last executing test programs: 27.696696664s ago: executing program 2 (id=361): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) write$6lowpan_control(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x8, 0x10000, {{0x15, 0x4, 0x2, 0x5, 0x54, 0x67, 0x0, 0x0, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, {[@timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}]}, @noop, @end, @lsrr={0x83, 0x27, 0xb2, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @broadcast, @broadcast, @rand_addr=0x64010100, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, @local]}, @rr={0x7, 0xb, 0x9f, [@rand_addr=0x64010102, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x100, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) 27.696139435s ago: executing program 2 (id=362): memfd_create(&(0x7f0000000a40)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98y\xcb|*\x91\x06\x84\xa8\xbd\v\xd6t?EH\xd7`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\r\xaa\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1b\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01\xaf,\x06\x9e\xabo\x8a\xfc\xe2M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a\x90\x16\x87\xa4\xaa\xcan\x82\xd4\xe6Z\xb4\v\xdb\x93m\xb5>Y\xd1\xb5Q\'\xe6;\xc0\xc1\xad\xb7k\xecN\xfe]\xc8\x0fGr[p/\x85\xf39\x04\x11\xbe\xd9\xb1\xdc\x8e\x81}b\xb1\xc9\x1e\xff\x80\x89\xae\r\x17\x1e9Su\xa8\xa2^\x14\xb1^O\xdf\xff\xf8\xca\x80\x8f:,\x83\x81G\x8bm16j\x8dAY\xe4X\xaa@\xffK8\x1a\xe4\xdd`\x11\xce\x90\x16<+\xf1\xd9p\xd5\x0f\xef\xe0\x12\x17L\xf7w\xef\xfe\xc0\xf6|\xe11\xcb\xf4\xfc\x8e)\xa6\xa1R\xebz+)\f)\xe2y\xb4\x0e\xe8\x8b#\x1b\xe1\x80\xa3\x7f=\xbe\xb4\xb3h\xa4\xf1+\n\x8045S\xfft\xbe\x87>\x88\xab\xa6\xd8\xe9\x16%\x84\x03\xcf\x95i\x8a\xe3&a\xde\x9a>\xb1Qa\xaf\xa23w\xa6\xd9\x1c\xccO\xccA\xb3e\xc6y<\x17\xbePi\xad\xc0\v\xea\xef\x06\xc9\xcdC$\x1a', 0x3) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) (async) r1 = memfd_create(0x0, 0x3) ftruncate(r1, 0xffff) (async) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x1000}) fchown(r2, 0x0, 0x0) (async) fchown(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000004480), &(0x7f0000004540)=0x8) (async) r5 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) shutdown(r3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000100)={0x0, 'veth1_to_bond\x00', {0x3}, 0x9}) (async) close(0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) shutdown(0xffffffffffffffff, 0x1) (async) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 27.630850436s ago: executing program 2 (id=363): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e6576650000060005004e23000004000600"], 0x40}}, 0x0) 27.629794516s ago: executing program 2 (id=364): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) (async) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x13f364f3, {0xf92b, 0x7, 0x0, '\x00', {0x200, 0x2, 0x2, 0x8, 0x0, r3, 0x2000, '\x00', 0x1, 0x5, 0x100000000, 0x2, {0x6, 0x6}, {0x20000000000006, 0x2}, {0x6, 0xc}, {0x8, 0x809fe}, 0x8000008, 0x5, 0xf88e, 0x85}}}}) (async) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2}, 0x50) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x24020800) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x10160, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000b00)={"c86780218d5cd43fb2b8ba3723bb8b6a28cbbac75f8ae356c82e5cf4f1bebf786fb81a3fd5bf9d2b21cb1d4302dd23477a4d74f7d6ba39cbf589e02d6cc4b53599c3588793f1d1aac6f97c69ff3ed357e7591fa081337f55679555cf714d1d1ae2d65af9617ab93ed37267f943391e718fa6d02f266033cd1562896781938aa0a10f422a4227a37243f32abfd6f5a25faa04211ee846815b8885e0508a7861ccb519f5d2b2ce4c1013556d8e001eb33299429a187727752ab949be04d7b14261d6f51420b5e27c3552cb3527f3f79860a3de1a20089b520cac7e025a5f2070189114c83cf1672f5ebfdc5bd4c34d98dd4337f3e66dfa417306f729ae846f3a63f939e8e3e56b4291b112ab1f001eb8ddc851b09cb3321e92af3bdef4229c6db1a150c5e0128ec2c4fa5b207ce78271739d738356ff8b1d5fb61e36e8df271d8b4235173d32ba9a09979fecb385c09697bd6c9d142673c49b423a58d72d10cfcaed6ee6b63dac513f5d580e9e33df1710a2893bd84e18ad40d8eaa52a0c2e0d808de377a4e293a989127fbea3590f19ea00256a81b092d5455352ce59c8d38f8590c8a0d903317563e8ba31496dc4e2386415f1f9ca62a6a8d226e463e323c39e96a8cf9fb63d421bdc7e0bffbbc7e0f14b8c9e7d0783a3f01210e49249ed9c7173f0cb978ba9422d45a1478666aed4fece7782613959abd0df2b05c215250