYRES32=0x0, @ANYBLOB="000000000600050000000000"], 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 5.799126993s ago: executing program 6 (id=1546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000010000000000008031b2534e2600000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446be3988285dcdf12f2130809d78f0a947eeab49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x85}], 0x1}, 0x8004) write$FUSE_INIT(r2, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) dup2(0xffffffffffffffff, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="08000700e0400002"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newchain={0x2c, 0x64, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {0xfff2, 0xfff3}, {0x0, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x2c}}, 0x20028801) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) 1.74307678s ago: executing program 2 (id=1609): mq_open(&(0x7f0000000740)='*{.Z;\xd5E\x95,97\xbd~\x99t\b\xf6GB\xe4x\x95h\xed\xfa\x8d\x81ty\xadiN}\xee\n\x1ek\x10\x8d\xb5\xdb\xcf\x80\'E\x10\xf5\xcc\x19\xd9\xeeO\xfc\x88-%\xde\xf1\xf6\xacC\r~E\x03\x1ca8\xd6\xa2\xa6\xe6\xb8\x95\xa5\xe2\x98\xff_\xbd\xd5\x90h\xf5Su\xe8\x8d\\i\x9a\x7f5+\xb5\xeb\v\x8b\x95.\xa3', 0x40, 0xee, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000640)=0x29c0, 0x4) r1 = fanotify_init(0x0, 0x2) fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0) mq_open(&(0x7f0000000340)=':\x00', 0x40, 0x1a, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0xf8, 0x3, 0x11, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00', 0x7800, 0x7800, 0x3, 0x10001}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x10400, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x140) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x19, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5004}, @call={0x85, 0x0, 0x0, 0x9c}, @cb_func, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xf4, &(0x7f0000000200)=""/244, 0x41000, 0x2, '\x00', r2, @fallback=0x16, r0, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x7, 0x7ff}, 0x10, 0xffffffffffffffff, r0, 0x6, &(0x7f00000004c0)=[r3, r0, r0], &(0x7f0000000500)=[{0x2, 0x4, 0xc, 0x7}, {0x0, 0x5, 0x4, 0x9}, {0x2, 0x3, 0xe, 0xc}, {0x4, 0x1, 0xd, 0x7}, {0x0, 0x5, 0x5, 0x8}, {0x2, 0x8, 0xc, 0x2}], 0x10, 0x9}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80002, 0x8) 1.529226486s ago: executing program 0 (id=1612): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) (async) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r4, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r5 = socket$vsock_stream(0x28, 0x1, 0x0) write(r5, &(0x7f00000003c0)="7e6c64c02b14b6d8626362e227228e35cd91c62c16fef1d1790f58eaa31bd13160bc6d57e89a697255fe5553d34e48896824a48d6ca87b0f991cbcc0e737d0c04cca68ab22389c5cc59b02b31c8de54d052694a758659651389d944f4be3596c727a2fe114a3fb133e2c1cd2a9308e416f7127128d100468d47bf41f391f8b44ef9490defb4a2dd63fa763b1bbd5d62d4b0c3be4c222baafba25e4d4129a0ca30ffba6d2d4230f496de9040cb8de0b794b1a30cfdb319288", 0xb8) (async, rerun: 32) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_loaded', 0x800, 0x182) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180"], 0x70}}, 0x0) 1.528752678s ago: executing program 0 (id=1613): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) (async) accept(r4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeef0000, 0xeeee0000, 0x8, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x100000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7d, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x3, 0x42, 0xb, 0xf8, 0x8, 0x7, 0xe, 0xf1}, {0xeeee0000, 0xf000, 0xb, 0x3, 0x14, 0x2, 0xab, 0x7f, 0x1, 0x83, 0x1, 0x83}, {0x6000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x9, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x100000, 0xeeef0000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x28, 0xb0, 0x9}, {0xffff1000, 0x30}, {0x1, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x3]}) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) (async) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000180)={0x4000, r6}, 0x0) (async, rerun: 32) landlock_restrict_self(r7, 0x2) (async, rerun: 32) landlock_restrict_self(r7, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@hyper}) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@hyper}, @host, 0x0, 0x0, 0x2449, 0x0, 0x0, 0x40000, 0xfffffffc}) (async, rerun: 32) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000240)={{@hyper, 0x5}, @my=0x1, 0x0, 0x4, 0x4, 0x5, 0x4, 0x100, 0x5}) (async) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.527855635s ago: executing program 0 (id=1614): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') socket$inet(0xa, 0x801, 0x84) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file1\x00') 1.467376031s ago: executing program 0 (id=1615): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x26e100, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x26e100, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x2cffb000) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r3, 0x0, 0x0, 0xc0, &(0x7f0000000040)={0x1a, 0x0, 0x74, 0x0, 0x9, 0xa, @broadcast}, 0x10) (async) sendto$llc(r3, 0x0, 0x0, 0xc0, &(0x7f0000000040)={0x1a, 0x0, 0x74, 0x0, 0x9, 0xa, @broadcast}, 0x10) dup(r0) (async) r4 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) (async) syz_open_dev$rtc(&(0x7f0000000000), 0xffffffffffffff55, 0x21c0) 1.466640043s ago: executing program 0 (id=1616): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34c}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000280)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8009, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x11, 0x3, 0x3, "7e0efe3287fda55aab2500000000b482b200", 0x31363553}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0x0, 0x10100, 0x1, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000002000)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x40ead000) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0x58094) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_open_dev$tty1(0xc, 0x4, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x900a000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x40010121}) 1.24914994s ago: executing program 0 (id=1617): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) bind$rds(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='sched_kthread_stop_ret\x00', r4}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs user:trusted: '], 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000780)="b73408e2f8ce2177791fd3dcfb0fabe0e9a6ed0b118de7c685d9e6aee9f484e26d2030e9104d949296e9382f2cda4baadd5e04d33decfc2acda00250a54bb9c927fa64445cb4de0fcd53e3139bcf5f086a3e54dbd70d71182ca09abd1070aa2567a7a2cba4f39ccb7605f189d694ce7d7b4b7c554b082d3c0315b60af9d943b3b7b8", 0x82, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r6 = syz_open_procfs(r2, &(0x7f00000000c0)='comm\x00') fchdir(r6) mount(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000000)='adfs\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(r3, r3, 0x2) syz_open_procfs(r2, &(0x7f00000001c0)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) r7 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r7, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r7, 0x0) userfaultfd(0x80801) 848.944998ms ago: executing program 2 (id=1618): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x3a, 0x0, &(0x7f0000000540)="9a4f1f796ecac0afa6efee7073e66f741b673e78b684388008a1374fed03c7508a50a9e6796dfd73facfb013a6322467a4a0011fc387ea6be1e1", 0x0}, 0x50) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r4 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) syz_usb_disconnect(r1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, 0x0) (async) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0xffff133a, 0x1], [{0x40, 0x6, 0x0, 0x1}, {0xa96, 0x35}, {0x0, 0x8}, {0xffffffff}, {0x0, 0x800}, {}, {}, {}, {}, {0xff}, {0x400}, {0x0, 0x4}], 0xa}) (async) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmmsg(r8, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="cfe6dde0c37efdbb43dc9b530735ea4ad3bf3cff834a5e80ea0801a83a3b9dbe6b7bf3c289f5c083a73c6d1fdf2caec8388cccb3f13cca087d2a42b6fd5cbcfc4812ae7551c08ea285e17540f689e769433ab0eefa6e88bc818c9c6e10753912699110c240bcbdefe5814fcde6253a65ca23784e8eaea0ca74728e94a95ae45c69ba0602cc340659a9f75dbfad8a54defd2bf6a18952feaac931aa4d4965eb92264168e68234c60546156a8b2ed3d017a61c8a28b4230eab850f917bdb02849424d1bb63e55b134b4d4b35cea53c262246d950818ad77cacb0f17d1388", 0xdd}, {&(0x7f0000001300)="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", 0x31b}, {&(0x7f0000002300)='\r', 0x1}], 0x3}}], 0x1, 0x40) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000000)={'bridge0\x00'}) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) 129.138883ms ago: executing program 2 (id=1619): r0 = gettid() r1 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x5}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) recvmsg(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/168, 0xa8}], 0x5}, 0x80) sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) 128.574874ms ago: executing program 2 (id=1620): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket(0x2b, 0x80002, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 919.922µs ago: executing program 2 (id=1621): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x170, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800, 0x0, 0x0, 0x0, 0x2}, {@in=@remote, 0x0, 0x6c}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x34, 0x17, {0x6, 0x0, 0x0, 0x0, 0x0, 0x3, [0x9, 0x3, 0x7, 0x7, 0x2, 0x1]}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x170}}, 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r4, &(0x7f0000000080)=""/116, 0xfffffeb2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'macvtap0\x00', 0x4000}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="000325bd7000fedbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040000000000080001007063690011000200303030303a30303a31302e3000000000080003000000000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000600040002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000d0) socket(0x400000000010, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r10, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newchain={0x0, 0x64, 0x20c, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x4, 0xffe0}, {0x4, 0x8}, {0xf, 0xb}}, [@TCA_CHAIN={0x0, 0xb, 0x6}, @filter_kind_options=@f_flow, @TCA_CHAIN={0x0, 0xb, 0x10001}, @TCA_CHAIN={0x0, 0xb, 0x1c000000}]}, 0x38}}, 0x0) 189.357µs ago: executing program 2 (id=1622): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0xfffffffd, 0x3}, 0x9c) (async) r1 = socket$phonet(0x23, 0x2, 0x1) fstat(r1, &(0x7f0000000240)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6d497c57513c6fdabeba5c4981cf4723"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfffc}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000040) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x8c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0x18, 0x0, @random="4fdbc9b48118870ea631517d21bcba719bf56a9d"}, {0xa, 0x0, @default_ibss_ssid}, {0xb, 0x0, @random="2c8b31bf1e32d9"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (rerun: 64) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) (async, rerun: 32) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) (rerun: 32) getdents(r5, &(0x7f0000000000)=""/26, 0x1a) (async) read(r0, &(0x7f0000002a00)=""/4094, 0xffe) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001900010000000001000000000d0109004d0011806f7686ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e56b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3f909762c0dc5e09b3c01f0afb2d7144f29af11fe6557fca74d923d12c43bc0000004d00120000000000"], 0xb4}}, 0x10) 0s ago: executing program 35 (id=1338): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x7fffffff}, @code={0xa, 0x58, {"66baf80cb8c0d3b581ef66bafc0cb873000000ef440f20c0350c000000440f22c0470f01cbc442f924e53e40a50f20d835200000000f22d8c46175e9290f09460f00d4430f2090"}}, @wr_crn={0x46, 0x20, {0x7, 0x49b}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffffffc0}}, @uexit={0x0, 0x18, 0x80000000}, @rdmsr={0x32, 0x18, {0x10b4}}, @rdmsr={0x32, 0x18}, @wr_crn={0x46, 0x20, {0x2, 0x1400000000000}}, @wr_crn={0x46, 0x20, {0x3, 0xff}}, @cpuid={0x14, 0x18, {0x400, 0x5e6d4d46}}, @code={0xa, 0x66, {"460f0096550000006467660fc7b700080000400f78a4c2c800000066410f388033c7442400e9000000c744240200600000ff1c24c401a172d3000f01c3260f01cf66baf80cb82d70a386ef66bafc0cb090ee0f01c8"}}, @wr_crn={0x46, 0x20, {0x9, 0xae}}], 0x1d6}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x804e0003, r5}) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x7, 0x9, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @loopback, @private=0xa010100}}}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) kernel console output (not intermixed with test programs): Set syz1 is full, maxelem 65536 reached [ 66.355900][ T7175] tipc: Resetting bearer [ 66.373925][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.378352][ T7175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.428709][ T7175] bridge1: left promiscuous mode [ 66.431108][ T7175] bridge2: left promiscuous mode [ 66.433756][ T1149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.437145][ T1149] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.440080][ T1149] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.443109][ T1149] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.463921][ T40] audit: type=1400 audit(1755705761.960:418): avc: denied { setopt } for pid=7179 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.472184][ T40] audit: type=1400 audit(1755705761.960:419): avc: denied { ioctl } for pid=7179 comm="syz.1.326" path="socket:[16713]" dev="sockfs" ino=16713 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.645304][ T40] audit: type=1400 audit(1755705762.140:420): avc: denied { mount } for pid=7187 comm="syz.1.328" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 66.735969][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 66.739679][ T7206] netlink: 'syz.1.333': attribute type 7 has an invalid length. [ 66.743765][ T7206] netlink: 'syz.1.333': attribute type 8 has an invalid length. [ 66.746905][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 66.759529][ T7210] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 66.770042][ T7210] 8021q: adding VLAN 0 to HW filter on device bond4 [ 66.780502][ T7210] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 66.785312][ T7210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 66.825441][ T7253] netlink: 'syz.3.337': attribute type 21 has an invalid length. [ 66.828035][ T7253] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.890055][ T7268] Bluetooth: MGMT ver 1.23 [ 67.092391][ T5329] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 67.201665][ T7303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 67.208459][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 67.262407][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 67.567402][ T7329] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 67.660401][ T7337] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 67.661792][ T7360] BIDI support in bsg has been removed. [ 67.663774][ T7337] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 67.668707][ T7337] overlayfs: failed to set uuid (97/file1, err=-13); falling back to uuid=null. [ 67.822516][ T7403] kvm: kvm [7400]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 67.922348][ T53] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.019867][ T7430] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 68.022578][ T7430] dummy0: entered promiscuous mode [ 68.024617][ T7430] bridge0: port 4(dummy0) entered blocking state [ 68.026763][ T7430] bridge0: port 4(dummy0) entered disabled state [ 68.028855][ T7430] dummy0: entered allmulticast mode [ 68.031153][ T7430] bridge0: port 4(dummy0) entered blocking state [ 68.033254][ T7430] bridge0: port 4(dummy0) entered forwarding state [ 68.093913][ T53] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.097314][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26174, setting to 1024 [ 68.100851][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.106046][ T53] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.108939][ T53] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.111234][ T7442] input: syz1 as /devices/virtual/input/input7 [ 68.111492][ T53] usb 6-1: Manufacturer: syz [ 68.117044][ T5982] udevd[5982]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 68.117752][ T53] usb 6-1: config 0 descriptor?? [ 68.122237][ T7346] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.216546][ T7462] __nla_validate_parse: 1 callbacks suppressed [ 68.216557][ T7462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'. [ 68.526803][ T53] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 68.530162][ T53] appleir 0003:05AC:8243.0004: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 68.692398][ T63] Bluetooth: hci1: command tx timeout [ 68.729734][ T7479] sp0: Synchronizing with TNC [ 68.798945][ T7487] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 68.803218][ T7487] Error validating options; rc = [-22] [ 68.806335][ T7487] ufs: You didn't specify the type of your ufs filesystem [ 68.806335][ T7487] [ 68.806335][ T7487] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 68.806335][ T7487] [ 68.806335][ T7487] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 68.815841][ T7487] ufs: ufstype=old is supported read-only [ 68.817780][ T7487] ufs: ufs_fill_super(): bad magic number [ 68.959076][ T61] usb 6-1: USB disconnect, device number 7 [ 69.218271][ T7531] dlm: no local IP address has been set [ 69.220078][ T7531] dlm: cannot start dlm midcomms -107 [ 69.282393][ T5970] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 69.442346][ T5970] usb 8-1: Using ep0 maxpacket: 8 [ 69.445106][ T5970] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.447725][ T5970] usb 8-1: config 179 has no interface number 0 [ 69.449965][ T5970] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.455428][ T5970] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 69.459003][ T5970] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.462696][ T5970] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 69.466324][ T5970] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.470488][ T5970] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.473474][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.477258][ T7510] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 69.573784][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 69.573793][ T40] audit: type=1400 audit(1755705765.070:435): avc: denied { listen } for pid=7551 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 69.586298][ T40] audit: type=1400 audit(1755705765.080:436): avc: denied { getopt } for pid=7561 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.625939][ T7559] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 69.629300][ T7555] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 69.681525][ T5970] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input8 [ 69.700757][ T40] audit: type=1326 audit(1755705765.190:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.708608][ T40] audit: type=1326 audit(1755705765.190:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.716180][ T40] audit: type=1326 audit(1755705765.190:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.723683][ T40] audit: type=1326 audit(1755705765.190:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.726553][ T7571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'. [ 69.730615][ T40] audit: type=1326 audit(1755705765.190:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.733623][ T7571] netlink: 288 bytes leftover after parsing attributes in process `syz.2.385'. [ 69.740259][ T40] audit: type=1326 audit(1755705765.190:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.750192][ T40] audit: type=1326 audit(1755705765.190:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.757303][ T40] audit: type=1326 audit(1755705765.190:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7561 comm="syz.0.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56398ebe9 code=0x7fc00000 [ 69.771451][ T7574] tmpfs: Bad value for 'mpol' [ 69.845745][ T7584] fuse: Unknown parameter 'rootmoe' [ 69.962143][ T9] usb 8-1: USB disconnect, device number 11 [ 69.962270][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 69.967488][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 70.065438][ T7644] bridge34: the hash_elasticity option has been deprecated and is always 16 [ 70.262336][ T5765] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.370483][ T7666] kvm: pic: non byte write [ 70.412376][ T5765] usb 7-1: Using ep0 maxpacket: 32 [ 70.416212][ T5765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.419680][ T5765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.422789][ T5765] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 70.425651][ T5765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.429100][ T5765] usb 7-1: config 0 descriptor?? [ 70.527271][ T7677] netlink: 'syz.0.403': attribute type 6 has an invalid length. [ 70.529838][ T7677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.403'. [ 70.534192][ T7678] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.536661][ T7678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.538944][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 70.541209][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 70.543553][ T7678] IPv6: NLM_F_CREATE should be set when creating new route [ 70.548553][ T7677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=240 sclass=netlink_route_socket pid=7677 comm=syz.0.403 [ 70.601241][ T7693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.406'. [ 70.831670][ T7713] Attempt to restore checkpoint with obsolete wellknown handles [ 70.837625][ T5765] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 71.174454][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.177037][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.569546][ T7747] syz_tun: entered allmulticast mode [ 71.577249][ T7745] syz_tun: left allmulticast mode [ 71.821027][ T7766] binder_alloc: binder_alloc_mmap_handler: 7765 200000ff9000-200000ffd000 already mapped failed -16 [ 71.858599][ T7769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.969606][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 71.991360][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 71.994736][ T1149] bond0: (slave bond_slave_0): interface is now down [ 71.996952][ T1149] bond0: (slave bond_slave_1): interface is now down [ 71.999219][ T1149] bond0: now running without any active interface! [ 72.005062][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.424'. [ 72.048819][ T7858] 9p: Unknown access argument 3%nR9'#>Wr!4Jb{: -22 [ 72.094367][ T7858] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 72.151730][ T7881] bridge0: port 3(team0) entered disabled state [ 72.153900][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.156230][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.165333][ T7888] No control pipe specified [ 72.167863][ T7888] pvfs2: Unknown parameter '@' [ 72.184528][ T5765] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 72.188966][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.193531][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.225583][ T1149] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.227131][ T7893] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 72.228410][ T1149] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.234843][ T1149] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.237746][ T1149] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.372724][ T53] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 72.522408][ T53] usb 5-1: device descriptor read/64, error -71 [ 72.762539][ T53] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 72.892803][ T53] usb 5-1: device descriptor read/64, error -71 [ 73.002486][ T53] usb usb5-port1: attempt power cycle [ 73.102990][ T7919] netlink: 100 bytes leftover after parsing attributes in process `syz.2.440'. [ 73.114168][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.441'. [ 73.183595][ T7989] usb usb6: usbfs: process 7989 (syz.1.441) did not claim interface 0 before use [ 73.342454][ T53] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 73.362769][ T53] usb 5-1: device descriptor read/8, error -71 [ 73.602471][ T53] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 73.622781][ T53] usb 5-1: device descriptor read/8, error -71 [ 73.733013][ T53] usb usb5-port1: unable to enumerate USB device [ 73.822892][ T5342] usb 7-1: USB disconnect, device number 4 [ 74.073633][ T8023] bond0: entered promiscuous mode [ 74.075173][ T8023] bond_slave_0: entered promiscuous mode [ 74.076928][ T8023] bond_slave_1: entered promiscuous mode [ 74.079536][ T8023] batadv0: entered promiscuous mode [ 74.081561][ T8023] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 74.084499][ T8023] bond0: left promiscuous mode [ 74.086303][ T8023] bond_slave_0: left promiscuous mode [ 74.088289][ T8023] bond_slave_1: left promiscuous mode [ 74.090656][ T8023] batadv0: left promiscuous mode [ 74.170650][ T8030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.447'. [ 74.225089][ T61] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 74.267643][ T8046] program syz.2.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.384528][ T61] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 74.387097][ T61] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 74.387652][ T8055] kvm: kvm [8054]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 74.390159][ T61] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.397407][ T61] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 74.400242][ T61] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 74.402922][ T61] usb 6-1: Product: syz [ 74.404256][ T61] usb 6-1: Manufacturer: syz [ 74.405751][ T61] usb 6-1: SerialNumber: syz [ 74.408002][ T61] usb 6-1: config 0 descriptor?? [ 74.410571][ T61] hub 6-1:0.0: bad descriptor, ignoring hub [ 74.412604][ T61] hub 6-1:0.0: probe with driver hub failed with error -5 [ 74.415803][ T61] usb 6-1: selecting invalid altsetting 0 [ 74.621440][ T8075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.624103][ T8075] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 74.629118][ T8075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.630993][ T8075] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 74.700807][ T8115] evm: overlay not supported [ 74.745816][ T40] kauditd_printk_skb: 575 callbacks suppressed [ 74.745831][ T40] audit: type=1400 audit(1755705770.240:1020): avc: denied { setopt } for pid=8118 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.773675][ T8119] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 74.967024][ T40] audit: type=1400 audit(1755705770.460:1021): avc: denied { bind } for pid=8139 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.970424][ T8141] overlay: ./file1 is not a directory [ 74.974161][ T40] audit: type=1400 audit(1755705770.460:1022): avc: denied { node_bind } for pid=8139 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 74.983944][ T40] audit: type=1400 audit(1755705770.460:1023): avc: denied { create } for pid=8139 comm="syz.2.462" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.120073][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 75.127681][ T40] audit: type=1400 audit(1755705770.620:1024): avc: denied { map } for pid=8150 comm="syz.2.464" path="pipe:[18986]" dev="pipefs" ino=18986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.159934][ T40] audit: type=1400 audit(1755705770.650:1025): avc: denied { map } for pid=8159 comm="syz.2.465" path="socket:[19588]" dev="sockfs" ino=19588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 75.212570][ T8176] program syz.0.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.215539][ T8176] ata1.00: invalid transfer count 0 [ 75.246999][ T40] audit: type=1400 audit(1755705770.740:1026): avc: denied { create } for pid=8185 comm="syz.2.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.253428][ T40] audit: type=1400 audit(1755705770.750:1027): avc: denied { map } for pid=8185 comm="syz.2.471" path="/127/file0" dev="tmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.264562][ T40] audit: type=1400 audit(1755705770.760:1028): avc: denied { listen } for pid=8186 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.265154][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 75.312549][ T8016] usb 6-1: reset high-speed USB device number 8 using dummy_hcd [ 75.351305][ T8199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.474'. [ 75.354808][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 75.357643][ T8201] netlink: 'syz.3.474': attribute type 7 has an invalid length. [ 75.360037][ T8201] netlink: 'syz.3.474': attribute type 8 has an invalid length. [ 75.362602][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 75.367986][ T8201] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 75.370927][ T8201] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 75.426358][ T8219] veth1_to_team: mtu less than device minimum [ 75.476939][ T8016] usb 6-1: device firmware changed [ 75.482352][ T9] usb 6-1: USB disconnect, device number 8 [ 75.507156][ T40] audit: type=1400 audit(1755705771.000:1029): avc: denied { connect } for pid=8246 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 75.622784][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 75.753964][ T8264] netlink: 14 bytes leftover after parsing attributes in process `syz.3.484'. [ 75.765908][ T8264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.770673][ T8264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.774205][ T9] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 75.776898][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.777376][ T8264] bond0 (unregistering): Released all slaves [ 75.780197][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 75.782235][ T9] usb 6-1: string descriptor 0 read error: -22 [ 75.786342][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.791526][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 75.795717][ T9] usb 6-1: config 0 descriptor?? [ 75.798225][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 75.800321][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 75.804343][ T9] usb 6-1: selecting invalid altsetting 0 [ 75.806980][ T8273] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 29 [ 75.851021][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 75.909212][ T8340] netlink: 'syz.3.491': attribute type 16 has an invalid length. [ 75.913757][ T8340] netlink: 'syz.3.491': attribute type 17 has an invalid length. [ 75.918968][ T8340] macsec1: left promiscuous mode [ 75.920624][ T8340] macsec1: left allmulticast mode [ 75.986733][ T8362] netlink: 'syz.0.494': attribute type 29 has an invalid length. [ 76.000438][ T8016] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 76.004228][ T8016] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.445'. [ 76.022658][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.495'. [ 76.033308][ T8362] cdrom: dropping to single frame dma [ 76.118219][ T8378] could not allocate digest TFM handle sha512-neon [ 76.128093][ T8376] could not allocate digest TFM handle sha512-neon [ 76.292944][ T8425] netlink: '': attribute type 10 has an invalid length. [ 76.335292][ T8435] openvswitch: netlink: IP tunnel dst address not specified [ 76.425005][ T8442] vlan0: entered allmulticast mode [ 76.426780][ T8442] veth1: entered allmulticast mode [ 76.547492][ T8460] geneve1: entered allmulticast mode [ 76.551230][ T8462] binder: BINDER_SET_CONTEXT_MGR already set [ 76.554475][ T8462] binder: 8459:8462 ioctl 4018620d 200000000100 returned -16 [ 76.600681][ T8480] SELinux: failed to load policy [ 76.628319][ T5970] usb 6-1: USB disconnect, device number 9 [ 76.706535][ T8570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.728390][ T8574] syz.2.525: attempt to access beyond end of device [ 76.728390][ T8574] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 76.733302][ T8574] FAT-fs (nbd2): unable to read boot sector [ 76.789450][ T8591] netlink: 'syz.3.530': attribute type 5 has an invalid length. [ 76.938759][ T8610] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 76.946079][ T8613] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 77.073763][ T8638] dlm: no locking on control device [ 77.153376][ T5342] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 77.157597][ T8652] binder: 8651:8652 ioctl 4018620d 200000000200 returned -22 [ 77.243362][ T8659] tipc: Bearer : already 2 bearers with priority 10 [ 77.246046][ T8659] tipc: Bearer : trying with adjusted priority [ 77.249176][ T8659] tipc: Enabled bearer , priority 9 [ 77.303551][ T5342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.311015][ T5342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.314616][ T5342] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.318649][ T5342] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.321456][ T5342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.324955][ T5342] usb 6-1: config 0 descriptor?? [ 77.728393][ T8604] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 77.731157][ T8604] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 77.737836][ T5342] usbhid 6-1:0.0: can't add hid device: -71 [ 77.746327][ T5342] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 77.753091][ T5342] usb 6-1: USB disconnect, device number 10 [ 77.762915][ T8692] openvswitch: netlink: Flow actions attr not present in new flow. [ 77.949445][ T8740] Invalid ELF header magic: != ELF [ 77.989233][ T8756] ptrace attach of "/syz-executor exec"[5973] was attempted by "/syz-executor exec"[8756] [ 78.035349][ T8766] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 78.053478][ T8766] netlink: 'syz.0.564': attribute type 29 has an invalid length. [ 78.087270][ T8788] openvswitch: netlink: Flow actions attr not present in new flow. [ 78.090508][ T8789] openvswitch: netlink: Flow actions attr not present in new flow. [ 78.192699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.211434][ T8827] hfs: unable to load iocharset "io#harset" [ 78.224183][ T8827] hfs: unable to load iocharset "io#harset" [ 78.250258][ T8844] : renamed from lo (while UP) [ 78.292366][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 78.442445][ T53] usb 6-1: device descriptor read/64, error -71 [ 78.535530][ T8871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.647715][ T8943] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.688979][ T8958] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 78.691060][ T8958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.693507][ T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 78.696023][ T8958] vhci_hcd vhci_hcd.0: Device attached [ 78.706164][ T8960] vhci_hcd: connection closed [ 78.706337][ T1146] vhci_hcd: stop threads [ 78.709328][ T1146] vhci_hcd: release socket [ 78.710735][ T1146] vhci_hcd: disconnect device [ 78.832370][ T53] usb 6-1: device descriptor read/64, error -71 [ 78.842973][ T9014] bond1: entered allmulticast mode [ 78.844942][ T9014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.852938][ T9048] bond2: entered allmulticast mode [ 78.854700][ T9048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.942490][ T53] usb usb6-port1: attempt power cycle [ 78.999995][ T9101] overlay: Bad value for 'verity' [ 79.002415][ T5970] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 79.175194][ T5970] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.178064][ T5970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.180569][ T5970] usb 8-1: Product: syz [ 79.181902][ T5970] usb 8-1: Manufacturer: syz [ 79.183656][ T5970] usb 8-1: SerialNumber: syz [ 79.185959][ T9119] __nla_validate_parse: 13 callbacks suppressed [ 79.185969][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'. [ 79.187384][ T5970] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.209706][ T5970] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.227135][ T9131] bridge35: entered promiscuous mode [ 79.228966][ T9131] bridge35: entered allmulticast mode [ 79.282645][ T53] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 79.302800][ T53] usb 6-1: device descriptor read/8, error -71 [ 79.490314][ T9163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.620'. [ 79.496945][ T9163] netlink: 92 bytes leftover after parsing attributes in process `syz.2.620'. [ 79.542324][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 79.562697][ T53] usb 6-1: device descriptor read/8, error -71 [ 79.622501][ T8998] ip6tnl2: entered promiscuous mode [ 79.624304][ T8998] ip6tnl2: entered allmulticast mode [ 79.655337][ T9186] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 79.672465][ T53] usb usb6-port1: unable to enumerate USB device [ 79.686662][ T5342] usb 8-1: USB disconnect, device number 12 [ 79.813866][ T9151] cgroup: fork rejected by pids controller in /syz0 [ 80.066059][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 80.066071][ T40] audit: type=1400 audit(1755705776.565:1088): avc: denied { nosuid_transition } for pid=9227 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 80.074945][ T40] audit: type=1400 audit(1755705776.565:1089): avc: denied { transition } for pid=9227 comm="syz.2.626" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 80.084359][ T40] audit: type=1400 audit(1755705776.565:1090): avc: denied { entrypoint } for pid=9227 comm="syz.2.626" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=10 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.093905][ T40] audit: type=1400 audit(1755705776.565:1091): avc: denied { share } for pid=9227 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 80.100820][ T40] audit: type=1400 audit(1755705776.565:1092): avc: denied { noatsecure } for pid=9227 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 80.429198][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 80.462344][ T5970] usb 8-1: Service connection timeout for: 256 [ 80.464682][ T5970] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 80.467746][ T5970] ath9k_htc: Failed to initialize the device [ 80.470351][ T5342] usb 8-1: ath9k_htc: USB layer deinitialized [ 81.132109][ T9283] syz.1.634: attempt to access beyond end of device [ 81.132109][ T9283] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 81.136163][ T9283] EXT4-fs (nbd1): unable to read superblock [ 81.193494][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 81.218594][ T40] audit: type=1326 audit(1755705777.715:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.1.637" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35b378ebe9 code=0x0 [ 81.229199][ T40] audit: type=1400 audit(1755705777.725:1094): avc: denied { mount } for pid=9292 comm="syz.3.638" name="/" dev="hugetlbfs" ino=22445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 81.237483][ T40] audit: type=1400 audit(1755705777.735:1095): avc: denied { unmount } for pid=5969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 81.354101][ T9314] bridge0: entered allmulticast mode [ 81.357229][ T40] audit: type=1400 audit(1755705777.855:1096): avc: denied { create } for pid=9312 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.364005][ T40] audit: type=1400 audit(1755705777.865:1097): avc: denied { write } for pid=9312 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.412644][ T54] cfg80211: failed to load regulatory.db [ 81.429637][ T9325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.636869][ T9351] geneve2: entered promiscuous mode [ 81.638857][ T9351] geneve2: entered allmulticast mode [ 82.148480][ T9417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.245261][ T9430] validate_nla: 2 callbacks suppressed [ 82.245272][ T9430] netlink: 'syz.3.664': attribute type 13 has an invalid length. [ 82.250497][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 82.255044][ T9430] tracefs: Unknown parameter 'norecovery' [ 82.288474][ T9432] syzkaller0: entered promiscuous mode [ 82.290250][ T9432] syzkaller0: entered allmulticast mode [ 82.580311][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 82.587367][ T9459] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 82.590116][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 82.593736][ T9459] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 82.597023][ T9459] overlayfs: overlapping lowerdir path [ 82.620102][ T9463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.671'. [ 83.202237][ T9509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.512750][ T9530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.545294][ T5329] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.547762][ T5329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.550142][ T5329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.553058][ T5329] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.555728][ T5329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.560386][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.564596][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.567352][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.570335][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.573002][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.632038][ T9531] chnl_net:caif_netlink_parms(): no params data found [ 83.678120][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.680373][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.683749][ T9531] bridge_slave_0: entered allmulticast mode [ 83.686024][ T9531] bridge_slave_0: entered promiscuous mode [ 83.688612][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.690871][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.693770][ T9531] bridge_slave_1: entered allmulticast mode [ 83.696962][ T9531] bridge_slave_1: entered promiscuous mode [ 83.717938][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.721959][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.743045][ T9531] team0: Port device team_slave_0 added [ 83.747306][ T9531] team0: Port device team_slave_1 added [ 83.771779][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.775748][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.785173][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.792361][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.794635][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.803050][ T9531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.813146][ T60] team0: left allmulticast mode [ 83.815205][ T60] team_slave_0: left allmulticast mode [ 83.817470][ T60] team_slave_1: left allmulticast mode [ 83.819756][ T60] team0: left promiscuous mode [ 83.821752][ T60] team_slave_0: left promiscuous mode [ 83.824383][ T60] team_slave_1: left promiscuous mode [ 83.826740][ T60] bridge0: port 3(team0) entered disabled state [ 83.830187][ T60] bridge_slave_1: left allmulticast mode [ 83.831990][ T60] bridge_slave_1: left promiscuous mode [ 83.834338][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.837317][ T60] bridge_slave_0: left allmulticast mode [ 83.839181][ T60] bridge_slave_0: left promiscuous mode [ 83.841034][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.967386][T10238] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 83.969986][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.689'. [ 83.983787][ T60] bond1 (unregistering): Released all slaves [ 83.989634][ T60] bond2 (unregistering): Released all slaves [ 83.995015][ T60] bond3 (unregistering): Released all slaves [ 84.000908][ T60] bond4 (unregistering): (slave wlan0): Releasing active interface [ 84.004362][ T60] bond4 (unregistering): Released all slaves [ 84.020830][T10238] team0: Port device geneve0 added [ 84.033445][ T9531] hsr_slave_0: entered promiscuous mode [ 84.035960][ T9531] hsr_slave_1: entered promiscuous mode [ 84.038290][ T9531] debugfs: 'hsr0' already exists in 'hsr' [ 84.040127][ T9531] Cannot create hsr debugfs directory [ 84.069895][ T60] tipc: Left network mode [ 84.122210][ T9531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.126023][ T9531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.129332][ T9531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.132839][ T9531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.143186][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.145481][ T9531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.147776][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.150323][ T9531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.172352][ T9531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.178051][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.181133][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.186431][ T9531] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.190717][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.192954][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.197889][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.200127][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.219571][ T60] hsr_slave_0: left promiscuous mode [ 84.221881][ T60] hsr_slave_1: left promiscuous mode [ 84.223973][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.226639][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.264709][ T60] team0 (unregistering): Port device team_slave_1 removed [ 84.270029][ T60] team0 (unregistering): Port device team_slave_0 removed [ 84.372342][ T9531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.468400][ T9531] veth0_vlan: entered promiscuous mode [ 84.472892][ T9531] veth1_vlan: entered promiscuous mode [ 84.481606][ T9531] veth0_macvtap: entered promiscuous mode [ 84.487096][ T9531] veth1_macvtap: entered promiscuous mode [ 84.493884][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.498753][ T9531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.503705][ T1049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.506548][ T1049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.509528][ T1049] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.514019][ T1049] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.538000][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.540884][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.551587][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.554883][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.602962][T10618] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 84.603338][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 84.605735][T10618] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 84.686436][T10600] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.691'. [ 84.717276][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 84.720193][T10670] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 84.722902][T10670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.764385][T10685] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 84.870064][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.873050][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.876224][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.879868][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.883932][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.888062][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 84.891963][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 