last executing test programs: 1m13.377809525s ago: executing program 0 (id=82): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, &(0x7f0000000340)) prlimit64(r1, 0x6, &(0x7f0000000080)={0xa00a, 0x9}, &(0x7f00000000c0)) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x51}, 0x94) 1m13.307684s ago: executing program 0 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x77359400}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r8, &(0x7f0000000180)=""/174, 0xae) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m12.477237958s ago: executing program 0 (id=85): r0 = socket(0x2b, 0x1, 0x0) (async, rerun: 32) r1 = syz_io_uring_setup(0x113, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) (rerun: 64) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r4}, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (rerun: 32) 1m12.323521305s ago: executing program 0 (id=86): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x13, 0x0, @void}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000080)={0x8b, 0x4, 0x5}) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r4, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m12.211550452s ago: executing program 0 (id=88): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) (async) 1m12.127331181s ago: executing program 0 (id=92): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/71, 0x47}], 0x6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) 57.082040104s ago: executing program 32 (id=92): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/71, 0x47}], 0x6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x100000000, 0xffffffffffffffff}) 50.316313463s ago: executing program 4 (id=310): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747", 0x39}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e3) (async, rerun: 64) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x441, 0x8000022, r0, 0x0) (async, rerun: 32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000600)={0x40, 0x10, 0x3b, {0x3b, 0x7, "1d4c1a5880154c8bcdb9b4251ad808e66d540cc2d3fe7f449e2de5bdc8a9f14a8fca2cbc447d757b7468b827b0c3a49e5fdeb07335bbaec98d"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000680)={0x40, 0x15, 0x22, "f0dd4284133ff1d8bcb4995855fa86bfa87e0eb169aaf47c4eb2249cea2310e78f31"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xc2}}) (async) fcntl$notify(r2, 0x402, 0x1a) (async, rerun: 64) renameat2(r0, &(0x7f0000000540)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (rerun: 64) creat(&(0x7f0000000000)='./file1\x00', 0x8) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 50.262792686s ago: executing program 4 (id=311): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x801070cf, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000610000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) 50.257029627s ago: executing program 4 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r4, &(0x7f0000005480)=ANY=[@ANYBLOB="0000000900800001076d0600f7ffaaaaaaaaaabb00000000000086dd"], 0x12a5) read$FUSE(r3, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r5, 0x0, 0x20000000, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000400)="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", 0x1000) 50.05805801s ago: executing program 4 (id=318): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) (async) r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x0, "b8819abe830087fffe82bb3915daf944c3968e5a7c02d94f403b3392a3406e33", 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 50.054425808s ago: executing program 4 (id=320): openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni-avx2\x00'}, 0x58) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="e00000001000010025bd7000ffdbdf25647262675f6e6f70725f6374725f6165733139320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009c000000000000000200000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f105368900ba0a"], 0xe0}, 0x1, 0x0, 0x0, 0x60000801}, 0x20000010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r4, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000000)={r1}) fstat(r1, &(0x7f0000000300)) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPGRP(r6, 0x540f, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000280)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0)=0x3, 0x8) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000580)={@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x2a}}}, {&(0x7f00000004c0)=""/143, 0x8f}, &(0x7f0000000240), 0x20}, 0xa0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x110, r10, 0x0) 49.955542737s ago: executing program 4 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f2c7371b0de0d20eb76199599c6d33799aa126d1d75ea94e19fe62aa99bdd1767013be797304f6aeca69a1f91aa71995eb0febf9f979cbca4cdce0242a68cd9ad6032b79d31b85ab3c59114b4de45e8230792b52fe42f26f950ae12b1d734c346d3bc69e9bd68e89107bf28574f0b4abf5ee0a1dd889cdbb2b3354858fb9f9f781a8306297f512c0c3f953f4ef2a6c0c445e72c12ec1a25f498ef8d411f51bb1c9bf3899b48c451942ee4d84c4e511415f16692a1fc06953f3a1ed47e6f9c9", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) r6 = fcntl$getown(r3, 0x9) kcmp(r5, r6, 0x4, r2, r1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000, 0x0, 0x2, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002800)=@newsa={0x19c, 0x10, 0x800, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21}, {@in6=@private1, 0x4d6, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0x0, 0x2, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x2, 0x1000000000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {0x0, 0x2}, 0x70bd2c, 0x34ff, 0x2, 0x0, 0x0, 0x50}, [@policy={0xac, 0x7, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x4e24, 0x3, 0x4e20, 0x8000, 0x2, 0x0, 0x20, 0x2b}, {0xffffffff, 0x6, 0x7fff, 0x10000000000, 0xffffffff, 0x5, 0x4d, 0x6}, {0xe203, 0x8000000000000001, 0xffff, 0xe5}, 0x1e1, 0x6e6bbb, 0x0, 0x1, 0x0, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f00000001c0)=""/17, &(0x7f0000000240)=0x11) r10 = fanotify_init(0x10, 0x101000) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r10, 0x455, 0x8000010, r11, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0xfffffff7, './file0/file0/..\x00'}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="146a7400"/20], 0x14}}, 0x20008001) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind=static\a\x00']) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r12, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r12, 0x0, &(0x7f0000000080), 0x0) 34.592017267s ago: executing program 33 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f2c7371b0de0d20eb76199599c6d33799aa126d1d75ea94e19fe62aa99bdd1767013be797304f6aeca69a1f91aa71995eb0febf9f979cbca4cdce0242a68cd9ad6032b79d31b85ab3c59114b4de45e8230792b52fe42f26f950ae12b1d734c346d3bc69e9bd68e89107bf28574f0b4abf5ee0a1dd889cdbb2b3354858fb9f9f781a8306297f512c0c3f953f4ef2a6c0c445e72c12ec1a25f498ef8d411f51bb1c9bf3899b48c451942ee4d84c4e511415f16692a1fc06953f3a1ed47e6f9c9", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) r6 = fcntl$getown(r3, 0x9) kcmp(r5, r6, 0x4, r2, r1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000, 0x0, 0x2, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x40, 0x0, 0x0, 0x58, &(0x7f0000000100)=[0xffffffffffffffff], 0x1}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002800)=@newsa={0x19c, 0x10, 0x800, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21}, {@in6=@private1, 0x4d6, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x0, 0x0, 0x2, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x2, 0x1000000000000543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {0x0, 0x2}, 0x70bd2c, 0x34ff, 0x2, 0x0, 0x0, 0x50}, [@policy={0xac, 0x7, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x4e24, 0x3, 0x4e20, 0x8000, 0x2, 0x0, 0x20, 0x2b}, {0xffffffff, 0x6, 0x7fff, 0x10000000000, 0xffffffff, 0x5, 0x4d, 0x6}, {0xe203, 0x8000000000000001, 0xffff, 0xe5}, 0x1e1, 0x6e6bbb, 0x0, 0x1, 0x0, 0x2}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f00000001c0)=""/17, &(0x7f0000000240)=0x11) r10 = fanotify_init(0x10, 0x101000) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r10, 0x455, 0x8000010, r11, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0xfffffff7, './file0/file0/..\x00'}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="146a7400"/20], 0x14}}, 0x20008001) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=bind=static\a\x00']) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r12, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r12, 0x0, &(0x7f0000000080), 0x0) 11.95450742s ago: executing program 5 (id=886): r0 = socket$netlink(0x10, 0x3, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x1d1f, &(0x7f0000000200)={0x0, 0xcd1d, 0x10100, 0x0, 0xaa}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r1, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) 11.949022769s ago: executing program 5 (id=887): ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000080)={0x0, 0x4, [0x94, 0x79, 0x9, 0x4, 0x200, 0x9]}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) unshare(0x22020600) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x46f, 0x10000, @value=r2}, 0x28) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x36020000) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1c}, @TCA_PIE_TUPDATE={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x80000000}, @TCA_PIE_LIMIT={0x8, 0x2, 0xffffffff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000000180)={&(0x7f00000001c0)=[r9], 0x0, 0x200000000009, 0x1, 0xb}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) socket(0x10, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x80}, @ipv4={'\x00', '\xff\xff', @multicast2}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0xa888, 0x88be, 0x86ddffff, {{}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x2, {0x0, 0x8}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) setsockopt$inet_int(r12, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c20000030000000000000800450000b000000000fb019078ac1e0001ac1414aa03019078032400004500000000010000000100077f000001640100fe8677ffffffff000e08c82ce8da6ee06cb8dd94520509020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6060a0000000000800000071173bc23f9ffffffa30900a301c846000011c8f46976e79ea788f03d9d3205927e860600000020000001"], 0x0) pread64(r11, &(0x7f000001a240)=""/102400, 0x19000, 0xb5) 11.812859331s ago: executing program 5 (id=888): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 64) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000480)=0xffff8001) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000540)) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x2000000, {{@in=@private=0xa010101, @in6=@mcast1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x120}, {@in6=@private0={0xfc, 0x0, '\x00', 0x3}, 0xfffffffd, 0xff}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xffffffffffffffff}, {}, 0x70bd26, 0x0, 0x2, 0x2, 0x0, 0x18}}, 0xf0}}, 0x10) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r6, 0x51b0b, 0x1425}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48830}, 0x4000010) (async) sendto$packet(r4, &(0x7f0000000040)="6f3d131bd1eef5958ba8532ac7eaee48ca65d478", 0x14, 0x80, &(0x7f0000000180)={0x11, 0x8100, r6, 0x1, 0xe9, 0x6, @multicast}, 0x14) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r12, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) (async) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r10, r11, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (async, rerun: 64) r14 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r15, r16, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) io_uring_enter(r14, 0x627, 0x4c1, 0x43, 0x0, 0x30) 11.742826644s ago: executing program 5 (id=889): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) setns(r2, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) 11.742466978s ago: executing program 5 (id=890): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) setns(r1, 0x24020000) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000080)=0x9) umount2(&(0x7f0000000040)='.\x00', 0x2) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/4096, 0x1000) 11.057045059s ago: executing program 5 (id=892): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x118, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x106, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0xeb, 0x0, 0x0, @u64=0xffffffff}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, 0x17, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x809}, 0x24004090) 10.988428171s ago: executing program 34 (id=892): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)={0x118, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x106, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0xeb, 0x0, 0x0, @u64=0xffffffff}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xb0, 0x17, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0xb0}, 0x1, 0x0, 0x0, 0x809}, 0x24004090) 1.773455618s ago: executing program 2 (id=1002): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2800, &(0x7f0000000080)={@_ha_fsid={[0x1, 0xfffffff0]}, {0x0, 0x4, 0x1, 0x9}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x6}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8b10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4080) creat(&(0x7f0000000100)='./bus\x00', 0x100) syz_emit_ethernet(0xb6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x80, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0xb, "909f50c218fa30165debb32c1997043f1c9ffeca5ab1225605024d58164e9cea3822ef2d41c58f08089a7f8687c5062f504a94e0dad5a7e2cfee3e4542e3d1342a4a735d0c9d276a7d7767714d09be6e294917c38356"}]}}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f00000008c0)='./bus\x00', &(0x7f0000000ec0), 0x2010008, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 1.757286548s ago: executing program 2 (id=1004): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a", 0x2c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x10080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 1.566453074s ago: executing program 3 (id=1009): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f00000000c0)) (async) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fchdir(0xffffffffffffffff) (async) fchdir(0xffffffffffffffff) creat(&(0x7f0000000000)='./cgroup\x00', 0x4) (async) creat(&(0x7f0000000000)='./cgroup\x00', 0x4) 1.467093842s ago: executing program 2 (id=1011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000180)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'netpci0\x00', 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x4}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0) 1.465628212s ago: executing program 3 (id=1012): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000980)={0x1, 0x0, [{0x28c}]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\t\x00', 0x318, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x22, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03286f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001ac0)={0x2a}) (async) r5 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r8, r8, 0x0, 0x2) ioctl$DVB_DEMUX_DMX_ADD_PID(r5, 0x40026f33, &(0x7f0000000180)=0xda) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r9) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r10, 0x72b}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.337519016s ago: executing program 3 (id=1014): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010105, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0xffffffff, 0x1, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6erspan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xb, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f000099e000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@in_dx={0x69, 0x0, {0x6d57}}], 0xffffff0f}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x15) 1.077166482s ago: executing program 6 (id=1017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_open_procfs$pagemap(r2, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 1.074531196s ago: executing program 6 (id=1018): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000026c0)={0x34, r1, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd2}]}]}]}, 0x34}}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000f24e3ba56a585867c66011272eb310f8fe03bc0aeb1f4f7b9467ebb9ac8d59b689400b38d93b53", @ANYRES16=r5, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="1c002380060004005300000008000b000400000008001500a0000000"], 0x38}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x6d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x2000) bind$inet6(r0, &(0x7f0000002500)={0xa, 0x4e24, 0x6, @remote, 0x101}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x2, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@local, r8}}}], 0x28}}], 0x1, 0x0) 987.135657ms ago: executing program 6 (id=1019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01000000800000001c001a8018000a8014000900fc0200000000000000000000000000011400350073797a5f74756e0000"], 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x80000, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500002a30000000030a0fdb00000000a08cbd58e467a95341000000000a220005090000010073797a310000000005000000000000001100010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x1, 0x38}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) (async) close(r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="8907000074c6887e00534313822f83128760fd1633c00e72f750375ed08a56331dbf9ed7815e381a66e2d6e74703000000000000000000000000000000397e", 0x3f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="8907000074c6887e00534313822f83128760fd1633c00e72f750375ed08a56331dbf9ed7815e381a66e2d6e74703000000000000000000000000000000397e", 0x3f}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f00000002c0)="169a3727521ccb66b503fb9f3fcfebcded87b7e0b79ba379384925bc39c0f84f5c49975cdf6ec79ec40c792bf419cf5ecabf5f9992ed00bbff1a4ba73e63a3c2271d23a2d4c68c884300dec63a09a14ef9458b31f6215bf41dd4a7db68b8d1affb1391f45e992c4b227286cf0c4cddde428c43a50a3ede22f5a4f1faec53ec7a09ae1dfc06a23169fcf370ed8d8426c2f208a8c0a48b0de63b030edf51d16d34d2d10e9946063d51c0c1968431a92985b199a3861a9589cd887f88fc8ecf800fc9baaa51fc8b593f1b994db7d435ad403a9b61bc0893ad3931259e8637f82f7fb4a6c3d8a0150bac43e8be") (async) ioctl$sock_netdev_private(r5, 