998a58706d38d7ac5904b499ad9fe27c3099e1303e94d6b8de8e3f9f83354f4051e1886d6a2483fc430bf0c40fbd00e5bf5c5c1e4f6da5034522c0ba75bdf2edaa835ddd42e957471462e9dfb834048d5ccafff2372a3750d6b86cc7186f8d75e5fff3d8d2b70fab37654fd717c92b87af796a73546412102196eb94c005cf35887c8bcc81098ec43cf0cf52da708307588ce01db4d5f1b5e9f13f2ac2a680e44b3ae59acfd72813c9b3fd0bbcd979c2a77deb069220d8387ddf83e8aa2968bdec40ebe0f537484a07a1b3a1f279c0294524567d7f5ffe90b587e65e68c93456882008db7e1a5abf5e6e33cd0bb88eb4c4775940eb3dd0d05cab225f2d2ffc87b8917c44a35308669be264cb906e0c857a2db409f7dfa02a47ed90a4e728b418899ffb334b9cbc9a0e0b31920ec2bed54a8fd32a6df3e9b4c71aec166a01c4026ec098efed55e09aef42e88e06ba9770b1edf28c44128d6e8773d584b7ff27bacce0598e308dde506bf7e32ec71a5b0b526b0b0d9415d8e8c62b233f19418ff691c485b8848d403e5fc758f353483ce66f5fa4c13c89cb54bf9ee43de0dcf25bcb7bee53f0e08f925f63effa632ebfea6011f4b6dd371361d7ed697a7e8dd666718e5c567a7ce5ec3e43507dcbd82ae9b814e4a965e6b22c57964c1642c56aa832236bd0bba89a9721dd73d093f9bad3069a76b0e68737af14938b295998e1870dd"}) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000300)={"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"}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r8) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r10, 0x5a11145b0f431f0b, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x24009000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000700)={@mcast2, 0x0}, &(0x7f0000000740)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@newchain={0x3c, 0x64, 0x552e479393d6cfd4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff0, 0x6}, {0xa, 0x5}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x4, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x100000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x2f, r0}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) 27.575239574s ago: executing program 2 (id=366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd70eee34d5000fddbdf256d0000000c00990001800000d24afd67e4"], 0x20}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000000) (async) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000006}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (rerun: 64) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (rerun: 64) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) (async) dup(r1) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002800000000002c9078ad1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x64, 0x0, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x3}) (async, rerun: 64) select(0x40, &(0x7f0000000240)={0x5, 0x9, 0x3, 0x7, 0x9, 0xa, 0x7, 0x2}, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400000000000) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x100, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfd}, {0x20000, 0xfffe, 0x0, 0x0, 0x5, 0x0, 0x34, 0x0, 0x6, 0x62, 0x0, 0x0, 0x16}]}) 27.520760703s ago: executing program 2 (id=368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6711, 0x7db3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x28, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r5, 0x4c01) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYBLOB='6\x00']) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt(0xffffffffffffffff, 0x3d, 0x7a9f, &(0x7f0000001080)=""/132, &(0x7f0000001140)=0x84) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x6711, 0x7db3, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x28, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) (async) creat(&(0x7f0000000040)='./file0\x00', 0x140) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$LOOP_CLR_FD(r5, 0x4c01) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYBLOB='6\x00']) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt(0xffffffffffffffff, 0x3d, 0x7a9f, &(0x7f0000001080)=""/132, &(0x7f0000001140)=0x84) (async) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) 12.445821271s ago: executing program 32 (id=368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6711, 0x7db3, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x28, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) creat(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r5, 0x4c01) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYBLOB='6\x00']) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt(0xffffffffffffffff, 