85.049765][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.052205][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.055539][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.058328][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.060969][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.119393][T10738] chnl_net:caif_netlink_parms(): no params data found [ 85.200157][T10879] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 85.231865][T10738] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.235056][T10738] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.238188][T10738] bridge_slave_0: entered allmulticast mode [ 85.240542][T10738] bridge_slave_0: entered promiscuous mode [ 85.244598][T10738] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.246931][T10738] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.249555][T10738] bridge_slave_1: entered allmulticast mode [ 85.253199][T10738] bridge_slave_1: entered promiscuous mode [ 85.285331][T11164] fuse: Bad value for 'fd' [ 85.297655][T10738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.301832][T10738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.331534][T10738] team0: Port device team_slave_0 added [ 85.335857][T10738] team0: Port device team_slave_1 added [ 85.350519][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 85.350534][ T40] audit: type=1400 audit(1755706037.845:1159): avc: denied { name_connect } for pid=11361 comm="syz.4.716" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 85.381553][T10738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.383807][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.391796][T10738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.395968][T10738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.398293][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.407547][T10738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.445113][T10738] hsr_slave_0: entered promiscuous mode [ 85.447487][T10738] hsr_slave_1: entered promiscuous mode [ 85.520582][T10738] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.525367][T10738] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.529495][T10738] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.534483][T10738] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.546205][T10738] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.548717][T10738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.551279][T10738] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.553887][T10738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.573164][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.575809][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.582867][T10738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.589473][T10738] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.593750][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.595937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.600084][T10880] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.602312][T10880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.652484][ T63] Bluetooth: hci1: command tx timeout [ 85.677356][T10738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.767690][T10738] veth0_vlan: entered promiscuous mode [ 85.771936][T10738] veth1_vlan: entered promiscuous mode [ 85.782521][T10738] veth0_macvtap: entered promiscuous mode [ 85.785850][T10738] veth1_macvtap: entered promiscuous mode [ 85.792678][T10738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.798164][T10738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.804008][T10880] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807004][T10880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.810394][T10880] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.813393][T10880] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.833719][T10880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.836255][T10880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.845066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.847522][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.095442][T11864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.099818][T11867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.296807][T11897] netlink: 'syz.4.728': attribute type 29 has an invalid length. [ 86.300921][T11897] netlink: 'syz.4.728': attribute type 29 has an invalid length. [ 86.302626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.542956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.895339][ T40] audit: type=1400 audit(1755706039.395:1160): avc: denied { ioctl } for pid=11941 comm="syz.5.736" path="socket:[25890]" dev="sockfs" ino=25890 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.906261][T11947] Bluetooth: MGMT ver 1.23 [ 86.985177][ T40] audit: type=1400 audit(1755706039.485:1161): avc: denied { bind } for pid=11972 comm="syz.5.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.103322][ T63] Bluetooth: hci0: command tx timeout [ 87.192472][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.272191][ T40] audit: type=1400 audit(1755706039.765:1162): avc: denied { append } for pid=12038 comm="syz.2.754" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.304551][T12049] unsupported nlmsg_type 40 [ 87.306444][ T40] audit: type=1400 audit(1755706039.805:1163): avc: denied { mounton } for pid=12048 comm="syz.0.757" path="/bus" dev="ramfs" ino=25974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 87.313706][T12050] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 87.316418][T12050] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 87.319786][ T40] audit: type=1326 audit(1755706039.805:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.2.758" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb02f78ebe9 code=0x0 [ 87.320422][T12049] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.330349][T12049] overlayfs: failed to set xattr on upper [ 87.332725][T12049] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.334985][T12049] overlayfs: ...falling back to index=off. [ 87.336892][T12049] overlayfs: ...falling back to uuid=null. [ 87.353934][ T34] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.356672][ T34] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.359854][ T34] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.363123][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.366547][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.371630][ T34] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.382369][ T34] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.385558][ T34] usb 9-1: Product: syz [ 87.386895][ T34] usb 9-1: Manufacturer: syz [ 87.390134][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 87.391727][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 87.394246][ T34] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 87.396089][ T34] cdc_wdm 9-1:1.0: Unknown control protocol [ 87.550624][ T40] audit: type=1400 audit(1755706040.045:1165): avc: denied { setopt } for pid=12077 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 87.593752][ T40] audit: type=1400 audit(1755706040.095:1166): avc: denied { read write } for pid=11937 comm="syz.4.737" name="cdc-wdm0" dev="devtmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 87.601599][ T6020] usb 9-1: USB disconnect, device number 2 [ 87.609493][ T40] audit: type=1400 audit(1755706040.095:1167): avc: denied { open } for pid=11937 comm="syz.4.737" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 87.732453][ T63] Bluetooth: hci1: command tx timeout [ 87.756395][T12100] syz_tun: entered allmulticast mode [ 87.759670][T12100] raw_sendmsg: syz.0.768 forgot to set AF_INET. Fix it! [ 87.763766][T12099] syz_tun: left allmulticast mode [ 88.034035][T12114] overlayfs: invalid origin (0000) [ 88.072051][ T5970] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.094757][T12126] fuse: Unknown parameter 'H2AimL! HID v0.00 Device [syz1] on syz0 [ 88.145950][T12131] fido_id[12131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.178810][T12143] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 88.188593][T12143] CIFS mount error: No usable UNC path provided in device string! [ 88.188593][T12143] [ 88.192048][T12143] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 88.512391][ T838] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 88.549070][T12195] libceph: resolve ' [ 88.549070][T12195] -&fYǝa2i [ 88.549070][T12195] .?&*&' (ret=-3): failed [ 88.663804][ T838] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 88.668363][ T838] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 88.672013][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.677647][ T838] usb 9-1: config 0 descriptor?? [ 88.680344][T12166] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 89.090034][ T838] elan 0003:04F3:0755.0007: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 89.182353][ T63] Bluetooth: hci0: command tx timeout [ 89.339732][ T838] usb 9-1: USB disconnect, device number 3 [ 89.395634][T12242] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 89.421522][T12245] NILFS (nbd5): device size too small [ 89.541098][ T838] libceph: connect (1)[c::]:6789 error -101 [ 89.543385][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 89.573120][T12273] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 89.585873][T12273] CUSE: unknown device info "&b%ZW)3\my " [ 89.588132][T12273] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 89.592508][T12266] ceph: No mds server is up or the cluster is laggy [ 89.593044][T12267] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 89.593083][T12274] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 89.593097][T12274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.594895][T12273] CUSE: DEVNAME unspecified [ 89.598360][T12267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 89.628636][T12281] netlink: 'syz.5.805': attribute type 5 has an invalid length. [ 89.631037][T12281] __nla_validate_parse: 38 callbacks suppressed [ 89.631046][T12281] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.805'. [ 89.723560][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.808'. [ 89.726324][T12300] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 89.728768][T12300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.778970][T12306] netlink: 52 bytes leftover after parsing attributes in process `syz.2.810'. [ 89.781792][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 89.784732][T12306] tipc: MTU too low for tipc bearer [ 89.787219][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 89.822366][ T63] Bluetooth: hci1: command tx timeout [ 89.842037][T12331] CIFS mount error: No usable UNC path provided in device string! [ 89.842037][T12331] [ 89.846836][T12331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 89.940113][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.818'. [ 89.977369][T12344] syzkaller1: entered promiscuous mode [ 89.979241][T12344] syzkaller1: entered allmulticast mode [ 90.180952][T12365] netlink: 294 bytes leftover after parsing attributes in process `syz.2.823'. [ 90.226886][T12371] lo speed is unknown, defaulting to 1000 [ 90.228803][T12371] lo speed is unknown, defaulting to 1000 [ 90.230814][T12371] lo speed is unknown, defaulting to 1000 [ 90.233785][T12371] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.237556][T12371] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 90.244298][T12371] lo speed is unknown, defaulting to 1000 [ 90.246556][T12371] lo speed is unknown, defaulting to 1000 [ 90.248859][T12371] lo speed is unknown, defaulting to 1000 [ 90.250998][T12371] lo speed is unknown, defaulting to 1000 [ 90.253791][T12371] lo speed is unknown, defaulting to 1000 [ 90.516375][T12389] tipc: Enabling of bearer rejected, failed to enable media [ 90.521697][T12389] overlayfs: failed to resolve './bus/file0': -2 [ 90.524483][T12389] syz.2.828 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.085046][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.834'. [ 91.088138][T12417] syz.2.834: attempt to access beyond end of device [ 91.088138][T12417] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 91.092489][T12417] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 91.110501][T12423] syzkaller1: entered promiscuous mode [ 91.113103][T12423] syzkaller1: entered allmulticast mode [ 91.262729][ T63] Bluetooth: hci0: command tx timeout [ 91.295163][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 91.295177][ T40] audit: type=1400 audit(1755706043.795:1180): avc: denied { connect } for pid=12448 comm="syz.4.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.295886][T12449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.842'. [ 91.370715][T12461] syzkaller0: entered promiscuous mode [ 91.372913][T12461] syzkaller0: entered allmulticast mode [ 91.392810][T12466] netlink: 'syz.4.845': attribute type 4 has an invalid length. [ 91.412942][T12022] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 91.454395][T12468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.573831][T12022] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.577247][T12022] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.582244][T12022] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.585477][T12022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.588273][T12022] usb 7-1: Product: syz [ 91.589625][T12022] usb 7-1: Manufacturer: syz [ 91.591128][T12022] usb 7-1: SerialNumber: syz [ 91.625521][T12478] sysfs: cannot create duplicate filename '/class/ieee80211/!fIZE,=$)%ĂL' [ 91.629329][T12478] CPU: 3 UID: 0 PID: 12478 Comm: syz.0.846 Not tainted syzkaller #0 PREEMPT(full) [ 91.629346][T12478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.629353][T12478] Call Trace: [ 91.629358][T12478] [ 91.629362][T12478] dump_stack_lvl+0x16c/0x1f0 [ 91.629420][T12478] sysfs_warn_dup+0x7f/0xa0 [ 91.629445][T12478] sysfs_do_create_link_sd+0x124/0x140 [ 91.629461][T12478] sysfs_create_link+0x61/0xc0 [ 91.629477][T12478] device_add+0x62c/0x1aa0 [ 91.629493][T12478] ? __pfx_device_add+0x10/0x10 [ 91.629507][T12478] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.629520][T12478] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 91.629540][T12478] wiphy_register+0x1df4/0x29f0 [ 91.629552][T12478] ? netdev_run_todo+0x864/0x1320 [ 91.629571][T12478] ? __dev_printk+0x270/0x270 [ 91.629588][T12478] ? __pfx_wiphy_register+0x10/0x10 [ 91.629610][T12478] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 91.629623][T12478] ieee80211_register_hw+0x24a9/0x4060 [ 91.629638][T12478] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 91.629651][T12478] ? net_generic+0xea/0x2a0 [ 91.629664][T12478] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.629676][T12478] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 91.629687][T12478] ? __hrtimer_setup+0x176/0x280 [ 91.629699][T12478] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 91.629717][T12478] ? trace_kmalloc+0x2b/0xd0 [ 91.629732][T12478] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 91.629785][T12478] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 91.629808][T12478] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 91.629825][T12478] ? __asan_memcpy+0x3c/0x60 [ 91.629844][T12478] hwsim_new_radio_nl+0xb51/0x12c0 [ 91.629860][T12478] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 91.629877][T12478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 91.629895][T12478] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 91.629912][T12478] genl_family_rcv_msg_doit+0x206/0x2f0 [ 91.629928][T12478] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 91.629944][T12478] ? bpf_lsm_capable+0x9/0x10 [ 91.629960][T12478] ? security_capable+0x7e/0x260 [ 91.629973][T12478] ? ns_capable+0xd7/0x110 [ 91.629986][T12478] genl_rcv_msg+0x55c/0x800 [ 91.629999][T12478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.630014][T12478] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 