0x89f3, &(0x7f00000002c0)="169a3727521ccb66b503fb9f3fcfebcded87b7e0b79ba379384925bc39c0f84f5c49975cdf6ec79ec40c792bf419cf5ecabf5f9992ed00bbff1a4ba73e63a3c2271d23a2d4c68c884300dec63a09a14ef9458b31f6215bf41dd4a7db68b8d1affb1391f45e992c4b227286cf0c4cddde428c43a50a3ede22f5a4f1faec53ec7a09ae1dfc06a23169fcf370ed8d8426c2f208a8c0a48b0de63b030edf51d16d34d2d10e9946063d51c0c1968431a92985b199a3861a9589cd887f88fc8ecf800fc9baaa51fc8b593f1b994db7d435ad403a9b61bc0893ad3931259e8637f82f7fb4a6c3d8a0150bac43e8be") bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r10 = accept4$alg(r9, 0x0, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x290}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 857.485812ms ago: executing program 6 (id=1020): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000180)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf910000000000000000008500000085000000b7000000000000009500"/64], &(0x7f0000000200)='GPL\x00', 0x4, 0x2f, &(0x7f00000003c0)=""/47, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x1, 0xeb67, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x589}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000540)=r2, 0x4) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400030000000900020073797a32000000000c0007800500150001000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x9, 0x7ff, 0xffffffff, 0x0, 0x0, 0xcca, 0x8, 0x7, 0xa, 0xfc, 0x2, 0x1, 0x684b, 0x4, 0x6, 0xffffffff, 0x1, 0x1a447, 0x3, 0x40000006, 0x100, 0x2, 0xf27, 0x6, 0xb, 0xa, 0x5, 0x8, 0x4, 0x10000, 0x6]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x80, 0x0, 0x0, 0x8}}) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 856.820149ms ago: executing program 6 (id=1021): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x2, 0x4, 0x2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x8001, 0x80000000}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x4, 0x4, 0x4f0, 0xffffffff, 0x250, 0x0, 0x250, 0xfeffffff, 0xffffffff, 0x420, 0x420, 0x420, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x1, 0x47, 0xc, 0x2, 0x2, @empty, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff, 0xffffffff, 0xff0000ff], [0x0, 0xff000000, 0x0, 0xffffffff], [0x0, 0xff, 0xffffff00, 0xffffffff], 0x1010, 0x1840}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth0_to_bond\x00', {0xc0}}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xbe51, 'system_u:object_r:semanage_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 796.935608ms ago: executing program 2 (id=1022): keyctl$revoke(0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x7, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {0x0, 0x6, 0x1}, {0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr-aes-neonbs\x00'}}}, @encap={0x1c, 0x20, {0x2, 0x4e22, 0x1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x0, @in=@remote}}]}, 0x170}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x80, 0x4, 0x400, 0xba0, 0x400, 0xb}, {0x4, 0x8, 0x1, 0x9, 0x4dc, 0x1}], ['\x00']}) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "d280154ec880a1301c57d413780bc6c247ed7bd3445ee293c2874898ab088f5c51b55ffe39b10fa9cd45078f9ef13dd24ffde91b6e5fdd566552c0681f8b3fb5", 0x32}, 0x48, 0x0) keyctl$unlink(0x9, 0x0, r1) 796.410346ms ago: executing program 6 (id=1023): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 795.096955ms ago: executing program 2 (id=1024): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010015, 0x0, 0x9}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x4, 0x28, 0x2f, 0x8001, 0x4, 0xb78, 0x5, 0x3, 0x0, 0x1, 0x8, 0x8000, 0x400000, 0xffffffff, 0x1b, 0x8, 0x7, 0x1f4, 0xf, 0x3, 0x800, 0x3, 0x400, 0x9, 0x5, 0x9, 0x2, 0xffffff21, 0x1, 0x15, 0x101, 0x7, 0x4, 0x9, 0x82, 0xa8, 0xda80, 0x0, 0x2, 0x4, 0x1, 0x0, 0x5, 0xa4, 0x401, 0x2, 0x3, 0x8, 0xfffffffc, 0x6, 0x0, 0x967, 0xffffffff, 0x8, 0x6, 0x6, 0x9, 0x3, 0xff, 0x7e, 0xa, 0x7fff, 0x0, 0xfffffff7, 0x9, 0x8, 0x7, 0x80000000, 0x7fffffff, 0x2, 0x5, 0x1, 0x4, 0x7, 0x10001, 0xb1a, 0x9, 0x9, 0x1, 0x0, 0x7ff, 0x4, 0x8, 0x6, 0xfffff1f0, 0x3, 0x7, 0x0, 0x9, 0xfd, 0x80000000, 0x5, 0x100036, 0x5, 0x8, 0x10, 0x4, 0x2, 0x6a5, 0x6, 0x6, 0x4, 0x4, 0x8, 0x1, 0x3, 0x7fff, 0x5c73, 0x2, 0xe0a, 0xe5, 0x7, 0x9, 0x0, 0x3, 0xfffffff7, 0x1, 0x1, 0x9, 0x80000000, 0xb, 0x5, 0xcc, 0x7fffffff, 0x0, 0xbb, 0x10, 0x7, 0xf, 0x1a, 0x8, 0x2, 0x8, 0xcb0, 0xffffffff, 0x7ff, 0x6017, 0x7ff, 0x4, 0xa9, 0x4, 0x9, 0x1, 0xfffffe01, 0x6, 0x4a032035, 0x6, 0x8, 0x7, 0xd, 0x1, 0x0, 0x8, 0x8000, 0x2000, 0xed0, 0xf62d, 0x2, 0x1ac, 0x9, 0xe, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x72, 0x3, 0x4, 0x6, 0x6, 0x1ff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x6, 0x3, 0x9, 0x0, 0xe, 0x6, 0x4, 0x55, 0x8, 0x3, 0x100, 0x7af, 0x0, 0x201, 0x2, 0x5, 0x9a000000, 0xe5ba, 0x8, 0x2, 0x1ff, 0xfffffffc, 0x4, 0x1, 0x6, 0x8, 0x9, 0x3, 0xe01, 0x6, 0x80, 0x10000006, 0x31b80000, 0x5, 0xfffffeff, 0x9992, 0x3, 0x75, 0x2, 0x48e, 0x4, 0x8, 0x2, 0x0, 0x9ee2, 0xfffffff7, 0x6, 0x3, 0x400, 0x8, 0x5, 0xdc, 0x0, 0x3, 0xc, 0x9, 0x7, 0x8, 0x7a31, 0x3ff, 0xd, 0x1214, 0xffffffff, 0x6, 0x8, 0x76f, 0x4, 0x8, 0x7, 0x0, 0x7, 0xfb, 0x100, 0xe340, 0x4, 0x8, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x8001, 0x3, 0xffffffff}, {0x6d, 0x0, 0x86b, 0x7, 0x8, 0x8}, 0x3, 0x7, 0xbbf}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010015, 0x0, 0x9}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x4, 0x28, 0x2f, 0x8001, 0x4, 0xb78, 0x5, 0x3, 0x0, 0x1, 0x8, 0x8000, 0x400000, 0xffffffff, 0x1b, 0x8, 0x7, 0x1f4, 0xf, 0x3, 0x800, 0x3, 0x400, 0x9, 0x5, 0x9, 0x2, 0xffffff21, 0x1, 0x15, 0x101, 0x7, 0x4, 0x9, 0x82, 0xa8, 0xda80, 0x0, 0x2, 0x4, 0x1, 0x0, 0x5, 0xa4, 0x401, 0x2, 0x3, 0x8, 0xfffffffc, 0x6, 0x0, 0x967, 0xffffffff, 0x8, 0x6, 0x6, 0x9, 0x3, 0xff, 0x7e, 0xa, 0x7fff, 0x0, 0xfffffff7, 0x9, 0x8, 0x7, 0x80000000, 0x7fffffff, 0x2, 0x5, 0x1, 0x4, 0x7, 0x10001, 0xb1a, 0x9, 0x9, 0x1, 0x0, 0x7ff, 0x4, 0x8, 0x6, 0xfffff1f0, 0x3, 0x7, 0x0, 0x9, 0xfd, 0x80000000, 0x5, 0x100036, 0x5, 0x8, 0x10, 0x4, 0x2, 0x6a5, 0x6, 0x6, 0x4, 0x4, 0x8, 0x1, 0x3, 0x7fff, 0x5c73, 0x2, 0xe0a, 0xe5, 0x7, 0x9, 0x0, 0x3, 0xfffffff7, 0x1, 0x1, 0x9, 0x80000000, 0xb, 0x5, 0xcc, 0x7fffffff, 0x0, 0xbb, 0x10, 0x7, 0xf, 0x1a, 0x8, 0x2, 0x8, 0xcb0, 0xffffffff, 0x7ff, 0x6017, 0x7ff, 0x4, 0xa9, 0x4, 0x9, 0x1, 0xfffffe01, 0x6, 0x4a032035, 0x6, 0x8, 0x7, 0xd, 0x1, 0x0, 0x8, 0x8000, 0x2000, 0xed0, 0xf62d, 0x2, 0x1ac, 0x9, 0xe, 0x6, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x72, 0x3, 0x4, 0x6, 0x6, 0x1ff, 0x7, 0x3, 0x9, 0x1, 0x100, 0x6, 0x3, 0x9, 0x0, 0xe, 0x6, 0x4, 0x55, 0x8, 0x3, 0x100, 0x7af, 0x0, 0x201, 0x2, 0x5, 0x9a000000, 0xe5ba, 0x8, 0x2, 0x1ff, 0xfffffffc, 0x4, 0x1, 0x6, 0x8, 0x9, 0x3, 0xe01, 0x6, 0x80, 0x10000006, 0x31b80000, 0x5, 0xfffffeff, 0x9992, 0x3, 0x75, 0x2, 0x48e, 0x4, 0x8, 0x2, 0x0, 0x9ee2, 0xfffffff7, 0x6, 0x3, 0x400, 0x8, 0x5, 0xdc, 0x0, 0x3, 0xc, 0x9, 0x7, 0x8, 0x7a31, 0x3ff, 0xd, 0x1214, 0xffffffff, 0x6, 0x8, 0x76f, 0x4, 0x8, 0x7, 0x0, 0x7, 0xfb, 0x100, 0xe340, 0x4, 0x8, 0x7]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x8001, 0x3, 0xffffffff}, {0x6d, 0x0, 0x86b, 0x7, 0x8, 0x8}, 0x3, 0x7, 0xbbf}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) (async) 437.578549ms ago: executing program 2 (id=1027): r0 = socket$netlink(0x10, 0x3, 0x10) setpriority(0x0, 0x0, 0x9) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0x8000a56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@ipv4_getrule={0x1c, 0x22, 0x1, 0x70bd25, 0x25dfdbfb, {0x2, 0x80, 0x20, 0x0, 0x4, 0x0, 0x0, 0x3}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4800) 367.415844ms ago: executing program 1 (id=1028): timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x9, 0x7, 0xfffff001}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000030582b22e9442000000000200400000ee00005313d6bb60c8e58279bc7de8bd84efc8dab6c8be4d8e5dc4649f797a5469dc43c794df1ea198dee705f63dd14286c1498c584c93cb21d7681e330000000000000000", @ANYRES32, @ANYBLOB="000000004c2401005800128008000100767469004c000280080004000a010101080005000a0100fe080004006401010208000600456b612d08000100", @ANYRES32, @ANYBLOB="0800020005000000080006000e00000008000600040000000800020009000000"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 366.592485ms ago: executing program 3 (id=1029): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=0x0, &(0x7f0000002300)=0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x4804}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x3}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x1b5) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000002100)='./bus\x00', 0x284342, 0x1df2a23c5997fb8c) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_emit_vhci(&(0x7f00000027c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="50484f4e4558db30d8494e0a545245424c4520274d6173746572c7b0f7a7ae284a1dffe5c920506c61796261636b20536e2f74"], 0xa8) close(r6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x0, 0x5002) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x24000420) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') 297.163324ms ago: executing program 1 (id=1030): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000940)={0xe42, 0x0, r0}) r2 = accept4$inet6(r1, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000880)=0x1c, 0x80000) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000900)=@hopopts={0x16, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0) ioctl$DVD_WRITE_STRUCT(r3, 0x5392, &(0x7f0000000000)=@physical={0x0, 0x1, [{0x2, 0x4, 0x4, 0x3, 0x4, 0x1, 0x0, 0x1, 0x3, 0x1, 0x80000001, 0x847, 0x2}, {0x8, 0x1, 0x9, 0xc, 0x5, 0x1, 0x1, 0x1, 0x7, 0x0, 0xa, 0x80000001, 0x4}, {0x5, 0x9, 0x8, 0x2, 0x5, 0x0, 0x3, 0x0, 0xe, 0x0, 0x6, 0x10, 0x5}, {0x3, 0x9, 0x7, 0x7, 0xc, 0x1, 0x1, 0x5, 0x1, 0x1, 0x4, 0x4, 0x4}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008626e2503e09000000000000550901000000000095000000000000004d09000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94) 296.959649ms ago: executing program 3 (id=1031): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r0, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa0000}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f00000010c0)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 217.391104ms ago: executing program 1 (id=1032): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0xffff, 0x2, 0x2, 0x5, 0xf905, 0x7fff, 0x7, {0x0, @in6={{0xa, 0x4e24, 0xe67a, @empty, 0x4}}, 0xfffff678, 0xfc94, 0x0, 0x4, 0x5}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000002c0)={0x9cc, 0xf295, 0x200, 0x9, 0x6, 0x800, 0x4, 0x10, r4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) madvise(&(0x7f0000720000/0x2000)=nil, 0x2000, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e) 146.990791ms ago: executing program 1 (id=1033): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x163046, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0}, {&(0x7f0000000280)="1d085a2eda089f4b8ba7c70ae7975c10558ad70e3556005a69e7a4b8e6f93a3eb7684b3ac6362c936b99efa0a092d6bb2868fc600d83c765607a21c52752e8268da38199fe292718ec", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x10, 0x0, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) 1.375666ms ago: executing program 3 (id=1034): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x44, 0x0, 0x0) (async) io_uring_enter(r1, 0x3516, 0x0, 0x44, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000040000000000000700000008000000000000000b01000000000000000000000500"], 0x0, 0x3e, 0x0, 0x1}, 0x28) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@seclabel}]}) r8 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r8, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x1) (async) open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x1) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000740)={0x3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) 599.187µs ago: executing program 1 (id=1035): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x40) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x7, 0x4, &(0x7f0000000280)={0x5, "1d27f0db2e1f25eff995475188afe0ebe9bab69516a5e88a718dca33021b22b650"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x5, &(0x7f0000000080)=@framed={{}, [@call={0x61, 0x11, 0x18, 0xc3}, @call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94) 0s ago: executing program 1 (id=1036): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x101000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@remote, @broadcast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x4, 0x2c, 0x1, 0x8}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x42, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000018c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x127c, 0x14, 0x401, 0x70bd25, 0x25dfdbfc, {0xe5ea586f617aadb3, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "ea8e129b6fd5305d49cf861a089092eb9b7278307324d6ba85f8ebd0e6f384e9d1757783efc5a6206a11b34384a6fce7435ffd09bd43a235f21ec25e614c6f8d759d38f7b8a0c384fbedbe07c83a2d4d3f53b60df1be4cd4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "cd52f7c7a8d7d392d5dec3d5719166455a2b8a37150fb37c60a9d493513ab31b4ee208053277e2a11bf447117c9bca04c177a002696c423962374e47dd627c84088ed7b44c917ecd0aff69c4080f6c93ce8898d62a52b9a1b8a2d1770fcd987447ec32dfa8a0b05cf645cabe9c6f51296651b0e7b8837d8dc3a756625b66bea702181b4732b6572f1cd5f7f19930a650c45069a4d59931f2c64b19"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "fb4b229f37563bd5775fdce10bb05e36fff5257a1c29e579b248123a6666e1ee6deb91f7c1cae97f3a3cb68a9eea51dd7ca54ac771be24a82539ef65f0010bc855f82e9346836bd55388d621f9e5df6bf4fcd44cb88b93c6d7007543885e925892c35cadeb83369cfc5d57fcb07f5f1a"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "1405df46ad6e0428c308c4b6322d04caeeba39c4f33154ca8b42fcc80189d6f5d21d413fc11eea5ec1ff8ba553c8b9c694535c3ce3a5970b11df336335eccfa06ec005b45ff44d7219b56f"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "7ff8e48cd5675e021cb6f8ebda263ef57088060e00e8d7cbc4d1a30a1ec633cf277ce2023b143f19ad36e9c5682d9c5d5cf76f61f7345a092c4d80301f5fec1f5af78c0719a61e419ea4ed064c6f1f015b9c6ff40e25fe2d91ddce9a7eae9bde8bc78bd24ca40e233c9063c08741fd25d138727ea9f372c7bcbce4822e48c5fde1c70c5bab328c8c63ea3f32d26ce1c0e970a52a783431a51db8b96cb8bf5c"}]}, 0x127c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4801) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0xf7, @mcast2, 0x3}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0xfffffffa, @empty, 0x401}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x401}], 0xc4) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1fffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r10 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000240)={0x1, 0x909d}) kernel console output (not intermixed with test programs): ep_enable returned -22 [ 77.222420][ T6839] netlink: 'syz.1.242': attribute type 9 has an invalid length. [ 77.235466][ T6839] netlink: 'syz.1.242': attribute type 11 has an invalid length. [ 77.238107][ T6839] netlink: 'syz.1.242': attribute type 12 has an invalid length. [ 77.240792][ T6839] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.242'. [ 77.277887][ T5932] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 77.419436][ T58] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.428967][ T5970] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input10 [ 77.576663][ T58] usb 8-1: device descriptor read/64, error -71 [ 77.624392][ T6826] smc: adding net device bond0 with user defined pnetid SYZ2 [ 77.628049][ T6826] bond0: Removing last ns target with arp_interval on [ 77.635453][ T60] usb 7-1: USB disconnect, device number 4 [ 77.635922][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.641111][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 77.814761][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 77.814890][ T58] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.820497][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 77.820507][ T40] audit: type=1800 audit(1771026102.354:439): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.249" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 77.919927][ T40] audit: type=1400 audit(1771026102.454:440): avc: denied { read write } for pid=6867 comm="syz.1.250" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.927753][ T40] audit: type=1400 audit(1771026102.454:441): avc: denied { open } for pid=6867 comm="syz.1.250" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.935206][ T6868] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 77.938087][ T40] audit: type=1400 audit(1771026102.464:442): avc: denied { ioctl } for pid=6867 comm="syz.1.250" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.954727][ T58] usb 8-1: device descriptor read/64, error -71 [ 77.996108][ T40] audit: type=1400 audit(1771026102.534:443): avc: denied { name_bind } for pid=6867 comm="syz.1.250" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 78.064930][ T58] usb usb8-port1: attempt power cycle [ 78.131673][ T40] audit: type=1400 audit(1771026102.664:444): avc: denied { execute } for pid=6870 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.142560][ T40] audit: type=1400 audit(1771026102.664:445): avc: denied { execute_no_trans } for pid=6870 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.168071][ T6873] vxcan1 speed is unknown, defaulting to 1000 [ 78.197756][ T5927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.203736][ T5927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.205251][ T6875] loop9: detected capacity change from 0 to 7 [ 78.207243][ T5927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.212226][ T5927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.215826][ T5927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.219312][ T6875] Dev loop9: unable to read RDB block 7 [ 78.220967][ T6875] loop9: unable to read partition table [ 78.222687][ T6875] loop9: partition table beyond EOD, truncated [ 78.224431][ T6875] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 78.406616][ T58] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 78.427394][ T58] usb 8-1: device descriptor read/8, error -71 [ 78.674761][ T58] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 