0x3d, 0x7a9f, &(0x7f0000001080)=""/132, &(0x7f0000001140)=0x84) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) (async) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r1, 0x6711, 0x7db3, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x28, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) (async) creat(&(0x7f0000000040)='./file0\x00', 0x140) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) ioctl$LOOP_CLR_FD(r5, 0x4c01) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYBLOB='6\x00']) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt(0xffffffffffffffff, 0x3d, 0x7a9f, &(0x7f0000001080)=""/132, &(0x7f0000001140)=0x84) (async) getsockopt$bt_hci(r7, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) (async) 12.328719854s ago: executing program 3 (id=547): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/240, 0xf0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6(0xa, 0x6, 0x401) connect$inet6(r2, &(0x7f0000001080)={0xa, 0x4e24, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0xff9f, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6(0xa, 0xa, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x8}, 0x8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/3465], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r6, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r7, r7) r8 = syz_clone(0x20340000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f00000000c0)='personality\x00') readv(r9, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) socket$inet(0x2, 0x3, 0x1) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc7", 0x6}], 0x1) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d160b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000040)=0x401) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000137d700940002", "c0b6e921074739d8fc7ddf972d00", "edbe1eae", "bb10000000000001"}, 0x28) ppoll(&(0x7f0000000100)=[{r1, 0x40}], 0x1, &(0x7f0000000180), 0x0, 0x0) 12.200657077s ago: executing program 3 (id=549): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f00000000c0)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r1, 0x9) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x65c, 0x80000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x9, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0x20, 0x0, 0x7, 0xe5, 0x20, 0x7, 0x4, 0x4, 0x41, 0x3, 0x58, 0x4, 0x7, 0x4, 0x7f}}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r10, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) chdir(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[], [{@dont_hash}, {@fowner_lt={'fowner<', r6}}, {@euid_lt={'euid<', r7}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@fowner_lt={'fowner<', r6}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 12.069972026s ago: executing program 3 (id=550): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x280) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000140)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x800, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x400) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000400)={0x2, 0x1efffffe, 0x100}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) r5 = inotify_init1(0x800) r6 = fcntl$dupfd(r5, 0x406, r1) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000), 0x3) socket$kcm(0x10, 0x7, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r10, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x102, 0x5, 0x2, 0x800, 0x80000001, '\x00', '\x00\x00\x00@', "06000008", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000002000002400", "0000000000000000001000"]}) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280050001003a00000014000180082c01000000000008000200000000000c0019800800020099080004"], 0x44}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) setsockopt$sock_int(r8, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) recvmmsg(r7, &(0x7f00000082c0)=[{{0x0, 0x0, 0x0}, 0x66167995}], 0x1, 0x40010000, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) 12.020277466s ago: executing program 3 (id=551): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5ea, 0x163d01) syz_open_dev$usbmon(0x0, 0x0, 0x4582) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) write$UHID_INPUT2(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0xf7}, @val={0x2, 