91.630037][T12478] ? rcu_is_watching+0x12/0xc0 [ 91.630051][T12478] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 91.630065][T12478] netlink_rcv_skb+0x155/0x420 [ 91.630076][T12478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.630090][T12478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.630104][T12478] ? netlink_deliver_tap+0x1ae/0xd30 [ 91.630115][T12478] ? selinux_netlink_send+0x578/0x830 [ 91.630128][T12478] ? is_vmalloc_addr+0x86/0xa0 [ 91.630139][T12478] genl_rcv+0x28/0x40 [ 91.630151][T12478] netlink_unicast+0x5aa/0x870 [ 91.630163][T12478] ? __pfx_netlink_unicast+0x10/0x10 [ 91.630175][T12478] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 91.630189][T12478] netlink_sendmsg+0x8d1/0xdd0 [ 91.630201][T12478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.630219][T12478] ____sys_sendmsg+0xa95/0xc70 [ 91.630234][T12478] ? copy_msghdr_from_user+0x10a/0x160 [ 91.630245][T12478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.630260][T12478] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.630273][T12478] ___sys_sendmsg+0x134/0x1d0 [ 91.630284][T12478] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.630295][T12478] ? futex_private_hash_put+0x11c/0x300 [ 91.630314][T12478] ? rcu_is_watching+0x12/0xc0 [ 91.630332][T12478] __sys_sendmsg+0x16d/0x220 [ 91.630344][T12478] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.630355][T12478] ? __x64_sys_futex+0x1e0/0x4c0 [ 91.630374][T12478] ? fput+0x9b/0xd0 [ 91.630388][T12478] do_syscall_64+0xcd/0x4c0 [ 91.630400][T12478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.630412][T12478] RIP: 0033:0x7fc56398ebe9 [ 91.630421][T12478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.630431][T12478] RSP: 002b:00007fc5647f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.630450][T12478] RAX: ffffffffffffffda RBX: 00007fc563bb5fa0 RCX: 00007fc56398ebe9 [ 91.630458][T12478] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 91.630465][T12478] RBP: 00007fc563a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.630472][T12478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.630479][T12478] R13: 00007fc563bb6038 R14: 00007fc563bb5fa0 R15: 00007ffc234304f8 [ 91.630490][T12478] [ 91.686871][T12485] overlayfs: failed to resolve './file0': -2 [ 91.715199][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.848'. [ 91.771261][T12493] can0: slcan on ttyS3. [ 91.791560][T12492] lo speed is unknown, defaulting to 1000 [ 91.847048][T12493] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 91.849549][T12493] nbd: must specify a device to reconfigure [ 91.892644][ T63] Bluetooth: hci1: command tx timeout [ 91.893836][T12488] can0 (unregistered): slcan off ttyS3. [ 92.121274][ T5329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.123695][ T5329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.125923][ T5329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.128519][ T5329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.131054][ T5329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.142437][T12549] lo speed is unknown, defaulting to 1000 [ 92.147633][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.196243][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.206049][T12549] chnl_net:caif_netlink_parms(): no params data found [ 92.253591][T12549] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.255728][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.257989][T12549] bridge_slave_0: entered allmulticast mode [ 92.260539][T12549] bridge_slave_0: entered promiscuous mode [ 92.264006][T12549] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.266324][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.268550][T12549] bridge_slave_1: entered allmulticast mode [ 92.270825][T12549] bridge_slave_1: entered promiscuous mode [ 92.287137][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.303686][T12549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.307677][T12549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.328899][T12549] team0: Port device team_slave_0 added [ 92.331725][T12549] team0: Port device team_slave_1 added [ 92.355902][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.360540][T12549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.364257][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.372245][T12549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.377146][T12549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.379406][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.388079][T12549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.414625][T12549] hsr_slave_0: entered promiscuous mode [ 92.416654][T12549] hsr_slave_1: entered promiscuous mode [ 92.418607][T12549] debugfs: 'hsr0' already exists in 'hsr' [ 92.420393][T12549] Cannot create hsr debugfs directory [ 92.460707][ T12] bridge_slave_1: left allmulticast mode [ 92.464030][ T12] bridge_slave_1: left promiscuous mode [ 92.465933][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.469298][ T12] bridge_slave_0: left allmulticast mode [ 92.471166][ T12] bridge_slave_0: left promiscuous mode [ 92.473234][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.586879][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.590581][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.593993][ T12] bond0 (unregistering): Released all slaves [ 92.612394][T12022] cdc_ncm 7-1:1.0: bind() failure [ 92.617401][T12022] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 92.623077][T12022] usb 7-1: USB disconnect, device number 5 [ 92.649363][T12549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 92.653684][T12549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.657272][T12549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 92.661658][T12549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 92.686078][T12549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.692437][T12549] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.696423][T10880] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.698699][T10880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.709033][T10880] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.711852][T10880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.789511][T12549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.817644][ T12] hsr_slave_0: left promiscuous mode [ 92.820067][ T12] hsr_slave_1: left promiscuous mode [ 92.822527][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.824950][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.827694][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.830132][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.835719][ T12] veth1_macvtap: left promiscuous mode [ 92.837953][ T12] veth0_macvtap: left promiscuous mode [ 92.840212][ T12] veth1_vlan: left promiscuous mode [ 92.842400][ T12] veth0_vlan: left promiscuous mode [ 92.928547][ T40] audit: type=1400 audit(1755706045.425:1181): avc: denied { kexec_image_load } for pid=13591 comm="syz.4.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 92.945393][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.956279][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.958129][T13594] [U] v3f"S/4:XTzWtlW= [ 92.960445][T13594] [U] J"e:" [ 93.065700][T12549] veth0_vlan: entered promiscuous mode [ 93.069531][T12549] veth1_vlan: entered promiscuous mode [ 93.079513][T12549] veth0_macvtap: entered promiscuous mode [ 93.082867][T12549] veth1_macvtap: entered promiscuous mode [ 93.089463][T12549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.094463][T12549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.099416][ T1146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.102646][ T1146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.106199][ T1146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.109088][ T1146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.128073][T13614] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 93.131664][T10880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.136466][T10880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.136466][ T40] audit: type=1400 audit(1755706045.635:1182): avc: denied { write } for pid=13612 comm="syz.2.859" name="usbmon2" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 93.145106][T10880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.149662][T10880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.155022][T13627] bpf: Bad value for 'uid' [ 93.189585][ T40] audit: type=1400 audit(1755706045.685:1183): avc: denied { setattr } for pid=13633 comm="syz.6.852" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.315968][ T40] audit: type=1804 audit(1755706045.815:1184): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.866" name="/newroot/251/file0" dev="tmpfs" ino=1390 res=1 errno=0 [ 93.323610][ T40] audit: type=1800 audit(1755706045.815:1185): pid=13650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.866" name="file0" dev="tmpfs" ino=1390 res=0 errno=0 [ 93.343807][T13659] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 93.522190][ T40] audit: type=1400 audit(1755706046.015:1186): avc: denied { connect } for pid=13680 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.602212][ T40] audit: type=1400 audit(1755706046.095:1187): avc: denied { connect } for pid=13690 comm="syz.2.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.610097][ T40] audit: type=1400 audit(1755706046.105:1188): avc: denied { name_bind } for pid=13690 comm="syz.2.876" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 93.699547][T13696] 9pnet_fd: Insufficient options for proto=fd [ 93.775764][ T40] audit: type=1400 audit(1755706046.275:1189): avc: denied { write } for pid=13705 comm="syz.4.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 93.896951][T13720] program syz.4.881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.973442][T13734] ipvlan0: entered promiscuous mode [ 93.975767][T13734] bridge0: port 1(ipvlan0) entered blocking state [ 93.977881][T13734] bridge0: port 1(ipvlan0) entered disabled state [ 93.979921][T13734] ipvlan0: entered allmulticast mode [ 93.982217][T13734] ipvlan0: left allmulticast mode [ 94.045916][T13748] tipc: Invalid UDP bearer configuration [ 94.045935][T13748] tipc: Enabling of bearer rejected, failed to enable media [ 94.200228][T13751] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 94.222381][ T63] Bluetooth: hci0: command tx timeout [ 94.227123][T13751] bond3: (slave bridge36): making interface the new active one [ 94.229896][T13751] bond3: (slave bridge36): Enslaving as an active interface with an up link [ 94.304818][T13734] syz.2.886 (13734): drop_caches: 2 [ 94.363786][T13804] "syz.0.892" (13804) uses obsolete ecb(arc4) skcipher [ 94.737934][T13833] QAT: Device 2 not found [ 94.740455][T13833] __nla_validate_parse: 9 callbacks suppressed [ 94.740464][T13833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.901'. [ 94.765714][T13835] lo speed is unknown, defaulting to 1000 [ 94.950003][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 94.953299][T13870] bridge0: left allmulticast mode [ 95.074925][T13898] gretap0: entered promiscuous mode [ 95.375926][T13967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.395205][T13973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.923'. [ 95.464984][T13976] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.468610][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 95.472758][T13979] program syz.0.925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.279126][T13997] netlink: 'syz.4.928': attribute type 6 has an invalid length. [ 96.282528][T13997] netlink: 32 bytes leftover after parsing attributes in process `syz.4.928'. [ 96.299692][T14005] binder: 14002:14005 ioctl c0306201 200000000080 returned -14 [ 96.302716][ T63] Bluetooth: hci0: command tx timeout [ 96.304462][T14005] autofs: Unknown parameter 'c@' [ 96.342744][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 96.366879][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 96.366890][ T40] audit: type=1400 audit(1755706048.865:1199): avc: denied { mounton } for pid=14017 comm="syz.0.935" path="/264/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 96.376676][ T40] audit: type=1400 audit(1755706048.865:1200): avc: denied { watch } for pid=14017 comm="syz.0.935" path="/264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.380010][T14020] ufs: You didn't specify the type of your ufs filesystem [ 96.380010][T14020] [ 96.380010][T14020] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 96.380010][T14020] [ 96.380010][T14020] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 96.399891][T14020] ufs: ufstype=old is supported read-only [ 96.401685][T14020] syz.2.936: attempt to access beyond end of device [ 96.401685][T14020] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 96.434215][T14033] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 96.445538][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 96.445657][T14033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.461565][T14029] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 96.542919][T14101] netlink: 36 bytes leftover after parsing attributes in process `syz.6.948'. [ 96.558164][ T40] audit: type=1400 audit(1755706049.055:1201): avc: denied { setopt } for pid=14103 comm="syz.4.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 96.566624][T14105] netlink: 'syz.4.949': attribute type 3 has an invalid length. [ 96.569781][T14105] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 96.572239][T14105] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.949'. [ 96.576471][T14105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14105 comm=syz.4.949 [ 96.605974][ T40] audit: type=1400 audit(1755706049.105:1202): avc: denied { mount } for pid=14115 comm="syz.0.953" name="/" dev="rpc_pipefs" ino=31926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 96.619159][T14110] affs: No valid root block on device nullb0 [ 96.620782][ T40] audit: type=1400 audit(1755706049.115:1203): avc: denied { listen } for pid=14106 comm="syz.2.