78.700397][ T58] usb 8-1: device descriptor read/8, error -71 [ 78.819933][ T58] usb usb8-port1: unable to enumerate USB device [ 78.854735][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 79.081040][ T6876] vxcan1 speed is unknown, defaulting to 1000 [ 79.108061][ T6291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.210140][ T6291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.215729][ T40] audit: type=1400 audit(1771026103.754:446): avc: denied { create } for pid=6886 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.222183][ T40] audit: type=1400 audit(1771026103.754:447): avc: denied { write } for pid=6886 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.261064][ T6891] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 79.303390][ T40] audit: type=1400 audit(1771026103.834:448): avc: denied { setopt } for pid=6895 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 79.330046][ T6896] __nla_validate_parse: 2 callbacks suppressed [ 79.330058][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 79.357839][ T6291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.386781][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 79.394163][ T6294] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.398088][ T6294] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.404987][ T6244] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.408940][ T6244] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.422199][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 79.456902][ T6291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.468470][ T6902] geneve2: entered promiscuous mode [ 79.517415][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.519764][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.522102][ T6876] bridge_slave_0: entered allmulticast mode [ 79.525983][ T6876] bridge_slave_0: entered promiscuous mode [ 79.529208][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531545][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.533837][ T6876] bridge_slave_1: entered allmulticast mode [ 79.537930][ T6876] bridge_slave_1: entered promiscuous mode [ 79.589431][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.593470][ T6909] netlink: 'syz.2.261': attribute type 29 has an invalid length. [ 79.599139][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.633070][ T6909] bond2: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 79.637584][ T6909] bond2 (unregistering): Released all slaves [ 79.659105][ T6876] team0: Port device team_slave_0 added [ 79.685004][ T6876] team0: Port device team_slave_1 added [ 79.745767][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.748662][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.759533][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.766703][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.768919][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.777445][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.781097][ T6291] bridge_slave_1: left allmulticast mode [ 79.783051][ T6291] bridge_slave_1: left promiscuous mode [ 79.785794][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.792098][ T6291] bridge_slave_0: left allmulticast mode [ 79.793984][ T6291] bridge_slave_0: left promiscuous mode [ 79.797093][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.904794][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 79.991466][ T6940] random: crng reseeded on system resumption [ 79.992052][ T6876] hsr_slave_0: entered promiscuous mode [ 80.000185][ T6876] hsr_slave_1: entered promiscuous mode [ 80.002461][ T6876] debugfs: 'hsr0' already exists in 'hsr' [ 80.004326][ T6876] Cannot create hsr debugfs directory [ 80.040742][ T6942] Invalid source name [ 80.042117][ T6942] UBIFS error (pid: 6942): cannot open "ubifs", error -22 [ 80.042726][ T6942] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 80.054814][ T6942] CIFS mount error: No usable UNC path provided in device string! [ 80.054814][ T6942] [ 80.058191][ T6942] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 80.163747][ T6947] syzkaller0: entered promiscuous mode [ 80.166731][ T6947] syzkaller0: entered allmulticast mode [ 80.170486][ T6294] syzkaller0: tun_net_xmit 48 [ 80.208420][ T6947] syzkaller0: create flow: hash 2616329725 index 1 [ 80.240706][ T6947] syzkaller0: delete flow: hash 2616329725 index 1 [ 80.296462][ T5927] Bluetooth: hci4: command tx timeout [ 80.447502][ T6960] 9pnet_virtio: no channels available for device syz [ 80.944758][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 81.217063][ T6876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.232313][ T6876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.237453][ T6876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.248661][ T6876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.316739][ T6291] hsr_slave_0: left promiscuous mode [ 81.335055][ T6291] hsr_slave_1: left promiscuous mode [ 81.339462][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.342707][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.349251][ T6291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.352809][ T6291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.361636][ T6291] veth1_macvtap: left promiscuous mode [ 81.363516][ T6291] veth0_macvtap: left promiscuous mode [ 81.366355][ T6291] veth1_vlan: left promiscuous mode [ 81.368252][ T6291] veth0_vlan: left promiscuous mode [ 81.532860][ T6291] team0 (unregistering): Port device team_slave_1 removed [ 81.543604][ T6291] team0 (unregistering): Port device team_slave_0 removed [ 81.687442][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.691918][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 81.789102][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.800416][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 81.807224][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.809846][ T6294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.819645][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.821912][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.849433][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 81.852584][ T9] usb 6-1: config 0 has no interface number 0 [ 81.857281][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 81.861496][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.866029][ T9] usb 6-1: Product: syz [ 81.871232][ T9] usb 6-1: Manufacturer: syz [ 81.872922][ T9] usb 6-1: SerialNumber: syz [ 81.878115][ T9] usb 6-1: config 0 descriptor?? [ 81.895648][ T7010] syzkaller0: entered promiscuous mode [ 81.897835][ T7010] syzkaller0: entered allmulticast mode [ 81.923103][ T7010] x_tables: duplicate underflow at hook 1 [ 81.975151][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 82.093154][ T6992] sctp: [Deprecated]: syz.1.277 (pid 6992) Use of int in maxseg socket option. [ 82.093154][ T6992] Use struct sctp_assoc_value instead [ 82.384945][ T5927] Bluetooth: hci4: command tx timeout [ 82.461238][ T6992] FAT-fs (sr0): bogus number of reserved sectors [ 82.463988][ T6992] FAT-fs (sr0): Can't find a valid FAT filesystem [ 82.826390][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 82.829904][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 82.833096][ T9] asix 6-1:0.251: probe with driver asix failed with error -5 [ 82.842868][ T9] usb 6-1: USB disconnect, device number 11 [ 83.011672][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.014817][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.063220][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 83.063236][ T40] audit: type=1400 audit(1771026107.594:462): avc: denied { bind } for pid=7035 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.138485][ T7044] openvswitch: netlink: Invalid VLAN frame [ 83.219308][ T6876] veth0_vlan: entered promiscuous mode [ 83.228055][ T6876] veth1_vlan: entered promiscuous mode [ 83.243670][ T6876] veth0_macvtap: entered promiscuous mode [ 83.248504][ T6876] veth1_macvtap: entered promiscuous mode [ 83.257673][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.264512][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.272278][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275612][ T6291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.278863][ T6291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.282480][ T6291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.372540][ T7057] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 83.530754][ T7061] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 83.534065][ T7061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.290'. [ 83.688877][ T40] audit: type=1400 audit(1771026108.224:463): avc: denied { append } for pid=7063 comm="syz.3.291" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 83.739736][ T7066] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 83.904725][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.957189][ T7058] bond1: (slave veth5): Enslaving as an active interface with a down link [ 83.963169][ T7060] bond1: (slave dummy0): making interface the new active one [ 83.965233][ T40] audit: type=1400 audit(1771026108.504:464): avc: denied { map } for pid=7073 comm="syz.2.294" path="socket:[15748]" dev="sockfs" ino=15748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 83.967112][ T7060] dummy0: entered promiscuous mode [ 83.977379][ T7060] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 83.977638][ T40] audit: type=1400 audit(1771026108.504:465): avc: denied { accept } for pid=7073 comm="syz.2.294" path="socket:[15748]" dev="sockfs" ino=15748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 83.988609][ T7061] bond1: (slave dummy0): Releasing active interface [ 84.024548][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.028440][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.054802][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 84.064229][ T6294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.067473][ T6294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.095283][ T40] audit: type=1400 audit(1771026108.634:466): avc: denied { mounton } for pid=6876 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.131680][ T7085] netlink: 80 bytes leftover after parsing attributes in process `syz.2.298'. [ 84.136781][ T5927] Bluetooth: hci3: unexpected event 0x0e length: 2 < 3 [ 84.137467][ T7085] xt_cgroup: xt_cgroup: no path or classid specified [ 84.140792][ T40] audit: type=1400 audit(1771026108.674:467): avc: denied { create } for pid=7086 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 84.153416][ T40] audit: type=1400 audit(1771026108.684:468): avc: denied { write } for pid=7086 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 84.163048][ T40] audit: type=1400 audit(1771026108.684:470): avc: denied { write } for pid=7086 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 84.173174][ T40] audit: type=1400 audit(1771026108.684:469): avc: denied { nlmsg_write } for pid=7086 comm="syz.1.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 84.239518][ T7096] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 84.242049][ T7096] netlink: 96 bytes leftover after parsing attributes in process `syz.1.301'. [ 84.244946][ T7096] netlink: 1 bytes leftover after parsing attributes in process `syz.1.301'. [ 84.248237][ T7096] netlink: 658 bytes leftover after parsing attributes in process `syz.1.301'. [ 84.456426][ T5927] Bluetooth: hci4: command tx timeout [ 84.661114][ T40] audit: type=1400 audit(1771026109.194:471): avc: denied { shutdown } for pid=7121 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.662926][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 84.672274][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 84.676553][ T7124] netlink: 'syz.1.307': attribute type 7 has an invalid length. [ 84.679138][ T7124] netlink: 'syz.1.307': attribute type 13 has an invalid length. [ 84.824129][ T7131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.309'. [ 84.960114][ T7144] bond0: entered promiscuous mode [ 84.962416][ T7144] bond_slave_0: entered promiscuous mode [ 84.966199][ T7144] bond_slave_1: entered promiscuous mode [ 84.970633][ T7144] batadv0: entered promiscuous mode [ 84.974623][ T7144] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 84.983643][ T7144] bond0: left promiscuous mode [ 84.988264][ T7144] bond_slave_0: left promiscuous mode [ 84.990761][ T7144] bond_slave_1: left promiscuous mode [ 84.995636][ T7144] batadv0: left promiscuous mode [ 85.094827][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 85.136294][ T7155] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 85.139084][ T7155] [U] J"—e:ÀÆ" [ 85.194465][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 85.283077][ T7167] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 85.394762][ T6098] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 85.474819][ T7180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.564780][ T6098] usb 6-1: Using ep0 maxpacket: 16 [ 85.568452][ T6098] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 85.571999][ T6098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.575532][ T6098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.578623][ T6098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 85.583026][ T6098] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 85.585893][ T6098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.591745][ T6098] usb 6-1: config 0 descriptor?? [ 86.011499][ T6098] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input11 [ 86.027085][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.043792][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.105878][ T6098] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5013.0004/input/input12 [ 86.134879][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 86.178428][ T6098] kye 0003:0458:5013.0004: input,hiddev0,hidraw1: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 86.234017][ T6098] usb 6-1: USB disconnect, device number 12 [ 86.264817][ T6360] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 86.435973][ T6360] usb 8-1: Using ep0 maxpacket: 32 [ 86.439489][ T6360] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.444426][ T6360] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.448027][ T6360] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.450663][ T6360] usb 8-1: Product: syz [ 86.452071][ T6360] usb 8-1: Manufacturer: syz [ 86.453553][ T6360] usb 8-1: SerialNumber: syz [ 86.456521][ T6360] usb 8-1: config 0 descriptor?? [ 86.458830][ T7189] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 86.476520][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 86.536227][ T5927] Bluetooth: hci4: command tx timeout [ 86.793188][ T9] usb 8-1: USB disconnect, device number 9 [ 87.175038][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 87.385333][ T7239] syzkaller0: entered promiscuous mode [ 87.387199][ T7239] syzkaller0: entered allmulticast mode [ 87.945571][ T7264] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 87.952863][ T7264] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 87.960931][ T7265] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 87.997467][ T7269] macsec0: entered promiscuous mode [ 87.999320][ T7269] macsec0: entered allmulticast mode [ 88.000988][ T7269] veth1_macvtap: entered allmulticast mode [ 88.214787][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 88.322964][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 88.322979][ T40] audit: type=1400 audit(1771026112.854:494): avc: denied { write } for pid=7287 comm="syz.1.359" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 88.416898][ T7292] vxcan1 speed is unknown, defaulting to 1000 [ 88.460509][ T7298] EXT4-fs (nbd2): unable to read superblock [ 88.674869][ T39] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 88.770206][ T7302] netlink: 168 bytes leftover after parsing attributes in process `syz.2.364'. [ 88.827155][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 88.835987][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 88.840639][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 88.847416][ T39] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.853917][ T39] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 88.858260][ T39] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 88.860952][ T39] usb 8-1: Product: syz [ 88.862326][ T39] usb 8-1: Manufacturer: syz [ 88.864024][ T39] usb 8-1: SerialNumber: syz [ 88.872789][ T39] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input13 [ 89.014827][ T58] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 89.078534][ T39] usb 8-1: USB disconnect, device number 10 [ 89.096732][ T39] appletouch 8-1:1.0: input: appletouch disconnected [ 89.176178][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.179891][ T58] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 89.185837][ T58] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.188793][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.191756][ T58] usb 7-1: Product: syz [ 89.193363][ T58] usb 7-1: Manufacturer: syz [ 89.194972][ T58] usb 7-1: SerialNumber: syz [ 89.199402][ T58] cdc_mbim 7-1:1.0: skipping garbage [ 89.254816][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 89.400460][ T7302] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 89.471240][ T7311] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7311 comm=syz.1.366 [ 89.720618][ T7325] xt_hashlimit: size too large, truncated to 1048576 [ 89.779748][ T7333] EXT4-fs (nbd3): unable to read superblock [ 89.864593][ T7337] /dev/sg0: Can't lookup blockdev [ 89.873000][ T40] audit: type=1400 audit(1771026114.404:495): avc: denied { execute_no_trans } for pid=7335 comm="syz.3.372" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=18583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 89.929575][ T7341] fuse: Bad value for 'user_id' [ 89.931785][ T7341] fuse: Bad value for 'user_id' [ 90.007513][ T7302] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 90.038217][ T58] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 90.052349][ T58] wwan wwan0: port wwan0mbim0 attached [ 90.078329][ T58] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7e:e7:8f:d1:8a:4a [ 90.114189][ T7349] vxcan1 speed is unknown, defaulting to 1000 [ 90.194985][ T4217] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 90.228784][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.229505][ T40] audit: type=1400 audit(1771026114.764:496): avc: denied { read write } for pid=7301 comm="syz.2.364" name="cdc-wdm0" dev="devtmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 90.231758][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.244311][ T40] audit: type=1400 audit(1771026114.764:497): avc: denied { open } for pid=7301 comm="syz.2.364" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 90.245077][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.256315][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.264718][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.266885][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.269602][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.271749][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.273949][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.276133][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.278447][ T40] audit: type=1400 audit(1771026114.814:498): avc: denied { watch watch_reads } for pid=7301 comm="syz.2.364" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.279162][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.292314][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.294726][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.294731][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 90.297042][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.301758][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.303875][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.306046][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.308161][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.310828][ C1] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 90.313742][ C1] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 90.340922][ T6953] usb 7-1: USB disconnect, device number 5 [ 90.345032][ T4217] usb 6-1: device descriptor read/64, error -71 [ 90.380973][ T6953] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 90.516627][ T6953] wwan wwan0: port wwan0mbim0 disconnected [ 90.584767][ T4217] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 90.714869][ T4217] usb 6-1: device descriptor read/64, error -71 [ 90.825242][ T4217] usb usb6-port1: attempt power cycle [ 90.981834][ T40] audit: type=1400 audit(1771026115.514:499): avc: denied { ioctl } for pid=7369 comm="syz.2.377" path="socket:[17755]" dev="sockfs" ino=17755 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 91.164868][ T4217] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 91.194970][ T4217] usb 6-1: device descriptor read/8, error -71 [ 91.225705][ T58] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 91.334755][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 91.404798][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 91.407695][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.410839][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.413951][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.420877][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.425191][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.428094][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.435018][ T4217] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 91.465419][ T4217] usb 6-1: device descriptor read/8, error -71 [ 91.575114][ T4217] usb usb6-port1: unable to enumerate USB device [ 91.634181][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 91.636011][ T58] usbtmc 7-1:16.0: can't read capabilities [ 91.707003][ T7379] can0: slcan on ttyS3. [ 91.774920][ T7379] can0 (unregistered): slcan off ttyS3. [ 91.838444][ T40] audit: type=1400 audit(1771026116.374:500): avc: denied { write } for pid=7369 comm="syz.2.377" name="usbtmc0" dev="devtmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.840386][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.855638][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.866348][ T60] usb 7-1: USB disconnect, device number 6 [ 91.881462][ T40] audit: type=1400 audit(1771026116.414:501): avc: denied { write } for pid=7380 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 91.958097][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 91.962727][ T7385] trusted_key: encrypted_key: master key parameter 'dFf] ' is invalid [ 91.968925][ T7385] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.976016][ T40] audit: type=1326 audit(1771026116.514:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.3.382" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ba199bf79 code=0x0 [ 92.374815][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.104812][ T7495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'. [ 93.232543][ T7521] CIFS mount error: No usable UNC path provided in device string! [ 93.232543][ T7521] [ 93.237674][ T7521] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.263269][ T40] audit: type=1400 audit(1771026117.794:503): avc: denied { mounton } for pid=7507 comm="syz.1.393" path="/113/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 93.273736][ T7526] fuse: Bad value for 'rootmode' [ 93.369810][ T7537] vxcan1 speed is unknown, defaulting to 1000 [ 93.414756][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 93.426033][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 93.445367][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 93.640954][ T7558] ceph: No mds server is up or the cluster is laggy [ 93.891784][ T40] audit: type=1400 audit(1771026118.424:504): avc: denied { ioctl } for pid=7603 comm="syz.3.402" path="socket:[18693]" dev="sockfs" ino=18693 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.982452][ T7614] usb usb8: usbfs: process 7614 (syz.3.405) did not claim interface 0 before use [ 94.091201][ T40] audit: type=1400 audit(1771026118.624:505): avc: denied { mount } for pid=7618 comm="syz.3.406" name="/" dev="hugetlbfs" ino=19803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 94.147305][ T7631] vxcan1 speed is unknown, defaulting to 1000 [ 94.243991][ T40] audit: type=1400 audit(1771026118.774:506): avc: denied { unmount } for pid=5919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 94.269897][ T40] audit: type=1400 audit(1771026118.804:507): avc: denied { setopt } for pid=7647 comm="syz.3.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.394734][ T7662] program syz.3.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.418990][ T7662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.411'. [ 94.454703][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 94.571375][ T7685] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 94.573824][ T7685] netlink: 'syz.3.414': attribute type 3 has an invalid length. [ 94.584887][ T7685] netlink: 224 bytes leftover after parsing attributes in process `syz.3.414'. [ 94.602437][ T40] audit: type=1400 audit(1771026119.134:508): avc: denied { append } for pid=7683 comm="syz.3.414" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.663438][ T40] audit: type=1400 audit(1771026119.194:509): avc: denied { write } for pid=7695 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.738732][ T7701] bond1 (unregistering): Released all slaves [ 94.777777][ T40] audit: type=1400 audit(1771026119.314:510): avc: denied { unmount } for pid=7704 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.788031][ T7705] capability: warning: `syz.1.419' uses 32-bit capabilities (legacy support in use) [ 94.792436][ T5927] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 94.796227][ T5927] Bluetooth: Wrong link type (-22) [ 94.802435][ T5927] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 94.805642][ T5927] Bluetooth: Wrong link type (-22) [ 94.904692][ T7608] comedi comedi2: reset error (fatal) [ 94.945477][ T7790] netlink: 'syz.3.420': attribute type 4 has an invalid length. [ 94.952357][ T7790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=7790 comm=syz.3.420 [ 95.170049][ T7805] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 95.452945][ T40] audit: type=1400 audit(1771026119.984:511): avc: denied { read } for pid=7826 comm="syz.3.427" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 95.461090][ T40] audit: type=1400 audit(1771026119.984:512): avc: denied { open } for pid=7826 comm="syz.3.427" path="/131/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 95.469501][ T7833] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.472769][ T7833] block device autoloading is deprecated and will be removed. [ 95.481942][ T40] audit: type=1400 audit(1771026120.014:513): avc: denied { ioctl } for pid=7826 comm="syz.3.427" path="/131/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 95.494856][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 95.557782][ T7844] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.981110][ T7870] 9pnet_fd: p9_fd_create_unix (7870): problem connecting socket: ./file0: -91 [ 96.280973][ T7895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 96.406726][ T7909] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.503501][ T7929] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.524179][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 96.527242][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 96.534867][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 96.600750][ T7931] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 96.605841][ T7931] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 96.611678][ T7931] cramfs: wrong magic [ 96.637405][ T7974] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 96.640168][ T7974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.644125][ T7974] vhci_hcd vhci_hcd.0: Device attached [ 96.877944][ T39] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 96.904814][ T60] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 97.074737][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 97.077944][ T60] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.081224][ T60] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.084214][ T60] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 97.088993][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.094757][ T60] usb 6-1: config 0 descriptor?? [ 97.299861][ T6360] usb 6-1: USB disconnect, device number 17 [ 97.303348][ T7975] usb 39-1: recv xbuf, 0 [ 97.306703][ T6296] vhci_hcd vhci_hcd.1: stop threads [ 97.308416][ T6296] vhci_hcd vhci_hcd.1: release socket [ 97.313599][ T6296] vhci_hcd vhci_hcd.1: disconnect device [ 97.374753][ T39] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 97.405936][ T8004] comedi comedi4: bad chanlist[0]=0x00007fff chan=32767 range length=2 [ 97.410239][ T8004] netlink: 'syz.2.455': attribute type 21 has an invalid length. [ 97.415271][ T8004] netlink: 128 bytes leftover after parsing attributes in process `syz.2.455'. [ 97.419549][ T8004] netlink: 3 bytes leftover after parsing attributes in process `syz.2.455'. [ 97.424796][ T8003] netlink: 'syz.2.455': attribute type 21 has an invalid length. [ 97.427200][ T8003] netlink: 128 bytes leftover after parsing attributes in process `syz.2.455'. [ 97.430055][ T8003] netlink: 3 bytes leftover after parsing attributes in process `syz.2.455'. [ 97.574779][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 97.644754][ T58] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 97.661220][ T8019] vxcan1 speed is unknown, defaulting to 1000 [ 97.796066][ T58] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 97.800225][ T58] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 251, changing to 7 [ 97.803881][ T58] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 34585, setting to 1024 [ 97.807628][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.811439][ T58] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.814468][ T58] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 97.817194][ T58] usb 8-1: Product: syz [ 97.818568][ T58] usb 8-1: Manufacturer: syz [ 97.820085][ T58] usb 8-1: SerialNumber: syz [ 97.826631][ T58] usb 8-1: config 0 descriptor?? [ 97.856582][ T58] usb 8-1: selecting invalid altsetting 0 [ 97.880143][ T8048] netlink: 348 bytes leftover after parsing attributes in process `syz.1.459'. [ 98.119796][ T58] usb 8-1: USB disconnect, device number 11 [ 98.207737][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 98.211286][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 98.219489][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 98.624789][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 98.624801][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 98.764786][ T9] usb 6-1: device descriptor read/64, error -71 [ 98.844833][ T6953] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 98.935296][ T8141] sg_write: data in/out 838694577/1 bytes for SCSI command 0x58-- guessing data in; [ 98.935296][ T8141] program syz.3.472 not setting count and/or reply_len properly [ 98.967656][ T8143] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.473'. [ 98.995538][ T6953] usb 7-1: Using ep0 maxpacket: 16 [ 98.998510][ T6953] usb 7-1: config 1 interface 0 altsetting 255 has an endpoint descriptor with address 0x4A, changing to 0xA [ 99.004729][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 99.014779][ T6953] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0xA has invalid maxpacket 54091, setting to 1024 [ 99.018387][ T6953] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0xA has invalid maxpacket 1024 [ 99.021601][ T6953] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.026133][ T6953] usb 7-1: config 1 interface 0 has no altsetting 0 [ 99.030017][ T6953] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 99.033123][ T6953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.036049][ T6953] usb 7-1: Product: syz [ 99.037387][ T6953] usb 7-1: Manufacturer: syz [ 99.038931][ T6953] usb 7-1: SerialNumber: syz [ 99.041927][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 99.041938][ T40] audit: type=1400 audit(1771026123.584:527): avc: denied { read } for pid=8142 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.052133][ T8134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.134801][ T9] usb 6-1: device descriptor read/64, error -71 [ 99.255014][ T9] usb usb6-port1: attempt power cycle [ 99.258977][ T6953] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 99.457695][ T40] audit: type=1400 audit(1771026123.994:528): avc: denied { read write } for pid=8132 comm="syz.2.470" name="lp0" dev="devtmpfs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 99.459983][ C1] usblp0: nonzero write bulk status received: -71 [ 99.465254][ T40] audit: type=1400 audit(1771026123.994:529): avc: denied { open } for pid=8132 comm="syz.2.470" path="/dev/usb/lp0" dev="devtmpfs" ino=3137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 99.468399][ T58] usb 7-1: USB disconnect, device number 7 [ 99.481926][ T58] usblp0: removed [ 99.594980][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 99.615228][ T9] usb 6-1: device descriptor read/8, error -71 [ 99.654752][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 99.844197][ T8160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.474'. [ 99.865057][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 99.885117][ T9] usb 6-1: device descriptor read/8, error -71 [ 99.907370][ T8165] program syz.3.