0x1, 0x80, 0x8, 0x3, 0x101}, @x25={0x0, 0x0, 0x9, "ad8e834cedc3d91688572ce4e9221d93e0f9d8ce775063ac17f60831cd5150fbf5fc92e8ef45a20d26309d967b0b2a4c78e4f68355243fb07cccdee0c895892c7b57aad0b0598dcb8e13b0784ae0c7e39bb79e110f12461db672e0ada5aaa520b0dc56fed28372a9ee3cadd0fc394156007faf22766382a44b98eb573d"}}, 0x8e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000300), &(0x7f00000003c0)=0x80) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="c021", 0x2}], 0x1, 0xfffffffc, 0x3) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000000)={0xc223, 0x3}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x7, @mcast2, 0x9}, 0x1c) 11.738868755s ago: executing program 3 (id=555): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) 11.60020397s ago: executing program 3 (id=556): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x304, r0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff49c}]}, @NL802154_ATTR_SEC_DEVKEY={0x13c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2a80406a}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd23}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x5}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000006}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) timer_delete(0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000002700)='fd/3\x00') tkill(r2, 0x16) (async) ptrace(0x11, r2) (async) close(r3) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000002900)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xf8, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x21}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x27a}, @IPVS_CMD_ATTR_SERVICE={0x84, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) io_setup(0x2, &(0x7f0000002940)=0x0) io_pgetevents(r5, 0x8, 0x4, &(0x7f0000002980)=[{}, {}, {}, {}], &(0x7f0000002a00)={0x0, 0x989680}, &(0x7f0000002a80)={&(0x7f0000002a40)={[0x100000000]}, 0x8}) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000002b00)={0x4, &(0x7f0000002ac0)=[{0x1, 0x2, 0x2, 0xd5}, {0x174, 0xfc, 0x8, 0xe135}, {0x3a, 0x1, 0x15, 0xca3}, {0x5, 0x9, 0x3, 0x2}]}, 0x10) ptrace(0x10, r2) (async) r6 = dup2(r3, r1) (async) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000002b80)={0x0, 0xe8}, &(0x7f0000002bc0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000002c00)={r8, 0x5}, 0x8) (async) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000002c40), 0x1001) (async) r9 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r9) (async) futex(&(0x7f0000002c80), 0x1, 0x1, &(0x7f0000002cc0)={0x0, 0x989680}, &(0x7f0000002d00)=0x2, 0x1) r10 = openat(0xffffffffffffffff, &(0x7f0000002d40)='./file0\x00', 0x27c201, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000002d80)={r8, 0xbbe, 0xe80, 0x4d7b, 0x5, 0x7ff, 0x4, 0x9, {r8, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0x243, 0x10001, 0x1, 0x7}}, &(0x7f0000002e40)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000002e80)={r11, 0x1, 0x7f, 0x800}, &(0x7f0000002ec0)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002fc0)={'syztnl0\x00', &(0x7f0000002f40)={'ip6gre0\x00', 0x0, 0x2f, 0x7c, 0x4, 0xb17, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x700, 0x5, 0x9}}) sendmsg$nl_route_sched(r7, &(0x7f0000003240)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003200)={&(0x7f0000003000)=@delqdisc={0x1cc, 0x25, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff2, 0x2}, {0xc, 0xb}, {0xb, 0x2}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x9, "ac54e34d27c65a4a4cc24b968f216411"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x58, 0x1}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x91}}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xd9, 0xbd03, 0x4, 0x0, 0xb, 0x8, 0x8}}, {0x14, 0x2, [0xfff, 0xff, 0x8, 0x4, 0x1, 0x9, 0x0, 0xa4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x200, 0x2, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x2, [0xc3c, 0x660]}}, {{0x1c, 0x1, {0x8, 0x8, 0x0, 0x7, 0x1, 0xaad6, 0xffffffff, 0x9}}, {0x16, 0x2, [0x3, 0x7, 0x3, 0xb57, 0x3, 0x0, 0x5, 0x8, 0x5]}}, {{0x1c, 0x1, {0xfb, 0xfe, 0x3ff, 0x0, 0x1, 0x40, 0x9}}, {0x4}}, {{0x1c, 0x1, {0xf, 0x2, 0x3, 0x1, 0x0, 0x10000, 0x0, 0x9}}, {0x16, 0x2, [0xfff9, 0x4, 0x3ff, 0x0, 0x1000, 0x7, 0x100, 0x80, 0x7]}}, {{0x1c, 