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.720631][T14136] syzkaller0: entered promiscuous mode [ 96.722735][T14136] syzkaller0: entered allmulticast mode [ 96.777549][ T40] audit: type=1400 audit(1755706049.275:1204): avc: denied { read write } for pid=14144 comm="syz.4.957" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.786110][ T40] audit: type=1400 audit(1755706049.275:1205): avc: denied { open } for pid=14144 comm="syz.4.957" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 96.832876][ T40] audit: type=1400 audit(1755706049.335:1206): avc: denied { bind } for pid=14155 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.912402][ T40] audit: type=1400 audit(1755706049.405:1207): avc: denied { read } for pid=14166 comm="syz.4.962" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.066158][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 97.069093][T14187] netlink: 'syz.4.966': attribute type 12 has an invalid length. [ 97.161127][T14199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.175598][T14202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 97.185273][T14273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=14273 comm=syz.0.972 [ 97.307048][T14276] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 97.334392][T14296] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 97.552901][ T40] audit: type=1400 audit(1755706050.055:1208): avc: denied { firmware_load } for pid=14307 comm="syz.0.982" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 97.576706][T14308] syz.0.982 (14308) used greatest stack depth: 18152 bytes left [ 97.586917][T14310] tipc: Trying to set illegal importance in message [ 98.532393][ T63] Bluetooth: hci0: command tx timeout [ 99.033110][ T1123] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 99.036248][ T1123] sr 2:0:0:0: [sr0] tag#2 Sense Key : Illegal Request [current] [ 99.038773][ T1123] sr 2:0:0:0: [sr0] tag#2 Add. Sense: Invalid command operation code [ 99.041283][ T1123] sr 2:0:0:0: [sr0] tag#2 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 99.044007][ T1123] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 99.047252][ T1123] buffer_io_error: 23 callbacks suppressed [ 99.047261][ T1123] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 99.227899][T14392] vlan1: entered promiscuous mode [ 99.229645][T14392] vlan1: entered allmulticast mode [ 99.231303][T14392] hsr_slave_1: entered allmulticast mode [ 99.274964][T14402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14402 comm=syz.4.1006 [ 99.333469][T14415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.338130][ T61] lo speed is unknown, defaulting to 1000 [ 99.582421][ T61] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 99.732430][ T61] usb 9-1: Using ep0 maxpacket: 16 [ 99.735490][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.738931][ T61] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.741945][ T61] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.746316][ T61] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 99.749152][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.752513][ T61] usb 9-1: config 0 descriptor?? [ 100.159695][ T61] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 100.161904][ T61] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 100.164372][ T61] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 100.166597][ T61] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 100.168833][ T61] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 100.172711][ T61] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 100.182003][ T61] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 100.184686][ T61] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 100.358454][T14419] random: crng reseeded on system resumption [ 100.363595][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.366386][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.370292][ T6210] usb 9-1: USB disconnect, device number 4 [ 100.370304][ T6060] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 100.375954][ T6060] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.379386][ T6060] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.385818][ T6060] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 100.389228][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 100.439011][T14457] __nla_validate_parse: 5 callbacks suppressed [ 100.439023][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 100.594714][T14495] autofs: Unknown parameter '(gn~WlU<;]8ԌM|' [ 100.691883][T14517] XFS (nbd0): no-recovery mounts must be read-only. [ 100.709218][T14519] fuse: Bad value for 'fd' [ 100.715610][ T6210] IPVS: starting estimator thread 0... [ 100.718828][T14519] netlink: 'syz.6.1029': attribute type 1 has an invalid length. [ 100.793737][T14533] support for the xor transformation has been removed. [ 100.812415][T14522] IPVS: using max 52 ests per chain, 124800 per kthread [ 100.928908][T14563] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.978189][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1038'. [ 100.982077][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1038'. [ 100.986398][T14564] netlink: 'syz.6.1038': attribute type 20 has an invalid length. [ 100.993361][ T1145] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.994525][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1038'. [ 100.996832][ T1145] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.999686][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1038'. [ 100.999703][T14564] netlink: 'syz.6.1038': attribute type 20 has an invalid length. [ 101.003553][ T1145] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.068839][T14563] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.073190][T14563] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.136585][T14563] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.139852][T14563] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.162409][ T54] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.313629][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.317611][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.320865][ T54] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.325062][ T54] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.327205][T14563] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.328002][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.333462][T14563] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.336955][ T54] usb 9-1: config 0 descriptor?? [ 101.402471][ T1145] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.405551][ T1145] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.410834][T10880] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.413803][T10880] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.419870][ T1146] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.422511][ T1146] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.427823][ T1146] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.430411][ T1146] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.497476][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 101.501133][T14615] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1045'. [ 101.506228][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 101.509771][T14616] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1045'. [ 101.568749][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 101.600241][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 101.600253][ T40] audit: type=1400 audit(1755706054.095:1215): avc: denied { map } for pid=14631 comm="syz.6.1053" path="socket:[35078]" dev="sockfs" ino=35078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.609780][ T40] audit: type=1400 audit(1755706054.095:1216): avc: denied { read accept } for pid=14631 comm="syz.6.1053" path="socket:[35078]" dev="sockfs" ino=35078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.617903][ T40] audit: type=1400 audit(1755706054.105:1217): avc: denied { ioctl } for pid=14633 comm="syz.2.1052" path="socket:[33897]" dev="sockfs" ino=33897 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.747381][T14651] 9pnet_fd: Insufficient options for proto=fd [ 101.748707][ T54] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 101.751722][ T54] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 101.754339][ T54] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 101.756804][ T54] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 101.759195][ T54] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 101.763376][ T54] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 101.792887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.792939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.836016][ T40] audit: type=1400 audit(1755706054.335:1218): avc: denied { ioctl } for pid=14664 comm="syz.2.1058" path="socket:[33392]" dev="sockfs" ino=33392 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.940422][ T40] audit: type=1400 audit(1755706054.435:1219): avc: denied { rename } for pid=14674 comm="syz.2.1060" name="file1" dev="tmpfs" ino=1668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 102.451872][ T40] audit: type=1326 audit(1755706054.945:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14709 comm="syz.6.1068" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb47c38ebe9 code=0x0 [ 103.178239][ T40] audit: type=1400 audit(1755706055.675:1221): avc: denied { map } for pid=14718 comm="syz.2.1069" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.186917][ T40] audit: type=1400 audit(1755706055.675:1222): avc: denied { execute } for pid=14718 comm="syz.2.1069" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 103.354639][T14736] input: syz0 as /devices/virtual/input/input13 [ 103.390294][T14744] lo speed is unknown, defaulting to 1000 [ 103.421020][ T53] libceph: connect (1)[c::]:6789 error -101 [ 103.424155][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 103.451223][T14782] netlink: 'syz.6.1078': attribute type 9 has an invalid length. [ 103.461322][T14744] ceph: No mds server is up or the cluster is laggy [ 103.476101][T14788] netlink: 'syz.6.1079': attribute type 10 has an invalid length. [ 103.523079][T14793] usb usb1: usbfs: process 14793 (syz.4.1081) did not claim interface 0 before use [ 103.718076][ T40] audit: type=1400 audit(1755706056.215:1223): avc: denied { create } for pid=14819 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.724866][ T40] audit: type=1400 audit(1755706056.215:1224): avc: denied { ioctl } for pid=14819 comm="syz.2.1088" path="socket:[34017]" dev="sockfs" ino=34017 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 103.763440][ T6060] usb 9-1: USB disconnect, device number 5 [ 104.062402][ T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 104.108310][T14862] netlink: 'syz.6.1096': attribute type 1 has an invalid length. [ 104.121847][T14862] bond1: (slave bridge1): making interface the new active one [ 104.124683][T14862] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.145821][T14900] overlayfs: failed to clone upperpath [ 104.149556][ T63] Bluetooth: hci0: adv larger than maximum supported [ 104.149572][ T63] Bluetooth: hci0: Malformed LE Event: 0x0d [ 104.212556][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 104.215545][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.219021][ T61] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.221806][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.228812][ T61] usb 7-1: config 0 descriptor?? [ 104.837368][T14928] ipip0: entered promiscuous mode [ 104.937725][T14936] kvm: kvm [14935]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 104.957428][T14936] kvm: kvm [14935]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 104.960562][T14936] kvm: kvm [14935]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 104.975781][T14936] kvm_intel: kvm [14935]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 105.474685][T14995] netlink: 'syz.6.1117': attribute type 10 has an invalid length. [ 105.479228][T14995] team0: Port device dummy0 added [ 105.495990][T15003] tipc: Started in network mode [ 105.497681][T15003] tipc: Node identity 5e1751284cb5, cluster identity 4711 [ 105.499973][T15003] tipc: Enabled bearer , priority 0 [ 105.502240][T15007] futex_wake_op: syz.6.1120 tries to shift op by 32; fix this program [ 105.505489][T15003] syzkaller0: entered promiscuous mode [ 105.507299][T15003] syzkaller0: entered allmulticast mode [ 105.514884][T15002] tipc: Resetting bearer [ 105.518870][T15002] tipc: Disabling bearer [ 105.568916][T15017] netlink: 'syz.6.1123': attribute type 3 has an invalid length. [ 105.571429][T15017] netlink: 'syz.6.1123': attribute type 1 has an invalid length. [ 105.574054][T15017] __nla_validate_parse: 9 callbacks suppressed [ 105.574063][T15017] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.1123'. [ 105.583137][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1123'. [ 106.022621][T15055] netlink: 'syz.4.1134': attribute type 2 has an invalid length. [ 106.025362][T15055] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 106.027837][T15055] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 106.722210][ T61] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 106.731187][ T61] usb 7-1: USB disconnect, device number 6 [ 106.738150][T15104] Bluetooth: MGMT ver 1.23 [ 106.739860][ T53] Process accounting resumed [ 106.748049][T15099] Process accounting resumed [ 106.850242][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 106.850254][ T40] audit: type=1400 audit(106.766:1266): avc: denied { write } for pid=15115 comm="syz.6.1148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 106.863153][T15111] /dev/sr0: Can't open blockdev [ 106.932359][ T5329] Bluetooth: hci0: command 0x0405 tx timeout [ 106.947254][T15123] nbd: couldn't find a device at index -1605786504 [ 106.959171][T15125] Invalid ELF header type: 0 != 1 [ 106.990919][T15134] syz.6.1156(15134): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 106.992728][T15135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15135 comm=syz.6.1156 [ 107.016763][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1158'. [ 107.021121][T15143] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1158'. [ 107.050638][ T40] audit: type=1400 audit(106.966:1267): avc: denied { read } for pid=15151 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 107.355235][T15193] batadv_slave_1: entered promiscuous mode [ 107.361497][T15192] batadv_slave_1: left promiscuous mode [ 107.449806][T15213] fuse: Unknown parameter 'f' [ 107.451571][T15213] fuse: Bad value for 'fd' [ 107.484263][T15220] netlink: 'syz.0.1177': attribute type 11 has an invalid length. [ 107.487537][T15220] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 107.490710][T15220] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1177'. [ 107.595763][T15241] lo speed is unknown, defaulting to 1000 [ 107.667766][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1185'. [ 107.703583][T15241] veth1_vlan: left promiscuous mode [ 107.747194][T15287] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1188'. [ 107.798408][ T40] audit: type=1400 audit(107.716:1268): avc: denied { listen } for pid=15282 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.805011][ T40] audit: type=1400 audit(107.726:1269): avc: denied { getopt } for pid=15306 comm="syz.6.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.829908][T15312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1195'. [ 107.845616][T15327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1195'. [ 107.866551][T15330] tipc: Enabling of bearer rejected, failed to enable media [ 107.869583][T15330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=15330 comm=syz.6.1196 [ 107.874834][T15330] fuse: Unknown parameter 'group_iT' [ 107.893821][T15332] ip6tnl1: entered promiscuous mode [ 107.895511][T15332] ip6tnl1: entered allmulticast mode [ 108.274872][T15358] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1201'. [ 108.492947][T15384] "syz.6.1206" (15384) uses obsolete ecb(arc4) skcipher [ 108.548143][T15382] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 108.550255][T15382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.552830][T15382] vhci_hcd vhci_hcd.0: Device attached [ 108.628475][T15410] kernel profiling enabled (shift: 63) [ 108.630285][T15410] profiling shift: 63 too large [ 108.643030][T12022] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 108.812713][ T5342] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 108.816352][T12022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.819727][T12022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.823101][T12022] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.827282][T12022] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.830103][T12022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.833621][T12022] usb 7-1: config 0 descriptor?? [ 109.217796][T15392] vhci_hcd: connection reset by peer [ 109.220197][ T1177] vhci_hcd: stop threads [ 109.222188][ T1177] vhci_hcd: release socket [ 109.224325][ T1177] vhci_hcd: disconnect device [ 109.239416][T12022] hid_parser_main: 1 callbacks suppressed [ 109.239429][T12022] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 109.244376][T12022] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 109.246838][T12022] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 109.249219][T12022] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 109.251835][T12022] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 109.254401][T12022] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 109.258425][T12022] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.636526][T15473] validate_nla: 2 callbacks suppressed [ 109.636554][T15473] netlink: 'syz.4.1222': attribute type 29 has an invalid length. [ 109.651121][T15475] siw: device registration error -23 [ 109.841075][T15485] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 109.887460][ T40] audit: type=1400 audit(109.806:1270): avc: denied { setopt } for pid=15503 comm="syz.4.