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.995010][ T9] usb usb6-port1: unable to enumerate USB device [ 100.010592][ T8170] autofs4:pid:8170:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 100.694748][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 100.714311][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.729055][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.732562][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.737240][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.740158][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.774815][ T8192] vxcan1 speed is unknown, defaulting to 1000 [ 100.793322][ T40] audit: type=1400 audit(1771026125.324:530): avc: denied { read } for pid=8212 comm="syz.3.483" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.801997][ T40] audit: type=1400 audit(1771026125.334:531): avc: denied { open } for pid=8212 comm="syz.3.483" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.810236][ T40] audit: type=1400 audit(1771026125.344:532): avc: denied { append } for pid=8212 comm="syz.3.483" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.819962][ T40] audit: type=1400 audit(1771026125.364:533): avc: denied { write } for pid=8212 comm="syz.3.483" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 100.876617][ T40] audit: type=1400 audit(1771026125.414:534): avc: denied { bind } for pid=8212 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 100.884822][ T40] audit: type=1400 audit(1771026125.414:535): avc: denied { ioctl } for pid=8212 comm="syz.3.483" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 100.956762][ T6296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.975429][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 101.023876][ T8291] netlink: 'syz.2.487': attribute type 39 has an invalid length. [ 101.031533][ T8291] veth0_macvtap: left promiscuous mode [ 101.085590][ T6296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.131886][ T8328] syzkaller0: entered promiscuous mode [ 101.133744][ T8328] syzkaller0: entered allmulticast mode [ 101.154250][ T40] audit: type=1804 audit(1771026125.684:536): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.490" name="/newroot/161/file1" dev="tmpfs" ino=871 res=1 errno=0 [ 101.169269][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.171644][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.174047][ T8192] bridge_slave_0: entered allmulticast mode [ 101.179288][ T8192] bridge_slave_0: entered promiscuous mode [ 101.184005][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.186700][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.189029][ T8192] bridge_slave_1: entered allmulticast mode [ 101.191677][ T8192] bridge_slave_1: entered promiscuous mode [ 101.208297][ T6296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.229785][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.236045][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.254067][ T8192] team0: Port device team_slave_0 added [ 101.257930][ T8192] team0: Port device team_slave_1 added [ 101.274055][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.277354][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.286156][ T8192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.290234][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.292326][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.300067][ T8192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.315592][ T6296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.353131][ T8419] veth1_to_batadv: entered promiscuous mode [ 101.416916][ T8192] hsr_slave_0: entered promiscuous mode [ 101.420125][ T8192] hsr_slave_1: entered promiscuous mode [ 101.541528][ T6296] bridge_slave_1: left allmulticast mode [ 101.543457][ T6296] bridge_slave_1: left promiscuous mode [ 101.545548][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.550454][ T6296] bridge_slave_0: left allmulticast mode [ 101.552278][ T6296] bridge_slave_0: left promiscuous mode [ 101.554095][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.690978][ T6296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.696165][ T6296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.699908][ T6296] bond0 (unregistering): Released all slaves [ 101.734798][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 101.774629][ T8192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.785906][ T8192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.791434][ T8192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.795962][ T8192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.894184][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.927441][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.005625][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.008700][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.029086][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.031529][ T6291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.160729][ T6296] hsr_slave_0: left promiscuous mode [ 102.163285][ T6296] hsr_slave_1: left promiscuous mode [ 102.175789][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.178170][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.182586][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.185422][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.222567][ T6296] veth1_macvtap: left promiscuous mode [ 102.224463][ T6296] veth0_macvtap: left promiscuous mode [ 102.229791][ T6296] veth1_vlan: left promiscuous mode [ 102.231676][ T6296] veth0_vlan: left promiscuous mode [ 102.356460][ T6296] team0 (unregistering): Port device team_slave_1 removed [ 102.362899][ T6296] team0 (unregistering): Port device team_slave_0 removed [ 102.473917][ T8702] netlink: 'syz.1.508': attribute type 23 has an invalid length. [ 102.503159][ T8708] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 102.513077][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.536504][ T8708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.622760][ T8766] program syz.1.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.648127][ T8192] veth0_vlan: entered promiscuous mode [ 102.662968][ T8192] veth1_vlan: entered promiscuous mode [ 102.687015][ T8192] veth0_macvtap: entered promiscuous mode [ 102.691180][ T8192] veth1_macvtap: entered promiscuous mode [ 102.710036][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.722634][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.733930][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.742674][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.755187][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.758513][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.767317][ T8783] __nla_validate_parse: 2 callbacks suppressed [ 102.767328][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 102.774784][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 102.775589][ T5932] Bluetooth: hci1: command tx timeout [ 102.836553][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.841994][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.857865][ T8802] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 102.867228][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.869729][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.936965][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.480'. [ 102.994410][ T8824] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 103.005738][ T8824] overlayfs: failed to set xattr on upper [ 103.007466][ T8824] overlayfs: ...falling back to redirect_dir=nofollow. [ 103.009334][ T8824] overlayfs: ...falling back to index=off. [ 103.011340][ T8824] overlayfs: ...falling back to uuid=null. [ 103.013175][ T8824] overlayfs: ...falling back to xino=off. [ 103.028086][ T8827] ptrace attach of "/syz-executor exec"[5919] was attempted by ""[8827] [ 103.072637][ T8853] trusted_key: encrypted_key: master key parameter '' is invalid [ 103.076203][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 103.076913][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 103.076930][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 103.107636][ T8851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.120255][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 103.123448][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.127360][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 103.128226][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.133228][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.142594][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.181929][ T8907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60947 sclass=netlink_route_socket pid=8907 comm=syz.3.532 [ 103.249511][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.537'. [ 103.334106][ T8943] xt_l2tp: v2 doesn't support IP mode [ 103.422144][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.547'. [ 103.470644][ T8967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.473726][ T8967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.496343][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 103.500320][ T8977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.502793][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.509896][ T8977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.512399][ T8977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.674175][ T8988] syzkaller0: entered promiscuous mode [ 103.676358][ T8988] syzkaller0: entered allmulticast mode [ 103.714770][ T4217] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 103.728994][ T8994] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 103.814784][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 103.864734][ T4217] usb 8-1: Using ep0 maxpacket: 16 [ 103.867805][ T4217] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 103.870484][ T4217] usb 8-1: config 0 has no interface number 0 [ 103.873020][ T4217] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 103.877448][ T4217] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.880964][ T4217] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 17840, setting to 1024 [ 103.887104][ T4217] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 103.890092][ T4217] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 103.892868][ T4217] usb 8-1: Product: syz [ 103.894252][ T4217] usb 8-1: SerialNumber: syz [ 103.897656][ T4217] usb 8-1: config 0 descriptor?? [ 103.900301][ T8966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.905169][ T4217] cm109 8-1:0.8: invalid payload size 1024, expected 4 [ 103.908790][ T4217] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input14 [ 104.106394][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.109798][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.112304][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.114748][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.117145][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.119517][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.122011][ T4217] usb 8-1: USB disconnect, device number 12 [ 104.124250][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 104.124262][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 104.135133][ T4217] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 104.854791][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 104.865481][ T5932] Bluetooth: hci1: command tx timeout [ 105.002755][ T9106] program syz.3.558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.337393][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 105.337404][ T40] audit: type=1400 audit(1771026129.874:549): avc: denied { listen } for pid=9138 comm="syz.5.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.380082][ T40] audit: type=1400 audit(1771026129.914:550): avc: denied { ioctl } for pid=9141 comm="syz.5.568" path="socket:[24660]" dev="sockfs" ino=24660 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.441214][ T9150] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 105.523656][ T9166] netlink: 'syz.5.575': attribute type 12 has an invalid length. [ 105.531181][ T40] audit: type=1400 audit(1771026130.064:551): avc: denied { setattr } for pid=9168 comm="syz.1.574" name="NETLINK" dev="sockfs" ino=23028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.562240][ T9176] vxcan1 speed is unknown, defaulting to 1000 [ 105.657538][ T40] audit: type=1400 audit(1771026130.194:552): avc: denied { ioctl } for pid=9183 comm="syz.5.577" path="socket:[23074]" dev="sockfs" ino=23074 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.854411][ T9237] netlink: 'syz.5.580': attribute type 4 has an invalid length. [ 105.863496][ T9237] .`: renamed from bond0 (while UP) [ 105.896094][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 106.019142][ T9248] block device autoloading is deprecated and will be removed. [ 106.113796][ T40] audit: type=1400 audit(1771026130.644:553): avc: denied { create } for pid=9239 comm="syz.5.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.124744][ T40] audit: type=1400 audit(1771026130.644:554): avc: denied { bind } for pid=9239 comm="syz.5.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.132877][ T40] audit: type=1400 audit(1771026130.654:555): avc: denied { listen } for pid=9239 comm="syz.5.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.158059][ T9266] QAT: Stopping all acceleration devices. [ 106.229567][ T40] audit: type=1400 audit(1771026130.764:556): avc: denied { module_request } for pid=9272 comm="syz.3.590" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 106.239368][ T40] audit: type=1400 audit(1771026130.774:557): avc: denied { mounton } for pid=9269 comm="syz.1.589" path="/proc/543/task" dev="proc" ino=24736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 106.264442][ T9280] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.789888][ T9327] syzkaller0: entered promiscuous mode [ 106.792586][ T9327] syzkaller0: entered allmulticast mode [ 106.920065][ T9395] 9pnet_virtio: no channels available for device syz [ 106.924350][ T9395] veth1_to_team: entered promiscuous mode [ 106.928346][ T9394] veth1_to_team: left promiscuous mode [ 106.944806][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 107.464717][ T9313] comedi comedi2: reset error (fatal) [ 107.568390][ T9426] netlink: 'syz.5.607': attribute type 30 has an invalid length. [ 107.581981][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.583647][ T9426] netlink: 'syz.5.607': attribute type 30 has an invalid length. [ 107.585911][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.595465][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.598348][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.974846][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 108.009180][ T4217] IPVS: starting estimator thread 0... [ 108.116931][ T9450] IPVS: using max 43 ests per chain, 103200 per kthread [ 108.135894][ T5932] Bluetooth: hci1: command tx timeout [ 108.465785][ T9487] random: crng reseeded on system resumption [ 108.650791][ T9497] vxcan1 speed is unknown, defaulting to 1000 [ 108.708626][ T9501] netlink: 'syz.3.621': attribute type 4 has an invalid length. [ 108.711130][ T9501] __nla_validate_parse: 14 callbacks suppressed [ 108.711139][ T9501] netlink: 17 bytes leftover after parsing attributes in process `syz.3.621'. [ 109.014854][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 109.631207][ T40] audit: type=1400 audit(1771026134.164:558): avc: denied { read } for pid=9538 comm="syz.1.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 109.807389][ T9550] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 109.809770][ T9550] netlink: 'syz.1.626': attribute type 2 has an invalid length. [ 110.054746][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 110.509330][ T9571] kvm: apic: phys broadcast and lowest prio [ 110.656343][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.632'. [ 110.707388][ T40] audit: type=1400 audit(1771026135.234:559): avc: denied { accept } for pid=9645 comm="syz.1.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.732598][ T9650] xfrm1: entered promiscuous mode [ 110.734334][ T9650] xfrm1: entered allmulticast mode [ 110.791673][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 110.797854][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 110.802358][ T9661] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 110.808686][ T9661] bridge0: entered promiscuous mode [ 110.810657][ T9661] macsec2: entered promiscuous mode [ 110.974767][ T4217] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 111.094838][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 111.114359][ T40] audit: type=1400 audit(1771026135.644:560): avc: denied { getopt } for pid=9668 comm="syz.5.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.124698][ T4217] usb 6-1: Using ep0 maxpacket: 16 [ 111.127736][ T4217] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.130811][ T4217] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.133834][ T4217] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.141087][ T4217] usb 6-1: config 1 interface 0 has no altsetting 0 [ 111.145671][ T4217] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.148655][ T4217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.151306][ T4217] usb 6-1: Product: syz [ 111.152655][ T4217] usb 6-1: Manufacturer: syz [ 111.154140][ T4217] usb 6-1: SerialNumber: syz [ 111.231970][ T40] audit: type=1400 audit(1771026135.764:561): avc: denied { write } for pid=9680 comm="syz.5.641" name="file0" dev="9p" ino=72613999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.239103][ T40] audit: type=1400 audit(1771026135.764:562): avc: denied { open } for pid=9680 comm="syz.5.641" path="/45/file0/file0" dev="9p" ino=72613999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.365498][ T4217] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 111.508932][ T9689] program syz.5.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.566400][ T4217] usb 6-1: USB disconnect, device number 22 [ 111.578886][ T4217] usblp0: removed [ 111.713361][ T9716] No such timeout policy "syz1" [ 111.814831][ T5927] Bluetooth: hci3: command 0x2016 tx timeout [ 111.938659][ T9719] syz.3.646 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 112.135090][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 112.221118][ T40] audit: type=1400 audit(1771026136.754:563): avc: denied { create } for pid=9731 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.222743][ T9732] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 112.267606][ T40] audit: type=1400 audit(1771026136.804:564): avc: denied { setopt } for pid=9734 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.269627][ T9735] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 112.286053][ T9735] bond3: entered promiscuous mode [ 112.287896][ T9735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.359344][ T9771] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.361979][ T9771] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 112.364988][ T9771] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.367545][ T9771] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 112.491764][ T9786] can: request_module (can-proto-0) failed. [ 112.541632][ T9795] netlink: 28 bytes leftover after parsing attributes in process `syz.5.656'. [ 112.599865][ T9802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.658'. [ 112.634996][ T40] audit: type=1400 audit(1771026137.174:565): avc: denied { setattr } for pid=9804 comm="syz.5.659" path="socket:[23469]" dev="sockfs" ino=23469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.648706][ T9810] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 112.674455][ T9817] netlink: 56 bytes leftover after parsing attributes in process `syz.5.661'. [ 112.690277][ T9820] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 112.697062][ T40] audit: type=1400 audit(1771026137.234:566): avc: denied { mounton } for pid=9819 comm="syz.1.662" path="/syzcgroup/unified/syz1" dev="pstore" ino=4780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 112.697336][ T9820] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.712179][ T9820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.714909][ T9820] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 112.717392][ T9820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 112.731816][ T9823] ip6tnl1: entered promiscuous mode [ 112.737915][ T40] audit: type=1400 audit(1771026137.274:567): avc: denied { name_bind } for pid=9821 comm="syz.5.663" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.769230][ T40] audit: type=1400 audit(1771026137.304:568): avc: denied { map } for pid=9827 comm="syz.1.664" path="socket:[25640]" dev="sockfs" ino=25640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 