0x1, {0xd7, 0x40, 0x3, 0x4, 0x0, 0x87ae, 0x3, 0x2}}, {0x8, 0x2, [0x1000, 0xf37]}}, {{0x1c, 0x1, {0x7, 0xbb, 0x9, 0x7ff, 0x1, 0xfff, 0x9, 0x2}}, {0x8, 0x2, [0xf800, 0x1]}}, {{0x1c, 0x1, {0x1, 0x10, 0x7, 0x2, 0x1, 0x6, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x0, 0x200, 0xc5, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0x40}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) 11.567189474s ago: executing program 33 (id=556): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x304, r0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x78, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff49c}]}, @NL802154_ATTR_SEC_DEVKEY={0x13c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2a80406a}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd23}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x5}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000006}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) timer_delete(0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(r2, &(0x7f0000002700)='fd/3\x00') tkill(r2, 0x16) (async) ptrace(0x11, r2) (async) close(r3) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000002900)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xf8, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x21}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x27a}, @IPVS_CMD_ATTR_SERVICE={0x84, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc0}, 0x10) (async) io_setup(0x2, &(0x7f0000002940)=0x0) io_pgetevents(r5, 0x8, 0x4, &(0x7f0000002980)=[{}, {}, {}, {}], &(0x7f0000002a00)={0x0, 0x989680}, &(0x7f0000002a80)={&(0x7f0000002a40)={[0x100000000]}, 0x8}) (async) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000002b00)={0x4, &(0x7f0000002ac0)=[{0x1, 0x2, 0x2, 0xd5}, {0x174, 0xfc, 0x8, 0xe135}, {0x3a, 0x1, 0x15, 0xca3}, {0x5, 0x9, 0x3, 0x2}]}, 0x10) ptrace(0x10, r2) (async) r6 = dup2(r3, r1) (async) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000002b80)={0x0, 0xe8}, &(0x7f0000002bc0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000002c00)={r8, 0x5}, 0x8) (async) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000002c40), 0x1001) (async) r9 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmdt(r9) (async) futex(&(0x7f0000002c80), 0x1, 0x1, &(0x7f0000002cc0)={0x0, 0x989680}, &(0x7f0000002d00)=0x2, 0x1) r10 = openat(0xffffffffffffffff, &(0x7f0000002d40)='./file0\x00', 0x27c201, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000002d80)={r8, 0xbbe, 0xe80, 0x4d7b, 0x5, 0x7ff, 0x4, 0x9, {r8, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0x243, 0x10001, 0x1, 0x7}}, &(0x7f0000002e40)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000002e80)={r11, 0x1, 0x7f, 0x800}, &(0x7f0000002ec0)=0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000002fc0)={'syztnl0\x00', &(0x7f0000002f40)={'ip6gre0\x00', 0x0, 0x2f, 0x7c, 0x4, 0xb17, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x700, 0x5, 0x9}}) sendmsg$nl_route_sched(r7, &(0x7f0000003240)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003200)={&(0x7f0000003000)=@delqdisc={0x1cc, 0x25, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff2, 0x2}, {0xc, 0xb}, {0xb, 0x2}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x9, "ac54e34d27c65a4a4cc24b968f216411"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x58, 0x1}}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x91}}}, @TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xd9, 0xbd03, 0x4, 0x0, 0xb, 0x8, 0x8}}, {0x14, 0x2, [0xfff, 0xff, 0x8, 0x4, 0x1, 0x9, 0x0, 0xa4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x200, 0x2, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x2, [0xc3c, 0x660]}}, {{0x1c, 0x1, {0x8, 0x8, 0x0, 0x7, 0x1, 0xaad6, 0xffffffff, 0x9}}, {0x16, 0x2, [0x3, 0x7, 0x3, 0xb57, 0x3, 0x0, 0x5, 0x8, 0x5]}}, {{0x1c, 0x1, {0xfb, 0xfe, 0x3ff, 0x0, 0x1, 0x40, 0x9}}, {0x4}}, {{0x1c, 0x1, {0xf, 0x2, 0x3, 0x1, 0x0, 0x10000, 0x0, 0x9}}, {0x16, 0x2, [0xfff9, 0x4, 0x3ff, 0x0, 0x1000, 0x7, 0x100, 0x80, 0x7]}}, {{0x1c, 0x1, {0xd7, 0x40, 0x3, 0x4, 0x0, 0x87ae, 0x3, 0x2}}, {0x8, 0x2, [0x1000, 0xf37]}}, {{0x1c, 0x1, {0x7, 0xbb, 0x9, 0x7ff, 0x1, 0xfff, 0x9, 0x2}}, {0x8, 0x2, [0xf800, 0x1]}}, {{0x1c, 0x1, {0x1, 0x10, 0x7, 0x2, 0x1, 0x6, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x0, 