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 109.961926][T15504] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.026378][T15503] delete_channel: no stack [ 110.097111][ T40] audit: type=1400 audit(110.016:1271): avc: denied { mounton } for pid=15651 comm="syz.4.1237" path="/133/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 110.190654][T15669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.260374][ T40] audit: type=1400 audit(110.176:1272): avc: denied { create } for pid=15676 comm="syz.4.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.268179][ T40] audit: type=1400 audit(110.176:1273): avc: denied { ioctl } for pid=15676 comm="syz.4.1242" path="socket:[36379]" dev="sockfs" ino=36379 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.373874][ T40] audit: type=1400 audit(110.296:1274): avc: denied { search } for pid=15693 comm="syz.4.1245" name="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.380600][ T40] audit: type=1400 audit(110.296:1275): avc: denied { read open } for pid=15693 comm="syz.4.1245" path="/" dev="configfs" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.600845][T15719] __nla_validate_parse: 4 callbacks suppressed [ 110.600857][T15719] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1250'. [ 110.606364][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 110.628024][T15725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.630401][T15725] IPv6: NLM_F_CREATE should be set when creating new route [ 110.632715][T15725] IPv6: NLM_F_CREATE should be set when creating new route [ 110.635232][T15725] IPv6: NLM_F_CREATE should be set when creating new route [ 110.638682][T15725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.646808][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1253'. [ 110.730787][T15775] netlink: 'syz.4.1254': attribute type 13 has an invalid length. [ 110.748710][T15775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.803198][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1260'. [ 110.803894][T15789] netlink: 'syz.6.1260': attribute type 10 has an invalid length. [ 110.827741][T15791] macsec0: entered promiscuous mode [ 110.829519][T15791] macsec0: entered allmulticast mode [ 110.831250][T15791] veth1_macvtap: entered allmulticast mode [ 110.906167][T15805] overlayfs: failed to clone upperpath [ 110.908222][T15804] overlayfs: failed to clone upperpath [ 110.967214][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1269'. [ 110.980712][T15823] vlan0: entered promiscuous mode [ 110.983672][T15823] vlan0: entered allmulticast mode [ 110.985427][T15823] hsr_slave_1: entered allmulticast mode [ 110.996950][T15832] fuse: Unknown parameter '184467440737095516150x0000000000000003' [ 111.071185][T15847] syzkaller1: entered promiscuous mode [ 111.073901][T15847] syzkaller1: entered allmulticast mode [ 111.081958][T15847] fuse: Unknown parameter '' [ 111.085067][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1277'. [ 111.094248][T15853] fuse: Bad value for 'fd' [ 111.194589][ T5329] Bluetooth: hci0: hardware error 0x07 [ 111.262907][ T6020] usb 7-1: USB disconnect, device number 7 [ 111.376440][T15908] netlink: 'syz.6.1292': attribute type 1 has an invalid length. [ 111.380769][T15908] netlink: 'syz.6.1292': attribute type 1 has an invalid length. [ 111.419509][T15915] netlink: 'syz.6.1294': attribute type 7 has an invalid length. [ 111.419525][T15916] netlink: 'syz.6.1294': attribute type 7 has an invalid length. [ 111.421977][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1294'. [ 111.424507][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1294'. [ 111.546648][T15949] 9pnet_virtio: no channels available for device syz [ 111.546916][T15950] 9pnet_virtio: no channels available for device syz [ 111.673066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.998469][T15984] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 112.015679][T15984] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.018551][T15984] bond3: (slave bond4): making interface the new active one [ 112.021164][T15984] bond3: (slave bond4): Enslaving as an active interface with an up link [ 112.027317][T15984] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.031254][T15984] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 112.086532][T16056] cgroup: Need name or subsystem set [ 112.245956][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 112.245967][ T40] audit: type=1326 audit(112.166:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16090 comm="syz.2.1320" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb02f78ebe9 code=0x0 [ 112.606612][T16100] sctp: [Deprecated]: syz.6.1323 (pid 16100) Use of int in max_burst socket option deprecated. [ 112.606612][T16100] Use struct sctp_assoc_value instead [ 112.655832][ T63] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 112.755014][ T40] audit: type=1400 audit(112.676:1283): avc: denied { getopt } for pid=16120 comm="syz.6.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.821195][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 112.821401][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 112.877468][ T40] audit: type=1400 audit(112.796:1284): avc: denied { accept } for pid=16143 comm="syz.6.1335" path="socket:[37477]" dev="sockfs" ino=37477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.913345][ T40] audit: type=1400 audit(112.836:1285): avc: denied { mounton } for pid=16147 comm="syz.4.1337" path="/157/file1/file0" dev="autofs" ino=37547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 112.920058][ T40] audit: type=1400 audit(112.836:1286): avc: denied { map } for pid=16147 comm="syz.4.1337" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.232128][T16174] tmpfs: Unknown parameter 'usrquota_inode_R7ٝhaG%W7' [ 113.252395][ T5329] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.370441][T16181] tipc: Enabled bearer , priority 0 [ 113.385406][T16181] syzkaller0: entered promiscuous mode [ 113.387191][T16181] syzkaller0: entered allmulticast mode [ 113.389244][T16181] tipc: Resetting bearer [ 113.398385][T16180] tipc: Resetting bearer [ 113.423087][T16180] tipc: Disabling bearer [ 113.630626][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.655480][T16196] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 113.760679][T16204] input: syz1 as /devices/virtual/input/input15 [ 113.765277][ T40] audit: type=1400 audit(113.686:1287): avc: denied { ioctl } for pid=16202 comm="syz.2.1350" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 113.850822][T16220] netlink: 'syz.2.1354': attribute type 21 has an invalid length. [ 113.853709][T16220] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.856221][T16220] netlink: 'syz.2.1354': attribute type 21 has an invalid length. [ 113.962355][ T5342] vhci_hcd: vhci_device speed not set [ 114.196511][ T40] audit: type=1400 audit(114.116:1288): avc: denied { ioctl } for pid=16265 comm="syz.6.1365" path="socket:[37753]" dev="sockfs" ino=37753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.254597][ T40] audit: type=1400 audit(114.176:1289): avc: denied { ioctl } for pid=16250 comm="syz.2.1361" path="socket:[36634]" dev="sockfs" ino=36634 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.344509][ T40] audit: type=1400 audit(114.266:1290): avc: denied { transfer } for pid=16274 comm="syz.0.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.402881][ T40] audit: type=1400 audit(114.326:1291): avc: denied { bind } for pid=16281 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.756127][T16292] validate_nla: 33 callbacks suppressed [ 114.756138][T16292] netlink: 'syz.6.1372': attribute type 3 has an invalid length. [ 115.322922][T16297] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 115.325063][T16297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.327544][T16297] vhci_hcd vhci_hcd.0: Device attached [ 115.329495][T16301] vhci_hcd: cannot find the pending unlink 12 [ 115.331498][T16301] vhci_hcd: connection closed [ 115.331706][ T1145] vhci_hcd: stop threads [ 115.334843][ T1145] vhci_hcd: release socket [ 115.336377][ T1145] vhci_hcd: disconnect device [ 115.850149][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 115.998817][T16324] batadv_slave_0: entered promiscuous mode [ 116.001181][T16324] batadv_slave_0: left promiscuous mode [ 116.047944][T16325] No control pipe specified [ 116.115992][T16335] random: crng reseeded on system resumption [ 116.261654][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1385'. [ 116.323437][T16346] fuse: Unknown parameter 'nd' [ 116.358089][T16351] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 116.491512][T16367] IPv4: Oversized IP packet from 127.202.26.0 [ 116.515228][T16370] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 116.647565][T16377] netlink: 'syz.6.1396': attribute type 23 has an invalid length. [ 117.265806][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 117.265817][ T40] audit: type=1400 audit(117.186:1300): avc: denied { getopt } for pid=16442 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.273935][T16444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.296725][T16447] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1403'. [ 117.301807][T16447] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1403'. [ 117.324000][T16453] overlayfs: failed to clone upperpath [ 117.345218][ T40] audit: type=1400 audit(117.266:1301): avc: denied { mount } for pid=16460 comm="syz.6.1407" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.345264][T16461] overlayfs: failed to clone upperpath [ 117.469186][ T40] audit: type=1400 audit(117.386:1302): avc: denied { execute } for pid=16490 comm="syz.6.1415" path="pipe:[40048]" dev="pipefs" ino=40048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 117.480736][T16495] netlink: 'syz.2.1416': attribute type 9 has an invalid length. [ 117.642235][T16512] fuse: Unknown parameter '000000000000000000050x0000000000000005' [ 117.743373][T16526] binder: BINDER_SET_CONTEXT_MGR already set [ 117.745623][T16526] binder: 16524:16526 ioctl 4018620d 200000000100 returned -16 [ 117.760133][ T40] audit: type=1400 audit(117.676:1303): avc: denied { name_connect } for pid=16521 comm="syz.6.1425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 117.888887][T16548] 8021q: VLANs not supported on sit0 [ 118.227899][T16576] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 118.229298][T16575] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 118.233405][T16575] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 118.256185][T16578] netlink: 'syz.6.1441': attribute type 5 has an invalid length. [ 118.348242][T16595] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.350719][ T40] audit: type=1404 audit(118.266:1304): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 118.359745][ T40] audit: type=1400 audit(118.276:1305): avc: denied { read } for pid=16597 comm="syz.2.1446" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 118.366431][ T40] audit: type=1400 audit(118.276:1306): avc: denied { write } for pid=16597 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 118.372838][ T40] audit: type=1400 audit(118.276:1307): avc: denied { read } for pid=16597 comm="syz.2.1446" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 118.379236][ T40] audit: type=1400 audit(118.276:1308): avc: denied { read } for pid=16597 comm="syz.2.1446" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 118.386467][ T40] audit: type=1400 audit(118.276:1309): avc: denied { create } for pid=16597 comm="syz.2.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 118.505603][T16620] sch_tbf: burst 19869 is lower than device lo mtu (39799) ! [ 118.509260][T16620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.514697][T16620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.668511][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1456'. [ 118.683995][T16630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=16630 comm=syz.0.1456 [ 118.688802][T16630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16630 comm=syz.0.1456 [ 118.887445][T16744] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=16744 comm=syz.6.1467 [ 118.887919][T16745] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=16745 comm=syz.6.1467 [ 119.021403][T16765] geneve2: entered promiscuous mode [ 119.023137][T16765] geneve2: entered allmulticast mode [ 119.086734][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1476'. [ 119.246837][T16814] can0: slcan on ptm0. [ 119.312481][T16813] can0 (unregistered): slcan off ptm0. [ 119.830793][T16870] netlink: 'syz.0.1500': attribute type 32 has an invalid length. [ 119.833704][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 119.836589][T16870] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 120.298744][T16938] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1512'. [ 120.301792][T16938] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1512'. [ 120.304803][T16938] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1512'. [ 120.471895][T16958] netlink: 'syz.6.1519': attribute type 7 has an invalid length. [ 120.475328][T16958] netlink: 'syz.6.1519': attribute type 8 has an invalid length. [ 120.786020][T16964] vlan4: entered promiscuous mode [ 120.787767][T16964] bridge0: entered promiscuous mode [ 120.891614][T16981] __nla_validate_parse: 2 callbacks suppressed [ 120.891625][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 120.896731][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1527'. [ 120.955898][T16988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1530'. [ 121.048828][T17011] ALSA: mixer_oss: invalid OSS volume ';;' [ 121.276443][T17027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'. [ 121.908785][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1545'. [ 122.230039][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 122.275790][ T40] kauditd_printk_skb: 961 callbacks suppressed [ 122.275801][ T40] audit: type=1400 audit(122.196:2271): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.299854][ T40] audit: type=1400 audit(122.216:2272): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.309102][ T40] audit: type=1400 audit(122.226:2273): avc: denied { create } for pid=17054 comm="syz.2.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 122.321775][ T40] audit: type=1400 audit(122.236:2274): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.329324][ T40] audit: type=1400 audit(122.246:2275): avc: denied { read } for pid=17057 comm="syz.2.1553" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.336666][ T40] audit: type=1400 audit(122.246:2276): avc: denied { create } for pid=17057 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 122.343241][ T40] audit: type=1400 audit(122.246:2277): avc: denied { create } for pid=17057 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 122.349372][ T40] audit: type=1400 audit(122.256:2278): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.357074][ T40] audit: type=1400 audit(122.256:2279): avc: denied { create } for pid=17059 comm="syz.2.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 122.362998][ T40] audit: type=1400 audit(122.256:2280): avc: denied { create } for pid=17059 comm="syz.2.