112.884455][ T9851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.888946][ T9851] block device autoloading is deprecated and will be removed. [ 112.966462][ T9865] fuse: Bad value for 'user_id' [ 112.968044][ T9865] fuse: Bad value for 'user_id' [ 113.093586][ T9889] comedi comedi3: comedi_config --init_data is deprecated [ 113.174761][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 113.450089][ T9918] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 113.452819][ T9918] overlayfs: missing 'lowerdir' [ 113.460257][ T9918] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 113.463390][ T9918] overlayfs: missing 'lowerdir' [ 113.475755][ T9918] overlayfs: overlapping lowerdir path [ 113.759874][ T9952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.689'. [ 113.876874][ T9979] misc userio: Can't change port type on an already running userio instance [ 113.879870][ T9976] misc userio: Can't change port type on an already running userio instance [ 113.894933][ T5932] Bluetooth: hci3: command 0x2016 tx timeout [ 114.224764][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 114.254723][ T827] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 114.406386][ T827] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.410599][ T827] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 114.417648][ T827] usb 10-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 114.421599][ T827] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.424990][ T827] usb 10-1: Product: syz [ 114.426411][ T827] usb 10-1: Manufacturer: syz [ 114.427902][ T827] usb 10-1: SerialNumber: syz [ 114.431538][ T827] usb 10-1: config 0 descriptor?? [ 114.479152][T10077] Process accounting resumed [ 114.600340][T10085] netem: change failed [ 114.641652][T10015] JFS: discard option not supported on device [ 114.644447][T10015] Mount JFS Failure: -5 [ 114.658849][ T827] usb 10-1: USB disconnect, device number 2 [ 114.662251][T10086] netlink: 'syz.3.717': attribute type 5 has an invalid length. [ 114.773173][T10095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.718'. [ 114.796938][T10095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 114.803686][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.939578][T10118] PID 10118 killed due to inadequate hugepage pool [ 114.970259][T10120] input: syz0 as /devices/virtual/input/input15 [ 115.020102][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 115.024371][T10120] netlink: 14 bytes leftover after parsing attributes in process `syz.3.722'. [ 115.037603][T10120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.048059][T10120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.053335][T10120] bond0 (unregistering): Released all slaves [ 115.088397][T10150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.725'. [ 115.151021][T10161] tipc: Started in network mode [ 115.152628][T10161] tipc: Node identity 82269c8b9795, cluster identity 4711 [ 115.154031][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 115.155212][T10161] tipc: Enabled bearer , priority 0 [ 115.157468][T10161] tipc: Resetting bearer [ 115.158902][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.729'. [ 115.174613][T10160] tipc: Disabling bearer [ 115.190048][T10168] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 115.199754][T10183] netlink: 'syz.2.731': attribute type 7 has an invalid length. [ 115.265170][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 115.290413][ C3] blk_print_req_error: 1 callbacks suppressed [ 115.290425][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.295657][ C3] buffer_io_error: 21 callbacks suppressed [ 115.295665][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.300196][ C2] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.303198][ C2] Buffer I/O error on dev loop6, logical block 1, async page read [ 115.306401][ C2] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.309408][ C2] Buffer I/O error on dev loop6, logical block 2, async page read [ 115.311958][ C2] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.314993][ C2] Buffer I/O error on dev loop6, logical block 3, async page read [ 115.316304][T10202] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 115.317489][ C2] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.322990][ C2] Buffer I/O error on dev loop6, logical block 4, async page read [ 115.325480][ C2] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.328384][ C2] Buffer I/O error on dev loop6, logical block 5, async page read [ 115.331002][ C2] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.334001][ C2] Buffer I/O error on dev loop6, logical block 6, async page read [ 115.334087][T10202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.344899][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.347983][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 115.348347][T10213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10213 comm=syz.5.735 [ 115.350466][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.358534][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 115.360998][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 115.364018][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 115.368248][T10183] ldm_validate_partition_table(): Disk read failed. [ 115.372747][T10202] bond0: (slave geneve2): making interface the new active one [ 115.376513][T10183] Dev loop6: unable to read RDB block 0 [ 115.396671][T10183] loop6: unable to read partition table [ 115.398591][T10183] loop6: partition table beyond EOD, truncated [ 115.402927][T10183] loop_reread_partitions: partition scan of loop6 (aQ¤"¸ÍAZD–Îå0̹¨Š¾>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 119.194714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 119.414710][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.614766][T10566] __nla_validate_parse: 9 callbacks suppressed [ 119.614778][T10566] netlink: 32 bytes leftover after parsing attributes in process `syz.5.805'. [ 119.619951][T10566] syzkaller0: entered promiscuous mode [ 119.621779][T10566] syzkaller0: entered allmulticast mode [ 119.792734][T10606] cgroup: Name too long [ 119.829983][T10613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.813'. [ 119.833750][T10613] netlink: 'syz.3.813': attribute type 6 has an invalid length. [ 119.836573][T10613] netlink: 'syz.3.813': attribute type 5 has an invalid length. [ 119.839012][T10613] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 119.916580][T10619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 119.929557][T10622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.815'. [ 119.934885][T10622] xt_bpf: check failed: parse error [ 120.000992][T10635] netlink: 28 bytes leftover after parsing attributes in process `syz.2.818'. [ 120.005039][T10635] netlink: 'syz.2.818': attribute type 7 has an invalid length. [ 120.007667][T10635] netlink: 'syz.2.818': attribute type 8 has an invalid length. [ 120.010177][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 120.121580][T10654] openvswitch: netlink: Flow actions attr not present in new flow. [ 120.338578][ T4217] usbhid 6-1:0.0: can't add hid device: -71 [ 120.340759][ T4217] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 120.346366][ T4217] usb 6-1: USB disconnect, device number 23 [ 120.409793][T10672] netlink: 'syz.2.824': attribute type 10 has an invalid length. [ 120.454897][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 120.661167][T10704] netfs: Couldn't get user pages (rc=-14) [ 120.892501][T10710] vxcan1 speed is unknown, defaulting to 1000 [ 120.937940][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 120.937958][ T40] audit: type=1400 audit(1771026145.474:617): avc: denied { getopt } for pid=10713 comm="syz.3.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 120.938099][T10714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.834'. [ 120.971327][T10711] vxcan1 speed is unknown, defaulting to 1000 [ 120.991264][ T40] audit: type=1400 audit(1771026145.524:618): avc: denied { create } for pid=10724 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 120.992937][ T40] audit: type=1400 audit(1771026145.524:619): avc: denied { ioctl } for pid=10724 comm="syz.3.836" path="socket:[26527]" dev="sockfs" ino=26527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 120.993315][ T40] audit: type=1400 audit(1771026145.524:620): avc: denied { write } for pid=10724 comm="syz.3.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 121.002245][T10725] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 121.092732][T10725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.098524][T10725] bond3: (slave bond4): making interface the new active one [ 121.098900][T10725] bond3: (slave bond4): Enslaving as an active interface with an up link [ 121.151730][T10839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.837'. [ 121.426242][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.843'. [ 121.494801][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 121.500714][ T40] audit: type=1400 audit(1771026146.034:621): avc: denied { connect } for pid=10883 comm="syz.3.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.501341][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 121.518612][T10881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.522126][T10881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.669466][T10881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.673801][T10881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.792403][T10881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.796973][T10881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.806944][T10909] mkiss: ax0: crc mode is auto. [ 121.825550][ T40] audit: type=1400 audit(1771026146.354:622): avc: denied { getopt } for pid=10899 comm="syz.1.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.843614][T10921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.871125][T10927] netlink: 'syz.1.852': attribute type 30 has an invalid length. [ 121.883909][T10881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.889548][T10881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.912301][ T40] audit: type=1400 audit(1771026146.444:623): avc: denied { write } for pid=10926 comm="syz.1.852" name="file0" dev="tmpfs" ino=1256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.922090][ T40] audit: type=1400 audit(1771026146.444:624): avc: denied { open } for pid=10926 comm="syz.1.852" path="/235/file0" dev="tmpfs" ino=1256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.932193][ T40] audit: type=1400 audit(1771026146.444:625): avc: denied { ioctl } for pid=10926 comm="syz.1.852" path="/235/file0" dev="tmpfs" ino=1256 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.957263][T10970] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 121.962490][T10970] batman_adv: batadv0: Adding interface: gretap1 [ 121.964629][T10970] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.974847][T10970] batman_adv: batadv0: Interface activated: gretap1 [ 122.048791][ T6244] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.053068][ T6244] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.062860][ T40] audit: type=1400 audit(1771026146.594:626): avc: denied { append } for pid=10992 comm="syz.5.861" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.069973][ T6296] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.075094][ T6296] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.095972][ T1142] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.098785][ T1142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.116344][ T6296] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.120169][ T6296] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.187176][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.190431][T11022] bridge0: port 1(1¾x9ÿ) entered disabled state [ 122.220438][T11018] vxcan1 speed is unknown, defaulting to 1000 [ 122.314913][T11043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.377773][T11048] gretap1: entered promiscuous mode [ 122.465712][T11104] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.466478][T11103] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.484900][T11104] team0 (unregistering): Port device team_slave_0 removed [ 122.491060][T11104] team0 (unregistering): Port device team_slave_1 removed [ 122.535370][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 122.818206][ T5919] cgroup: fork rejected by pids controller in /syz3 [ 123.075910][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 123.100521][ T6296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.105804][ T6296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.219883][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.226490][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.230184][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.233935][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.238164][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.245346][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 123.255978][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.266431][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.269437][ T9] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 123.272420][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.277700][ T9] usb 6-1: config 0 descriptor?? [ 123.282499][ T6296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.287721][ T6296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.319493][T11246] vxcan1 speed is unknown, defaulting to 1000 [ 123.338229][ T5932] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 123.341930][ T5932] Bluetooth: hci2: Injecting HCI hardware error event [ 123.346096][ T5932] Bluetooth: hci2: hardware error 0x00 [ 123.381143][ T6296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.395090][ T6296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.472612][ T6296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.476649][ T6296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.484459][ T4217] usb 6-1: USB disconnect, device number 24 [ 123.598161][T11246] chnl_net:caif_netlink_parms(): no params data found [ 123.603680][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.607135][ T6296] bridge_slave_0: left allmulticast mode [ 123.608941][ T6296] bridge_slave_0: left promiscuous mode [ 123.610834][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.617548][ T6296] batman_adv: batadv0: Interface deactivated: gretap1 [ 123.690053][ T6296] batman_adv: batadv0: Removing interface: gretap1 [ 123.700283][ T6296] bond0 (unregistering): (slave geneve2): Releasing active interface [ 123.959372][ T6296] bond1 (unregistering): Released all slaves [ 123.966243][ T6296] bond2 (unregistering): Released all slaves [ 123.972962][ T6296] bond0 (unregistering): Released all slaves [ 123.979942][ T6296] bond3 (unregistering): (slave bond4): Releasing backup interface [ 123.982950][ T6296] bond3 (unregistering): Released all slaves [ 123.990836][ T6296] bond4 (unregistering): Released all slaves [ 124.099779][ T6296] : left promiscuous mode [ 124.146478][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.148827][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.151178][T11246] bridge_slave_0: entered allmulticast mode [ 124.153903][T11246] bridge_slave_0: entered promiscuous mode [ 124.157509][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.159846][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.162227][T11246] bridge_slave_1: entered allmulticast mode [ 124.165147][T11246] bridge_slave_1: entered promiscuous mode [ 124.186026][T11246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.187467][T11246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.194716][ T6296] tipc: Disabling bearer [ 124.194880][ T6296] tipc: Left network mode [ 124.227860][T11246] team0: Port device team_slave_0 added [ 124.229515][T11246] team0: Port device team_slave_1 added [ 124.241661][T11246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.241672][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.241686][T11246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.242598][T11246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.242606][T11246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.242620][T11246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.263068][T11246] hsr_slave_0: entered promiscuous mode [ 124.283852][T11246] hsr_slave_1: entered promiscuous mode [ 124.284171][T11246] debugfs: 'hsr0' already exists in 'hsr' [ 124.288270][T11246] Cannot create hsr debugfs directory [ 124.367149][ T5282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.373937][ T5282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.376782][ T5282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.378221][ T5282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.378599][ T5282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.471800][T11504] vxcan1 speed is unknown, defaulting to 1000 [ 124.709623][ T6296] hsr_slave_0: left promiscuous mode [ 124.710012][ T6296] hsr_slave_1: left promiscuous mode [ 124.710395][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.710406][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.710816][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.710826][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.716697][ T6296] veth1_macvtap: left promiscuous mode [ 124.716726][ T6296] veth0_macvtap: left allmulticast mode [ 124.716736][ T6296] veth0_macvtap: left promiscuous mode [ 124.716772][ T6296] veth1_vlan: left promiscuous mode [ 124.716798][ T6296] veth0_vlan: left promiscuous mode [ 124.854717][ T6296] team0 (unregistering): Port device team_slave_1 removed [ 124.858969][ T6296] team0 (unregistering): Port device team_slave_0 removed [ 124.903454][ T59] smc: removing ib device syz2 [ 124.964401][ T58] vxcan1 speed is unknown, defaulting to 1000 [ 124.964419][ T58] syz2: Port: 1 Link DOWN [ 125.210018][T11504] chnl_net:caif_netlink_parms(): no params data found [ 125.335524][ T5927] Bluetooth: hci0: command tx timeout [ 125.416688][ T5932] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 