0x200, 0xc5, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0x40}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40800}, 0x4004) 3.208987826s ago: executing program 4 (id=666): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r2, r0}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffa6}, 0x1, 0x0, 0x0, 0x20008810}, 0x4080090) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r5, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0}}], 0x1, 0x20020000) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f00000006c0)=""/241, 0xf1}], 0x6) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000840)={0x0, 0x0, 0x3a3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.140631054s ago: executing program 4 (id=667): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) (async) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x3, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000f07b9740aa140121790f010203010902"], 0x0) 1.790704716s ago: executing program 5 (id=683): getrandom(&(0x7f00000002c0)=""/297, 0x129, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.790123386s ago: executing program 4 (id=684): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11011, r1, 0x2000) read$usbfs(r1, &(0x7f00000000c0)=""/103, 0x67) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000009800)) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480), 0x4) 1.762782662s ago: executing program 4 (id=685): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x100000a, 0x4018831, r0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34343459, 0x7, 0x5, [{0x8000006, 0xd382}, {0xdc5}, {0x0, 0x4}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8200}], 0x7, 0x7, 0x0, 0x0, 0x1}}) syz_emit_ethernet(0xaa, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000001a747ec66b05b81002c000004d4aa55ca9ac6369c55cbab62d1e0867252226996d7817d401e4a8e74157484b4955b0101a5f974b5e680dc6303184c3b5eb230fbc2505aeadf0a155b9328a3ed1d435f1a6ee66c84058fc0763d5c65b8ac482f34d47da98c6cf15f40de5b2ff01ce99a82202ea3111c1086dca92ddbe57c5fcfc836fe40182d02e45427a6465f92568af1cb654b8da74a91822448ec3c14b07234d300bbd6d78882"], 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 1.710638159s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) (async) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) 1.708346958s ago: executing program 4 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x1, 0xf3, 0x5e, 0xa5, 0x10, 0x46d, 0x900, 0xd3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0x6, 0xd0, 0x5, [{{0x9, 0x4, 0x75, 0x5c, 0x0, 0x10, 0x7a, 0x68, 0x3}}]}}]}}, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @rand_addr, @broadcast}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_setlink={0x150, 0x13, 0x400, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x20044, 0x65010}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_VFINFO_LIST={0x128, 0x16, 0x0, 0x1, [{0x98, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x100, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0xd9a4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfff, 0x7fffffff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80000001, 0xffffffffffffffff}}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x66}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x5, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0xffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x6}}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf44, 0xff}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x2, 0x623a}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x401}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0xfffffffc}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x5}}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.599094974s ago: executing program 5 (id=690): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = dup(0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x7) listen(r2, 0x8) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) creat(&(0x7f0000000140)='./file0\x00', 0x8) syslog(0x4, &(0x7f00000016c0)=""/248, 