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 122.555386][T17074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17074 comm=syz.2.1558 [ 122.560501][T17074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 122.572108][T17074] vxcan3: entered allmulticast mode [ 122.574241][T17074] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.577845][T17074] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 122.968608][T17131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17131 comm=syz.2.1562 [ 122.990715][T17133] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 124.156458][T17156] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1572'. [ 124.385155][T17187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1581'. [ 124.519156][T17196] sp0: Synchronizing with TNC [ 124.523971][T17196] ipvlan2: entered promiscuous mode [ 124.525808][T17196] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 124.529779][T17195] [U] [ 124.706925][T17211] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 124.752237][T17213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=17213 comm=syz.0.1588 [ 124.938024][ T54] IPVS: starting estimator thread 0... [ 124.993441][T17232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1592'. [ 125.032348][T17230] IPVS: using max 52 ests per chain, 124800 per kthread [ 125.154772][T17244] netlink: 'syz.0.1596': attribute type 8 has an invalid length. [ 126.181709][T17272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17272 comm=syz.2.1605 [ 126.186237][T17272] __nla_validate_parse: 2 callbacks suppressed [ 126.186246][T17272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 126.235607][T17313] kernel read not supported for file /*{.Z;E,97~tGBxhtyiN} [ 126.235607][T17313] kπ'EO-%C~Ea8֢渕_ՐhSu\i5+ . (pid: 17313 comm: syz.2.1609) [ 126.410936][T17328] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1612'. [ 127.291454][ T40] kauditd_printk_skb: 52274 callbacks suppressed [ 127.291466][ T40] audit: type=1400 audit(127.206:54555): avc: denied { read } for pid=17350 comm="syz.2.1618" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 127.300757][ T40] audit: type=1400 audit(127.206:54556): avc: denied { read } for pid=17350 comm="syz.2.1618" dev="nsfs" ino=4026533025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 127.800268][ T40] audit: type=1400 audit(127.716:54557): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.808963][ T40] audit: type=1400 audit(127.726:54558): avc: denied { create } for pid=17354 comm="syz.2.1619" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 127.817870][ T40] audit: type=1400 audit(127.726:54559): avc: denied { create } for pid=17354 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 127.824671][ T40] audit: type=1400 audit(127.726:54560): avc: denied { write } for pid=17354 comm="syz.2.1619" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 127.832418][ T40] audit: type=1400 audit(127.726:54561): avc: denied { create } for pid=17354 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 127.839087][ T40] audit: type=1400 audit(127.736:54562): avc: denied { read write } for pid=5978 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.847366][ T40] audit: type=1400 audit(127.746:54563): avc: denied { create } for pid=17356 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 127.853593][ T40] audit: type=1400 audit(127.746:54564): avc: denied { create } for pid=17356 comm="syz.2.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 128.075296][T10724] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 128.079098][T10724] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 128.082689][T10724] CPU: 1 UID: 0 PID: 10724 Comm: syz.4.708 Not tainted syzkaller #0 PREEMPT(full) [ 128.086787][T10724] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.090159][T10724] RIP: 0010:klist_put+0x4d/0x1b0 [ 128.091755][T10724] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 128.097804][T10724] RSP: 0018:ffffc9000753f750 EFLAGS: 00010202 [ 128.099690][T10724] RAX: dffffc0000000000 RBX: ffff88805655ec60 RCX: 0000000000000000 [ 128.102157][T10724] RDX: 000000000000000b RSI: ffffffff8b890035 RDI: 0000000000000058 [ 128.104645][T10724] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c67c [ 128.107047][T10724] R10: ffffffff908e33e3 R11: 0000000000000001 R12: 0000000000000000 [ 128.109528][T10724] R13: 0000000000000001 R14: 1ffff92000ea7ef2 R15: ffffffff908e33a0 [ 128.112001][T10724] FS: 0000000000000000(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 128.114934][T10724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.116954][T10724] CR2: 00007fb02f9b7dac CR3: 000000002c79d000 CR4: 0000000000352ef0 [ 128.119407][T10724] Call Trace: [ 128.120493][T10724] [ 128.121443][T10724] klist_remove+0x13f/0x2e0 [ 128.122868][T10724] ? kobject_move+0x15d/0x260 [ 128.124343][T10724] ? __pfx_klist_remove+0x10/0x10 [ 128.125933][T10724] ? __pfx_kobject_move+0x10/0x10 [ 128.127504][T10724] ? get_device_parent+0x1ed/0x4e0 [ 128.129167][T10724] device_move+0x12d/0x10d0 [ 128.130628][T10724] hci_conn_del_sysfs+0x81/0x180 [ 128.132201][T10724] hci_conn_del+0x566/0xdc0 [ 128.133672][T10724] hci_conn_hash_flush+0x186/0x260 [ 128.135269][T10724] hci_dev_close_sync+0x602/0x11d0 [ 128.136858][T10724] ? rcu_is_watching+0x12/0xc0 [ 128.138360][T10724] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 128.140015][T10724] ? up_write+0x1b2/0x520 [ 128.141340][T10724] hci_dev_do_close+0x2e/0x90 [ 128.142803][T10724] hci_unregister_dev+0x227/0x640 [ 128.144353][T10724] ? __pfx_vhci_release+0x10/0x10 [ 128.146108][T10724] vhci_release+0x79/0xf0 [ 128.147453][T10724] __fput+0x3ff/0xb70 [ 128.148743][T10724] task_work_run+0x14d/0x240 [ 128.150190][T10724] ? __pfx_task_work_run+0x10/0x10 [ 128.151776][T10724] do_exit+0x86f/0x2bf0 [ 128.153084][T10724] ? do_raw_spin_lock+0x12c/0x2b0 [ 128.154652][T10724] ? __pfx_do_exit+0x10/0x10 [ 128.156098][T10724] ? cgroup_update_frozen_flag+0x107/0x210 [ 128.157962][T10724] ? get_signal+0x1d05/0x26d0 [ 128.159420][T10724] ? rcu_is_watching+0x12/0xc0 [ 128.160960][T10724] do_group_exit+0xd3/0x2a0 [ 128.162428][T10724] get_signal+0x2673/0x26d0 [ 128.163879][T10724] ? hrtimer_nanosleep+0x187/0x380 [ 128.165512][T10724] ? __pfx_get_signal+0x10/0x10 [ 128.167065][T10724] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 128.168749][T10724] arch_do_signal_or_restart+0x8f/0x7d0 [ 128.170490][T10724] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 128.172400][T10724] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 128.174316][T10724] exit_to_user_mode_loop+0x84/0x110 [ 128.175958][T10724] do_syscall_64+0x3f6/0x4c0 [ 128.177404][T10724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.179356][T10724] RIP: 0033:0x7f21cb9c14a5 [ 128.180855][T10724] Code: Unable to access opcode bytes at 0x7f21cb9c147b. [ 128.182990][T10724] RSP: 002b:00007f21cc889f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 128.185521][T10724] RAX: fffffffffffffdfc RBX: 00007f21cbbb5fa0 RCX: 00007f21cb9c14a5 [ 128.187962][T10724] RDX: 00007f21cc889fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.190425][T10724] RBP: 00007f21cba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 128.192896][T10724] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 128.195364][T10724] R13: 00007f21cbbb6038 R14: 00007f21cbbb5fa0 R15: 00007ffc3ab2f0f8 [ 128.197884][T10724] [ 128.198882][T10724] Modules linked in: [ 128.200599][T10724] ---[ end trace 0000000000000000 ]--- Jan 1 00:02:08 syzkaller kern.alert kernel: [ 128.079098][T10724] KASAN: null-ptr-deref in range [0x0000000000[ 128.206242][T10724] RIP: 0010:klist_put+0x4d/0x1b0 [ 128.208293][T10724] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d 000058-0x0000000[ 128.214493][T10724] RSP: 0018:ffffc9000753f750 EFLAGS: 00010202 00000005f] [ 128.216755][T10724] RAX: dffffc0000000000 RBX: ffff88805655ec60 RCX: 0000000000000000 [ 128.219918][T10724] RDX: 000000000000000b RSI: ffffffff8b890035 RDI: 0000000000000058 [ 128.223178][T10724] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211c67c [ 128.225696][T10724] R10: ffffffff908e33e3 R11: 0000000000000001 R12: 0000000000000000 [ 128.228402][T10724] R13: 0000000000000001 R14: 1ffff92000ea7ef2 R15: ffffffff908e33a0 [ 128.230922][T10724] FS: 0000000000000000(0000) GS:ffff8880d67bc000(0000) knlGS:0000000000000000 [ 128.234104][T10724] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.236203][T10724] CR2: 00007fb02f9b7dac CR3: 0000000021bd8000 CR4: 0000000000352ef0 [ 128.238763][T10724] Kernel panic - not syncing: Fatal exception [ 128.241281][T10724] Kernel Offset: disabled [ 128.242650][T10724] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:03:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=0000000000000018 RCX=ffffffff84eb992d RDX=ffff8880656d8000 RSI=ffffffff84eb9508 RDI=0000000000000005 RBP=ffffffff8f17e498 RSP=ffffc90006566978 R8 =0000000000000005 R9 =0000000000000019 R10=0000000000000018 R11=ffff888034a60030 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000002 R15=ffff888034a60000 RIP=ffffffff81bb9150 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc5647d16c0 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d98baf8b08 CR3=000000002c79d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffff0 Opmask01=0000000000000001 Opmask02=00000000dfffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000044400000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62d25451040932ea 00b8a924e6fce0c4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 07c69a10a4086849 9e57dd676ed7a32b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd24ae115200df4a 6878de514a7841db ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b4e62105e07c2d23 6df98ef177c14180 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000069c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eb1af18c2000000 4eb6003300000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b000800100000000 000000008e000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 300000004eb5f723 4eb5f12000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eb61f734eb62b76 b400000046000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae4721b598916e65 9d7bf7cf82b7ead2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 93680309f17e9f8f d959766b1c4fb3e1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073707574726174 73203030312d3031 20666f2030205d72 656e657473696c5b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 051e505548474953 054140534c404640 5200000000000056 5550515744515605 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6365786562696c 2f7273752f097074 6673096d65747379 736275530a303234 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000002d0d4cf32f 1c2535000a726576 7265732d70746673 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000070bfc48f c5b00db9a080596d 7194096c7d51e2a5 eb1cc5eaba643017 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbf38242a1ef8 f0f4f4f123241e33 322e271e273232ee 273232ee223324ee ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e07bf38240a3332 2e07bf32e4ee32e4 bf32e4dff9233622 332426bf242d2e2d ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856437c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc9000753f0c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b10dfe0 R15=ffffffff85643760 RIP=ffffffff856437ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb02f9b7dac CR3=000000002c79d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e46e68e67f853d39 143cc6435903f26f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2544e082e1e5a8 beaffae9ac2be05c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e9c61e89c6f1a64 03b9dee186d97f0e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8dee43a1dafd51c0 0ec51c23f6d1cf44 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006940 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 88000000ef000000 006b0a4c4eab9eab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f90000007c000000 f90000005e000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea0000004eab493c 0006032b4eab46ed ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005a514eaba1ca f1000000000031a5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 88857778043f41b8 ff19dad9ba79c9a0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d1e265ff3edf642 b850395fea7f37f3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a541e80 RCX=ffffffff81af8c61 RDX=ffff888021e68000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000a6f930 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed100d4a83d1 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81bb8b4b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d98bae5b00 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002081 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae4721b598916e65 9d7bf7cf82b7ead2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 93680309f17e9f8f d959766b1c4fb3e1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a5bc630d97195950 303fdc655cdf0747 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6efdff8fd8956cdb 80717f4153543ef2 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006980 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e00000000000000 0e0080014d000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 290000004ead5983 000059c74ead7ffe ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e40000004eac9ecb 00002e2d4eac734a ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a000000cc000000 00021dc400005651 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e46e68e67f853d39 143cc6435903f26f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d2544e082e1e5a8 beaffae9ac2be05c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66676f6c206e6570 6f2074276e646c75 6f43005445495551 004e4f4d45414400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43424a49054b4055 4a0551024b414950 4a43005445495551 004e4f4d45414400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f7020322e322e 302e3031206d6f72 66207463656e6e6f 6373696420646576 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000d880300000002 08060d8003080880 0205058004088004 01de080002880800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000008060a01 0c98200800058003 0cc0888480048800 07880302b8c60484 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007840304040007 8003078004089003 2008000888030008 0008800300100001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cc0310040020c803 538a080020c00312 080020b803060800 20b0035c080020a8 ZMM25=00b1f8f100b1f8f1 00b1f8f100b1f8f1 00b1f8f100b1f8f1 00b1f8f100b1f8f1 00b1f8f100b1f8f1 00b1f8f100b1f8f1 00b1f8f100b1f8f1 00b1f8f100b1f8f1 ZMM26=240cee54240cee54 240cee54240cee54 240cee54240cee54 240cee54240cee54 240cee54240cee54 240cee54240cee54 240cee54240cee54 240cee54240cee54 ZMM27=6a058e8c6a058e8c 6a058e8c6a058e8c 6a058e8c6a058e8c 6a058e8c6a058e8c 6a058e8c6a058e8c 6a058e8c6a058e8c 6a058e8c6a058e8c 6a058e8c6a058e8c ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e0070000e0070000 e0070000e0070000 e0070000e0070000 e0070000e0070000 e0070000e0070000 e0070000e0070000 e0070000e0070000 e0070000e0070000 info registers vcpu 3 CPU#3 RAX=ffffffff913a945a RBX=ffffffff90b8260c RCX=dffffc0000000000 RDX=0000000000000007 RSI=0000000000000000 RDI=ffffffff90b82608 RBP=ffffffff90b82608 RSP=ffffc9000470f668 R8 =ffffffff913a9526 R9 =0000000000000000 R10=ffffc9000470f718 R11=0000000000000001 R12=ffffffff90b82610 R13=ffffffff8100012f R14=ffffffff90b82608 R15=ffffffff90b82608 RIP=ffffffff816adb2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb0305e8d58 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056177ab08600 000056177ab08600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd90db70f0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7266206465746365 6e6e6f6373694420 3a5d393439355b6e 6f69737365732d64 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d657669737369 6d7265702074656b 636f735f70697761 723d7373616c6374 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20745f6d64617379 733a725f6d646173 79733a746f6f723d 747865746e6f6374 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20745f6d64617379 733a725f6d646173 79733a746f6f723d 747865746e6f6373 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2022303236312e32 2e7a7973223d6d6d 6f63203635333731 3d6469702020726f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000