125.459585][T11246] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.468028][T11246] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.472479][T11246] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.506701][T11246] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.518426][T11504] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.518497][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.518591][T11504] bridge_slave_0: entered allmulticast mode [ 125.520467][T11504] bridge_slave_0: entered promiscuous mode [ 125.523077][T11504] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.523553][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.523621][T11504] bridge_slave_1: entered allmulticast mode [ 125.531976][T11504] bridge_slave_1: entered promiscuous mode [ 125.582322][T11504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.597467][T11504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.628807][T11755] No control pipe specified [ 125.631267][T11504] team0: Port device team_slave_0 added [ 125.645654][ T6296] IPVS: stop unused estimator thread 0... [ 125.648660][T11504] team0: Port device team_slave_1 added [ 125.668651][T11246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.678154][T11504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.680473][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.689062][T11504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.694162][T11504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.697090][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.705312][T11504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.730520][T11504] hsr_slave_0: entered promiscuous mode [ 125.732870][T11504] hsr_slave_1: entered promiscuous mode [ 125.735217][T11504] debugfs: 'hsr0' already exists in 'hsr' [ 125.737024][T11504] Cannot create hsr debugfs directory [ 125.757637][T11246] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.778876][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.781733][ T6244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.818043][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.821049][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.868648][ T6296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.872015][ T6296] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.964051][ T6296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.967437][ T6296] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.976584][T11504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.983992][T11504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 125.989842][T11504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 125.996341][T11504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 126.043716][T11504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.048698][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.078436][T11504] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.088376][T11246] veth0_vlan: entered promiscuous mode [ 126.104620][ T6296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.109748][ T6296] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.124177][ T6293] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.126588][ T6293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.144119][ T6293] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.146537][ T6293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.152496][T11246] veth1_vlan: entered promiscuous mode [ 126.172898][ T6296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.177187][ T6296] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.206994][T11246] veth0_macvtap: entered promiscuous mode [ 126.210918][T11246] veth1_macvtap: entered promiscuous mode [ 126.218940][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.225743][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.232808][ T6291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.236999][ T6291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.241432][ T6291] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.245712][ T6291] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.309022][ T6244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.311667][ T6244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.346546][ T6296] bridge_slave_1: left allmulticast mode [ 126.348397][ T6296] bridge_slave_1: left promiscuous mode [ 126.350304][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.354578][ T6296] bridge_slave_0: left allmulticast mode [ 126.358343][ T6296] bridge_slave_0: left promiscuous mode [ 126.360344][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.454878][ T5932] Bluetooth: hci1: command tx timeout [ 126.503307][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 126.503320][ T40] audit: type=1326 audit(1771026151.034:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11950 comm="syz.2.900" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4be539bf79 code=0x0 [ 126.559330][ T6296] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.563764][ T6296] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.567518][ T6296] .` (unregistering): Released all slaves [ 126.582832][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.585483][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.589168][T11504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.703331][T11972] overlayfs: failed to resolve './file0': -2 [ 126.760410][T11976] __nla_validate_parse: 15 callbacks suppressed [ 126.760433][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 126.770602][T11976] netlink: 52 bytes leftover after parsing attributes in process `syz.3.902'. [ 126.782661][T11504] veth0_vlan: entered promiscuous mode [ 126.796905][T11504] veth1_vlan: entered promiscuous mode [ 126.811959][T11504] veth0_macvtap: entered promiscuous mode [ 126.815931][T11504] veth1_macvtap: entered promiscuous mode [ 126.817103][ T40] audit: type=1400 audit(1771026151.354:640): avc: denied { connect } for pid=11975 comm="syz.3.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.823663][T11504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.830517][T11504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.837617][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.842191][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.846186][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.857865][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.918763][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.922467][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.952348][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.956169][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.008255][ T6296] hsr_slave_0: left promiscuous mode [ 127.010387][ T6296] hsr_slave_1: left promiscuous mode [ 127.012546][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.015389][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.018150][ T6296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.020752][ T6296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.033997][ T6296] veth1_macvtap: left promiscuous mode [ 127.038669][ T6296] veth0_macvtap: left promiscuous mode [ 127.040469][ T6296] veth1_vlan: left promiscuous mode [ 127.042186][ T6296] veth0_vlan: left promiscuous mode [ 127.255320][ T6296] team0 (unregistering): Port device team_slave_1 removed [ 127.264204][ T6296] team0 (unregistering): Port device team_slave_0 removed [ 127.272936][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.280438][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.288270][T12032] netlink: 64 bytes leftover after parsing attributes in process `syz.6.905'. [ 127.425525][ T5932] Bluetooth: hci0: command tx timeout [ 127.433215][ T40] audit: type=1400 audit(1771026151.964:641): avc: denied { watch watch_reads } for pid=12053 comm="syz.1.909" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 127.446266][ T40] audit: type=1400 audit(1771026151.984:642): avc: denied { mounton } for pid=12053 comm="syz.1.909" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 127.450866][T12082] PKCS7: Unknown OID: [4] 5.25.43204.122 [ 127.459220][T12082] PKCS7: Only support pkcs7_signedData type [ 127.516194][ T5990] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 127.563473][T12090] gfs2: error -5 reading superblock [ 127.614236][T12110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.913'. [ 127.617324][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.913'. [ 127.653445][ T40] audit: type=1400 audit(1771026152.184:643): avc: denied { map } for pid=12132 comm="syz.6.915" path="socket:[30678]" dev="sockfs" ino=30678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.674897][T12110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12110 comm=syz.1.913 [ 127.685273][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 127.692883][ T5990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.696702][ T5990] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.699572][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.704308][ T5990] usb 7-1: config 0 descriptor?? [ 127.731129][T12182] random: crng reseeded on system resumption [ 127.746565][T12186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 127.793914][ T6296] IPVS: stop unused estimator thread 0... [ 127.855902][ T4217] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 127.919336][ T5990] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.926221][T12191] Restarting kernel threads ... [ 127.932335][T12191] Done restarting kernel threads. [ 128.017522][ T4217] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 128.021215][ T4217] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 128.024781][ T4217] usb 8-1: config 0 interface 0 has no altsetting 0 [ 128.030235][ T4217] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.033096][ T4217] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.036487][ T4217] usb 8-1: Product: syz [ 128.037796][ T4217] usb 8-1: Manufacturer: syz [ 128.039258][ T4217] usb 8-1: SerialNumber: syz [ 128.050334][ T4217] usb 8-1: config 0 descriptor?? [ 128.058173][ T4217] usb 8-1: selecting invalid altsetting 0 [ 128.125583][T12039] overlay: ./file0 is not a directory [ 128.128296][T12036] overlay: ./file0 is not a directory [ 128.186485][ T5990] usb 7-1: USB disconnect, device number 8 [ 128.256732][ T24] usb 8-1: USB disconnect, device number 13 [ 128.258554][T12246] Attempt to restore checkpoint with obsolete wellknown handles [ 128.339544][T12268] i2c i2c-1: dvb_frontend_start: failed to start kthread (-4) [ 128.408741][T12287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.927'. [ 128.423165][ T40] audit: type=1400 audit(1771026152.954:644): avc: denied { associate } for pid=12284 comm="syz.1.927" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 128.430866][T12101] uprobe: syz.3.912:12101 failed to unregister, leaking uprobe [ 128.479793][ T40] audit: type=1400 audit(1771026153.014:645): avc: denied { getopt } for pid=12296 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.508452][T12301] netlink: 'syz.3.932': attribute type 10 has an invalid length. [ 128.526741][T12301] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.535457][ T5927] Bluetooth: hci1: command tx timeout [ 128.545117][T12303] syzkaller0: entered promiscuous mode [ 128.547249][T12303] syzkaller0: entered allmulticast mode [ 128.587746][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 128.591112][T12311] smc: net device bond0 applied user defined pnetid SYZ2 [ 128.593617][T12311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.933'. [ 128.600730][T12311] smc: removing net device bond0 with user defined pnetid SYZ2 [ 128.604058][T12311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.609331][T12311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.613439][T12311] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 128.624224][T12311] bond0 (unregistering): Released all slaves [ 128.645863][ T40] audit: type=1400 audit(1771026153.184:646): avc: denied { write } for pid=12310 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.722550][ T40] audit: type=1400 audit(1771026153.254:647): avc: denied { append } for pid=12321 comm="syz.2.935" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.802210][T12331] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 129.057702][T12365] netlink: 152 bytes leftover after parsing attributes in process `syz.2.943'. [ 129.062186][ T40] audit: type=1400 audit(1771026153.594:648): avc: denied { ioctl } for pid=12364 comm="syz.2.943" path="socket:[32161]" dev="sockfs" ino=32161 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 129.154764][ T4217] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 129.239850][T12388] mkiss: ax0: crc mode is auto. [ 129.314731][ T4217] usb 6-1: Using ep0 maxpacket: 16 [ 129.318952][ T4217] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.323318][ T4217] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.330782][ T4217] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.334446][ T4217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.338282][ T4217] usb 6-1: Product: syz [ 129.339680][ T4217] usb 6-1: Manufacturer: syz [ 129.341175][ T4217] usb 6-1: SerialNumber: syz [ 129.504977][ T5927] Bluetooth: hci0: command tx timeout [ 129.552350][ T4217] cdc_ncm 6-1:1.0: skipping garbage [ 129.554052][ T4217] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 129.556474][ T4217] cdc_ncm 6-1:1.0: bind() failure [ 129.561958][ T4217] usb 6-1: USB disconnect, device number 25 [ 129.702677][T12414] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.782178][T12428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.949'. [ 129.822848][T12432] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 130.164800][ T5970] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 130.268047][T12470] openvswitch: netlink: IP tunnel dst address not specified [ 130.294871][T12473] netlink: 'syz.3.956': attribute type 11 has an invalid length. [ 130.325247][T12470] 9p: Bad value for 'rfdno' [ 130.327165][ T5970] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.334696][ T5970] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.339831][ T5970] usb 7-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 130.342920][ T5970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.345872][ T5970] usb 7-1: Product: syz [ 130.347899][ T5970] usb 7-1: Manufacturer: syz [ 130.349471][ T5970] usb 7-1: SerialNumber: syz [ 130.353505][ T5970] usb 7-1: config 0 descriptor?? [ 130.402202][ T5927] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 130.615081][ T5927] Bluetooth: hci1: command tx timeout [ 130.640971][ T5970] usb 7-1: USB disconnect, device number 9 [ 130.653904][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.658209][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.744994][ T4217] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 130.932342][ T4217] usb 6-1: config 0 has no interfaces? [ 130.934763][ T4217] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 130.938672][ T4217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.945593][ T4217] usb 6-1: config 0 descriptor?? [ 130.991616][T12537] xt_CONNSECMARK: invalid mode: 0 [ 131.169683][T12484] cgroup: release_agent respecified [ 131.176115][ T1457] usb 6-1: USB disconnect, device number 26 [ 131.244786][ T34] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 131.374726][ T34] usb 11-1: device descriptor read/64, error -71 [ 131.526950][T12589] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 131.574852][ T5927] Bluetooth: hci0: command tx timeout [ 131.614970][ T34] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 131.720718][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 131.720730][ T40] audit: type=1400 audit(1771026156.254:656): avc: denied { map } for pid=12602 comm="syz.2.973" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 131.754848][ T34] usb 11-1: device descriptor read/64, error -71 [ 131.773161][T12609] __nla_validate_parse: 7 callbacks suppressed [ 131.773177][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.974'. [ 131.800875][T12614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.975'. [ 131.867093][ T34] usb usb11-port1: attempt power cycle [ 131.874975][ T4217] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 131.911011][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'. [ 131.927832][T12632] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 131.975451][ T40] audit: type=1400 audit(1771026156.514:657): avc: denied { setopt } for pid=12639 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.024802][ T4217] usb 8-1: Using ep0 maxpacket: 16 [ 132.031286][ T4217] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 132.035427][ T4217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.039117][ T4217] usb 8-1: Product: syz [ 132.040931][ T4217] usb 8-1: Manufacturer: syz [ 132.042827][ T4217] usb 8-1: SerialNumber: syz [ 132.214775][ T34] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 132.235206][ T34] usb 11-1: device descriptor read/8, error -71 [ 132.455815][ T5927] Bluetooth: hci3: command 0x2016 tx timeout [ 132.456435][ T40] audit: type=1400 audit(1771026156.994:658): avc: denied { create } for pid=12596 comm="syz.3.