0xf8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r6, &(0x7f0000000280)="b8fa382931091a82718cc447d028cd488a842b97d2299f15c07686930dbd4692aeff1d0e71a2a4f67e83a325e17baf4588bc4ed216369ddf0b2fa805c8c80b614c56f45d28e7e7f2322b292785c4a0725b3cfe7d9ca10e2a974aa2163e6bc278aae768b159902eab9ccd7d6c6d7563e66f971c1300a50be2b9360d52d9988b277faae26668ebac59be9c7b1f30fd1dbd82bef22a6aab5358803580fc82f29a295fe01e41e1cc4cfb7f9598c53714afd2b3c524f0733c208da5d2b98bb1ca5db9fb48f3d1bd4ebef64781c48bf2f69ae4717a0a7c919bd0076e9c4a30d52a9f182993d8d7b667e314d4698d2ec3cc879922f2d39581d8d2cf70b21adbb04503b1a02776f424bf40793ff5f9e043b3c9d661650b007349145d66feceddcf42e28fac891a442030cff9c7011e164f624818d488571ce63907b0f2775e0b8135920f38c48c4940dc8cb53319810b5bfbd2cbb176d0d60cecb7471b2300393f3100063ecee424a4cabdd7c6a223b1c89507916aab066ce6c1803089bd3ab192a3470dda2e12a03894d727d1a2ce07f24ac4918570c4cd1f6cfc8f9a8ef99e47e8d8a239ecc5d9141fdb7957a0ce8a2ae48a04ffac6a7a7a8f9a68e61c633e9d5ecd3b631e8971b4f4603ae1bb5fc4052c475e1864f477b21e4db4878ca1a556a470790c92ecbd39b00753173944c35943f647b543f78720e57250f8dd81c9e8ab02a72d5808ebf8e06bf35ec668af70bae8c502f96aab15c7af3da05a34c165d2e3539822fd641809dbe3452c6b710d5a25d2d344d9b978984a2bcafdda91e36b7456c5ed05421540cc81c86e63eced9b80c8344643021629aa000648b859ee85768ac6e9a001e0266e28d4e06ad0610c798a8a6a65b64d43df7e4e4d35316e0e28b69187ba780f8ab7ffb42ce21b2c41e9cfc9280128d6d573e2567aa797d0feab11e87aceedb4065e2fbac4b67e62e85b34df376a627a234a73c4f9b70df5ed5d34ec675dc30ba83b36356389d1b401453cd280318917bfd61a70ef0d385d9154c608faca5c635e780b5103abd2a37461f237febd57698c0887899736c7b6f36c5528d484d9536ce0f2e591a2b8de977db66c51487c28196d11c617521a7acd73e40df5cb28fad3bdf7be65e526b800b655cea29e8effe9114a808f5d409cac734f66ab1b90215bad1f95572b9e5e6a0596489883861be80f3d34e24a1331f04d20f0aa3a67c257a3eaf50029fc0db85bd7f0d1ea144bf484d527a2bd3a13439c2513a5ae85e71d3da77f6c638593b726fc3fe8a4a0b1173aa97612386451be51219355724105638ba7fbd7850392a2ca5c88b850dad96c4e7a52bbfdf5af62ee9903c35c0e2c38fb1115e7ab7fa2fd7ec7dff3d444848cd9c4f370141b74fb0e1f6ae4216a1deee6a8bc3ff600822222d937cdc8eac95fed129a4aa1f3ba7c179adffdd7d27744066027582160ab40f86c02924eff68edd5c60f48d04017abd2e1d4f5c3fc7088534fcd25dc5846c12c8c48026d7d46478845835f0a3cca2879c3e7bb60d83f063c2883c553b68492f429925e323c7594aca6fc17211349611132ef51847b6687dc6d049d91bacd1ab5501a5a56502e719444442ac18fcef00cf4faed35031d27d8c9029214ca9539166f6aed5f271e314907a45afe46f1070debea452abae07e980318d9fe2600d1868567d658896baf6391efb3317488092c904628ba30004895225abd8b5f0229ed79046879aa520cb6495e4b18198ecab4104e996be3ce3c8b8df1d68c405d5dcad7476b0df74091d03d2264d6c7ff2e330b5305bb7df0278ea8d750c804dc15b0f6d2496052f5c1b8ca59df65174e0975e5d360565aa7a4240b29981a84425ce7a461067fdabc47a3c33eda5e3ae99a873486135fd0dbbe53d9492f32adb02c1ab1c1a512c965478ec5c0b98c0aaaf1e71cfd163786a8568791389fcfffabc6177e8437cdad95d499a38556b70c8841fec345e6825024ec6852a92a507a908545da97987c35ec2f7159585fd3b07708887c1a867d8083cc51de5fd0f85db1f69e56846dcb46a3f0bbcce563ec30164df27730a23e1be00e9a599219af3e2de4e11d61313c0525841dbcc518f79fa39e4f001eb2ee61c78fb436b6c2d0abd1b5c6f3f8f33a1dfb09e601a02a3bddffaf7f5e2dbaad125acb38cb14a8676969c98bbbc3a4e095e93ea2e163d5467867cbafb4ba2e588d8bf0d2cdb2045f0714ccd055d8a7a4dbe68068187b3eb38e80507b528982719dc8a2ef5f0235dbe15c0c74be024ffd2830c9d1ed23ea22ec29c8c6f9ae9977890e6ba8b51de21a384aa35deaaf4b15a0737d1d96da08e0e7aa7ea7ec7447343e36e92366c862aefecdb4cd46c6b363c998ac32ecb2b4661ba209482d96f771bb3c2958f41eac1658436c311ada4dc2f3152f724df580e441bec3288da709e932cd805ec06a771eb94acc9d0dd287f26c8c7452de8354a87d2f39d9db0b97345a2cfe4e1f4fdae28dd8b90db9ed7eda0d9210975890b409c1b3dea1b13822ad1a9b930cfeda9f503caf8634e635864318c2be5d287e461df073965ad2e47ed5e1dd7e61fd9eef3448a15444b31c34d8aa9a413a3119ca1eedd2c9dd1fee438b7218710d5aef087f11ec4b28c3be967ab12e98df12c4d9fcdb0f9017c8c4bdccee50bf71a83decefff01dabf98430fec6d4bc636019583f96841c088314a06a6bd449888472ef48d2243912209f2f421f185d9ac6241279c989954e9545a25843f88eb857b1be4611747bdba09d3a8c0d603caee18aeabb6c1492b892e3112d36b499cc1abecc57f8f08d541adc575b67e076623e4172183a6fb488fe3f355d81659f5c6fc08d4ce38037414707487cd20899d57a67f228b5a95603528406bfe5ed9e3eff6298812bab85135261e0468500a5760f262c6cf6789a1fd658973a123265c18ef412e844ad554b3bc032083fb66fb3a2715968ed7e6f05463660b959f3a4e78f0f4e976f0a399bdd5122960867cfe72ae852ae67ec06ba9567d6ba9d57d6764f4ba2b4366a59b4cdb6da452b52df2a0d57d846456cab18e79c69b9c775e1e94e906f48a0e35121560d9efe18c3eadb00485e2830d73bee4ac8c6391e9937