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 132.468440][ T40] audit: type=1400 audit(1771026157.004:659): avc: denied { sys_admin } for pid=12596 comm="syz.3.972" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 132.494797][ T34] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 132.525330][ T34] usb 11-1: device descriptor read/8, error -71 [ 132.635003][ T34] usb usb11-port1: unable to enumerate USB device [ 132.695036][ T5927] Bluetooth: hci1: command tx timeout [ 132.898504][T12643] ceph: No mds server is up or the cluster is laggy [ 132.901537][T12649] ceph: No mds server is up or the cluster is laggy [ 132.904811][ T40] audit: type=1326 audit(1771026157.434:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12639 comm="syz.2.981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4be539bf79 code=0x7fc00000 [ 132.973562][ T4217] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 133.003731][ T4217] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.009910][ T4217] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 133.013366][ T4217] usb 8-1: media controller created [ 133.027843][T12693] overlayfs: failed to resolve './file0': -2 [ 133.031266][ T4217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.038660][T12693] overlayfs: failed to resolve './file0': -2 [ 133.051856][ T4217] zl10353_read_register: readreg error (reg=127, ret==-71) [ 133.061274][ T40] audit: type=1400 audit(1771026157.594:661): avc: denied { bind } for pid=12700 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.082355][ T4217] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 133.090312][ T4217] usb 8-1: USB disconnect, device number 14 [ 133.093789][T12712] sctp: [Deprecated]: syz.2.989 (pid 12712) Use of int in max_burst socket option deprecated. [ 133.093789][T12712] Use struct sctp_assoc_value instead [ 133.094832][T12720] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 133.185722][T12734] netlink: 'syz.1.999': attribute type 29 has an invalid length. [ 133.186292][T12732] comedi comedi4: bad chanlist[0]=0x00008004 chan=32772 range length=2 [ 133.255278][T12741] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 133.347728][T12763] openvswitch: netlink: EtherType 50a is less than min 600 [ 133.376929][T12767] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 133.418171][T12776] macsec2: entered promiscuous mode [ 133.419922][T12776] bridge0: entered promiscuous mode [ 133.424430][T12776] tmpfs: Bad value for 'mpol' [ 133.473323][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 133.478701][ T40] audit: type=1400 audit(1771026158.014:662): avc: denied { execmod } for pid=12780 comm="syz.3.1003" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 133.490170][ T40] audit: type=1400 audit(1771026158.014:663): avc: denied { setopt } for pid=12780 comm="syz.3.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.498641][ T40] audit: type=1400 audit(1771026158.014:664): avc: denied { ioctl } for pid=12780 comm="syz.3.1003" path="socket:[34308]" dev="sockfs" ino=34308 ioctlcmd=0x4bfb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.557887][ T40] audit: type=1400 audit(1771026158.094:665): avc: denied { append } for pid=12791 comm="syz.3.1005" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 133.607756][T12800] program syz.3.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.691393][T12808] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 133.771713][T12828] IPVS: Unknown mcast interface: netpci0 [ 133.774151][T12828] netlink: 'syz.2.1011': attribute type 15 has an invalid length. [ 134.332568][T12863] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 134.385059][T12866] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1021'. [ 134.393651][T12869] netlink: 'syz.2.1022': attribute type 32 has an invalid length. [ 134.775661][T12917] netlink: 'syz.1.1026': attribute type 11 has an invalid length. [ 135.189576][T12955] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1035' sets config #0 [ 135.222575][T12960] ================================================================== [ 135.225217][T12960] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 135.227667][T12960] Read of size 8 at addr ffff88802e8ec818 by task syz.1.1036/12960 [ 135.230833][T12960] [ 135.233067][T12960] CPU: 2 UID: 0 PID: 12960 Comm: syz.1.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.233092][T12960] Tainted: [L]=SOFTLOCKUP [ 135.233097][T12960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.233107][T12960] Call Trace: [ 135.233114][T12960] [ 135.233120][T12960] dump_stack_lvl+0x100/0x190 [ 135.233151][T12960] print_report+0x156/0x4c9 [ 135.233176][T12960] ? __virt_addr_valid+0x81/0x620 [ 135.233197][T12960] ? __phys_addr+0xe8/0x180 [ 135.233220][T12960] ? dvb_device_open+0x33f/0x3b0 [ 135.233245][T12960] kasan_report+0xdf/0x1a0 [ 135.233267][T12960] ? dvb_device_open+0x33f/0x3b0 [ 135.233303][T12960] ? __pfx_dvb_device_open+0x10/0x10 [ 135.233333][T12960] dvb_device_open+0x33f/0x3b0 [ 135.233358][T12960] ? __pfx_dvb_device_open+0x10/0x10 [ 135.233381][T12960] chrdev_open+0x234/0x6a0 [ 135.233405][T12960] ? __pfx_chrdev_open+0x10/0x10 [ 135.233429][T12960] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 135.233460][T12960] do_dentry_open+0x6d8/0x1660 [ 135.233483][T12960] ? __pfx_chrdev_open+0x10/0x10 [ 135.233509][T12960] vfs_open+0x82/0x3f0 [ 135.233536][T12960] path_openat+0x208c/0x31a0 [ 135.233561][T12960] ? __pfx_path_openat+0x10/0x10 [ 135.233581][T12960] do_file_open+0x20e/0x430 [ 135.233596][T12960] ? __pfx_do_file_open+0x10/0x10 [ 135.233616][T12960] ? alloc_fd+0x476/0x790 [ 135.233632][T12960] ? do_getname+0x191/0x390 [ 135.233643][T12960] do_sys_openat2+0x10d/0x1e0 [ 135.233660][T12960] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.233680][T12960] __x64_sys_openat+0x12d/0x210 [ 135.233697][T12960] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.233716][T12960] ? do_user_addr_fault+0x8d6/0x12f0 [ 135.233728][T12960] do_syscall_64+0x106/0xf80 [ 135.233743][T12960] ? clear_bhb_loop+0x40/0x90 [ 135.233757][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.233769][T12960] RIP: 0033:0x7f4c5695c84e [ 135.233779][T12960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.233791][T12960] RSP: 002b:00007f4c5779eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.233803][T12960] RAX: ffffffffffffffda RBX: 00007f4c5779f6c0 RCX: 00007f4c5695c84e [ 135.233810][T12960] RDX: 0000000000101000 RSI: 00007f4c5779ec00 RDI: ffffffffffffff9c [ 135.233817][T12960] RBP: 00007f4c5779ec00 R08: 0000000000000000 R09: 0000000000000000 [ 135.233824][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 135.233831][T12960] R13: 00007f4c56c16038 R14: 00007f4c56c15fa0 R15: 00007ffe98a0fc38 [ 135.233841][T12960] [ 135.233845][T12960] [ 135.318783][T12960] Allocated by task 6101: [ 135.320139][T12960] kasan_save_stack+0x30/0x50 [ 135.321755][T12960] kasan_save_track+0x14/0x30 [ 135.323338][T12960] __kasan_kmalloc+0xaa/0xb0 [ 135.324787][T12960] __kmalloc_noprof+0x301/0x850 [ 135.326303][T12960] security_inode_init_security+0x113/0x370 [ 135.328159][T12960] shmem_mknod+0x229/0x3b0 [ 135.329580][T12960] lookup_open.isra.0+0xc47/0x11b0 [ 135.331278][T12960] path_openat+0x2291/0x31a0 [ 135.332789][T12960] do_file_open+0x389/0x430 [ 135.334272][T12960] do_sys_openat2+0x10d/0x1e0 [ 135.335722][T12960] __x64_sys_openat+0x12d/0x210 [ 135.337289][T12960] do_syscall_64+0x106/0xf80 [ 135.338754][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.340548][T12960] [ 135.341376][T12960] Freed by task 6101: [ 135.342733][T12960] kasan_save_stack+0x30/0x50 [ 135.344242][T12960] kasan_save_track+0x14/0x30 [ 135.345727][T12960] kasan_save_free_info+0x3b/0x70 [ 135.347327][T12960] __kasan_slab_free+0x5f/0x80 [ 135.348747][T12960] kfree+0x1aa/0x670 [ 135.350005][T12960] security_inode_init_security+0x2bf/0x370 [ 135.351930][T12960] shmem_mknod+0x229/0x3b0 [ 135.353346][T12960] lookup_open.isra.0+0xc47/0x11b0 [ 135.354970][T12960] path_openat+0x2291/0x31a0 [ 135.356436][T12960] do_file_open+0x389/0x430 [ 135.357873][T12960] do_sys_openat2+0x10d/0x1e0 [ 135.359371][T12960] __x64_sys_openat+0x12d/0x210 [ 135.360945][T12960] do_syscall_64+0x106/0xf80 [ 135.362501][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.364356][T12960] [ 135.365106][T12960] The buggy address belongs to the object at ffff88802e8ec800 [ 135.365106][T12960] which belongs to the cache kmalloc-256 of size 256 [ 135.369502][T12960] The buggy address is located 24 bytes inside of [ 135.369502][T12960] freed 256-byte region [ffff88802e8ec800, ffff88802e8ec900) [ 135.373748][T12960] [ 135.374538][T12960] The buggy address belongs to the physical page: [ 135.376554][T12960] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e8ec [ 135.379278][T12960] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.381929][T12960] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 135.384324][T12960] page_type: f5(slab) [ 135.385593][T12960] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 135.388317][T12960] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 135.391024][T12960] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 135.393728][T12960] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 135.396630][T12960] head: 00fff00000000001 ffffea0000ba3b01 00000000ffffffff 00000000ffffffff [ 135.400293][T12960] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 135.403954][T12960] page dumped because: kasan: bad access detected [ 135.406647][T12960] page_owner tracks the page as allocated [ 135.409041][T12960] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 21040477178, free_ts 0 [ 135.415827][T12960] post_alloc_hook+0x153/0x170 [ 135.417353][T12960] get_page_from_freelist+0x111d/0x3140 [ 135.419113][T12960] __alloc_frozen_pages_noprof+0x27d/0x2ae0 [ 135.421000][T12960] new_slab+0xa6/0x6e0 [ 135.422427][T12960] refill_objects+0x26b/0x400 [ 135.423983][T12960] __pcs_replace_empty_main+0x19f/0x600 [ 135.426070][T12960] __kmalloc_cache_noprof+0x493/0x6f0 [ 135.427732][T12960] bus_add_driver+0x92/0x5b0 [ 135.429202][T12960] driver_register+0x1e2/0x360 [ 135.430747][T12960] usb_register_driver+0x21c/0x3e0 [ 135.432594][T12960] do_one_initcall+0x11d/0x690 [ 135.434120][T12960] kernel_init_freeable+0x6e5/0x7a0 [ 135.435776][T12960] kernel_init+0x1f/0x1e0 [ 135.437136][T12960] ret_from_fork+0x754/0xd80 [ 135.438612][T12960] ret_from_fork_asm+0x1a/0x30 [ 135.440063][T12960] page_owner free stack trace missing [ 135.441750][T12960] [ 135.442543][T12960] Memory state around the buggy address: [ 135.444293][T12960] ffff88802e8ec700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.446779][T12960] ffff88802e8ec780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.449258][T12960] >ffff88802e8ec800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.451874][T12960] ^ [ 135.453728][T12960] ffff88802e8ec880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.456155][T12960] ffff88802e8ec900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 135.458574][T12960] ================================================================== [ 135.462422][T12960] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.464919][T12960] CPU: 2 UID: 0 PID: 12960 Comm: syz.1.1036 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.468360][T12960] Tainted: [L]=SOFTLOCKUP [ 135.469740][T12960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 135.473707][T12960] Call Trace: [ 135.474977][T12960] [ 135.475944][T12960] dump_stack_lvl+0x100/0x190 [ 135.477424][T12960] vpanic+0x552/0x970 [ 135.478701][T12960] ? __pfx_vpanic+0x10/0x10 [ 135.480270][T12960] ? dvb_device_open+0x33f/0x3b0 [ 135.481967][T12960] panic+0xd1/0xe0 [ 135.483204][T12960] ? __pfx_panic+0x10/0x10 [ 135.484662][T12960] ? dvb_device_open+0x33f/0x3b0 [ 135.486254][T12960] ? preempt_schedule_common+0x42/0xc0 [ 135.488190][T12960] check_panic_on_warn.cold+0x19/0x34 [ 135.490363][T12960] end_report.part.0+0x3a/0x90 [ 135.492294][T12960] kasan_report.cold+0xe/0x18 [ 135.494185][T12960] ? dvb_device_open+0x33f/0x3b0 [ 135.496149][T12960] ? __pfx_dvb_device_open+0x10/0x10 [ 135.498267][T12960] dvb_device_open+0x33f/0x3b0 [ 135.499833][T12960] ? __pfx_dvb_device_open+0x10/0x10 [ 135.501555][T12960] chrdev_open+0x234/0x6a0 [ 135.503036][T12960] ? __pfx_chrdev_open+0x10/0x10 [ 135.504607][T12960] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 135.506655][T12960] do_dentry_open+0x6d8/0x1660 [ 135.508178][T12960] ? __pfx_chrdev_open+0x10/0x10 [ 135.509748][T12960] vfs_open+0x82/0x3f0 [ 135.511099][T12960] path_openat+0x208c/0x31a0 [ 135.512638][T12960] ? __pfx_path_openat+0x10/0x10 [ 135.514239][T12960] do_file_open+0x20e/0x430 [ 135.515722][T12960] ? __pfx_do_file_open+0x10/0x10 [ 135.517324][T12960] ? alloc_fd+0x476/0x790 [ 135.518711][T12960] ? do_getname+0x191/0x390 [ 135.520203][T12960] do_sys_openat2+0x10d/0x1e0 [ 135.521768][T12960] ? __pfx_do_sys_openat2+0x10/0x10 [ 135.523403][T12960] __x64_sys_openat+0x12d/0x210 [ 135.524907][T12960] ? __pfx___x64_sys_openat+0x10/0x10 [ 135.526602][T12960] ? do_user_addr_fault+0x8d6/0x12f0 [ 135.528235][T12960] do_syscall_64+0x106/0xf80 [ 135.529667][T12960] ? clear_bhb_loop+0x40/0x90 [ 135.531164][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.533045][T12960] RIP: 0033:0x7f4c5695c84e [ 135.534486][T12960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.540541][T12960] RSP: 002b:00007f4c5779eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.543673][T12960] RAX: ffffffffffffffda RBX: 00007f4c5779f6c0 RCX: 00007f4c5695c84e [ 135.546851][T12960] RDX: 0000000000101000 RSI: 00007f4c5779ec00 RDI: ffffffffffffff9c [ 135.550040][T12960] RBP: 00007f4c5779ec00 R08: 0000000000000000 R09: 0000000000000000 [ 135.552966][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 135.555552][T12960] R13: 00007f4c56c16038 R14: 00007f4c56c15fa0 R15: 00007ffe98a0fc38 [ 135.558087][T12960] [ 135.559850][T12960] Kernel Offset: disabled [ 135.561241][T12960] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:42:39 Registers: info registers vcpu 0 CPU#0 RAX=00000000001c4eab RBX=ffffffff8e4975c0 RCX=ffffffff8b80ac75 RDX=0000000000000000 RSI=ffffffff8de6b9c0 RDI=ffffffff8c1adaa0 RBP=0000000000000000 RSP=ffffffff8e407e00 R8 =0000000000000001 R9 =ffffed100d486755 R10=ffff88806a433aab R11=0000000000000000 R12=fffffbfff1c92eb8 R13=0000000000000000 R14=ffffffff90d8d0d0 R15=0000000000000000 RIP=ffffffff8b8095df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d638b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4c56c17dac CR3=0000000039a34000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccdb14d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5e93c146 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5e93c146 00007fff5e93c14c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccda432e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccda432e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccda432fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fccda432e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000016bdd1 RBX=ffff88801e6ca480 RCX=ffffffff8b80ac75 RDX=0000000000000000 RSI=ffffffff8de6b9c0 RDI=ffffffff8c1adaa0 RBP=0000000000000001 RSP=ffffc90000177df0 R8 =0000000000000001 R9 =ffffed100d4a6755 R10=ffff88806a533aab R11=0000000000000000 R12=ffffed1003cd9490 R13=0000000000000001 R14=ffffffff90d8d0d0 R15=0000000000000000 RIP=ffffffff8b8095df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d648b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056109ca00f40 CR3=000000003749e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcabb7ead20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555845c4a98 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00060072f00180c0 8010000010000280 0406017792002364 6e65746e6f72662f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff0407c0 0320080007b80300 080007b0030fffff ffffffff0407a003 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0407f0030008 0007e80301080007 e00300080007d803 00080007d0030fff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0102a81000068004 0a1000060102e000 080008a003000800 0898032008000890 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030fffffffffffff 040880030fffffff ffffff0407f00300 080007e803010800 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 07e00300080007d8 0300080007d0030f ffffffffffff0407 c00320080007b803 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007b0030fff ffffffffff0407a0 0310080007980301 0800079003060800 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856f4785 RDI=ffffffff9b45a780 RBP=ffffffff9b45a740 RSP=ffffc900037bf2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000030 R14=0000000000000010 R15=ffffffff856f4720 RIP=ffffffff856f47af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4c5779f6c0 ffffffff 00c00000 GS =0000 ffff8880d658b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4c56985640 CR3=000000003a5a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000001000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98a10126 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98a10126 00007ffe98a1012c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c56a32e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c56a32e86 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c56a32fea ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c56a32e78 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c56bea498 00007f4c56bea468 00007f4c56bea4a0 00007f4c56bea480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=ffffea0001266c80 RCX=ffffffff825e9739 RDX=ffff88802260c900 RSI=ffffffff825e9759 RDI=ffff88802260c900 RBP=ffffea0001266c80 RSP=ffffc90003adf520 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=ffff8880362d92c0 R14=ffffea0001266c80 R15=0000000000000000 RIP=ffffffff8207138b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d668b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000045f4a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fefef800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ed27aa89dd86ca9 b225cf7b219da631 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 820d2523c62b37c2 4d4da8b9bd170338 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f5f80940b5e9cbb6 30704a285cc0092d ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4d863f8383312384 d0abc898d4c4abdf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 160000003c000000 530dcd26530de4a4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 880000007a000000 300000009e000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 530d6275530d5bae ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000e33530e5019 4c000000530d3ba2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0feb30d1b13ea0d 7573dffc48b7ac29 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6cfd4466a1478b33 8f4d672bf0d4c282 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000009 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000324 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000009 0000000000000000 0000000000000000 0000000000000324 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000