539af971c08f9a40e13eba3584eb40859d8a9653ed08bdf0db769a34a32ce41ab800cfac8e30164a715387a47b247e966339bb4cdac290db0c1b6f4f9b4ec672accec46c620515bc88f5597571e70c38be179b06fef70424ba2aa68e5430a4ae2927552967acec6c77b1076035e148d4c31e5770dcad07de0dedc2f073736d06917ca6980801a3327afcfec7ce02e98793b9b43eaacb383ae30bf53387bb0f9b41b8901f8236791f4aa42e1411828b0d1a708a5fdab2acf444af5f8bf43fb1a88fd4c4dd5679505f552dfddc0846b93da8fe33bd81bb6fcff6e305942852f348ef03fc4b2cc05aa0e64abad9e4636b9984fadb425e25dd7123104a36462f9fd4c089f0d04f370589c81a2430615bf827387fd8994f81889bbd6d7a86f469e747a021695543dd2669ea6fa788fb87d9578ad168ff43025c1ecd8603e2004f7df72ad629042eff0bb30bab4ab15eb39c6148c0d13e35ebaa5451cea7b1b96a65c4806fc5d1286372dfd54755328bb46d438fa40200957c4f94ff6ac22496ea7b04ff81eaaf69cd3a5bf8ea452e6853e9cf44d2feced267b63c30ba224c4933a235f7544701223af28981fa5462159044e515b9aac8d52b9c8c71cebade09ff20c9fc8d091b7b8637c046a68fa61104e537a7a5f121c3cf137035adc537ee4aac7abcad111bf22f10bb0bb7151dd3dec2b6fb605d5538ab3f6ff72cbb7423e8184318844972a1585f694e7432d04ebdef870fa8dcaf383b4db02f2ff0eecdb9227e6684228ccfa9db4d596437bfa257491154f809af9ab0784f4186c961507169b2961b40a1a026537d64db14f20ad43a58f763344144f63aea0dc46183cff7eafffc4242a1cdc02c8b830c042c9d09f0034f16c3b2e9e6645e467f7c085f7fdf25545f508040abb6b0f8871f4d591570ee4ebaceb5720aa836776829d06d3ed6968e093f50c3e8243f219a2f9433556c505d826b3608265facb42878a8a2ba3e7e1c6ad31275b198143d792ee0bf52d3f3d843fdd5b8736445be19a6f3297e1b76b45e4df92377018e6d3465834ac7d2403470ebbbd73a69f3b6f0fa9cc8d37a046f9b8fdf9ba1ba7a041540ccf6bee532c392d414355e5ca418adf0370ff0566f5bc4763318989a92ee1cfbf92576f6db6c9a31a4483f69c2205ef86012a59028255143267fe5516e8a0c60bdd4bc0aeebd715daed78d97869daf016b11aab8fad2f84373884a8ff3042204d2dfc82f237fc4db8223466be9f8fd9308968441a024b86c178000405ebdfdf8778028d769f6bd5e9392acba8436fc792f9cc70cabc467beedb47dcda3d1c219888409902f576f47753c7e4c760dd94bd90ea919fcc0235383a97b0634f4096b046d100dce121e7b788eb556877f0f9dc5db3a67c375b2f367a2e2df5d2ff3381f57033d6049a31d1060d9a342389f70beb6ed0dc9947b720de6d9c3ebfe0b63002d1dc88fbe1a64550b283e2c48bee34abc2778d1bfccae5faa7d1e934a9854014bf5380e155cf64a022c08c030a354ea43d1f1a3788db633d358ea7589357ccc4ed55c9b9872b67bc1af55588b45708495ed0f2372f6f40f0736f6e5fac07f40190131b893bfa77bbec5fabf12f510c28bf23685b79251ab2bfe83b54e20bd455fdfa5a6982e6806c8085f91d5875f58e8f9eb6d75476f0ec9e62a2f5f5bee73f3c710040ef8a8f3e3ef67cb784345d9707ef99c619a01054568f9cf821205e8d30eac590383d64d6a0dd94ca46011ba844c35521d72aecc1445664f0e9e4ce6db5c18a67e347875724b2956c559c3a54e3d99cb6988f3e1088518d4dc6833b404234d5b5c0fb17a344676781476b415ba5b8bd4fa912cda06933c6ba577afa2ad801b4125bd9266d30eb2ccacf19b7d8f576bec6c534629b103ba75f4a6269fb21612362464399d7e4d5c917673d235afb8e9cc271852421d8c19596dcc0277438b1fc2c6571b295d53db0f83fb078f407f608d8d19e2b0145968d8dc1efe464972cd932ff946a9ea95c0a4144690dffaf007caf7db54d7fc2966e99e36453404f3d8a8eed2e6469c616cb7de60b7002ebcb1f30c527c314e73d27bfd8d1615a1afa279614d1c244ba142e2cd151aac7d24bed1117fab565dba6c874aace7a1e35ba63c1f7c163168ded9ad3b77cdd9bde7f7ed0e3d122ce33fff0b18ded257aeee5cf12ab0fe305f450b26ae1831425d1e100d7eaf835af53a7b7a817f7b1125b829adf37609bb9f5d2abb7b333d7add0553810419254559a25be2bfd500f270bcb7b58f8973b7035445f3157564ed7ccfefb6a19672206732295aace9740f43684897d68b6d6d7a4bb862185116ce9ebc6cdf9f74a6c5966be715a7d80c4384888d85ea7353e4ec1d19998c210942184b264610e63d2a02c50b49e98112dfb5478b904dae5716774171f22f1ecaeb1114175bafe2e1ed7d834767784db0c001506545a2a3ce2b073922f5710e4fa217d8356a1bb2f84822df5691138a5a6a7c12db470f7976636ead4c321ea9f5d09bdec92b738e8ad02782fe38f929fbb1a0ddebf6d5b731060c5b0b774e6eb852d6a87ace9b2bb6439959148d38a40114410977239144fcfd68ce871fea933a0f6d6b1a471092322e00f59c2959c82a18c6f5abc1c57c8ea7807309213c837", &(0x7f00000001c0)=@udp=r2, 0x4}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES8=r5, @ANYRESHEX=r5, @ANYBLOB=',posixacl,debug=0x0000000000000006,aname=,nodevmap']) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r7, r0, 0x0, 0x80000000) 1.449573256s ago: executing program 5 (id=691): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r1 = memfd_secret(0x0) (rerun: 64) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0x180000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) (async) socket(0x10, 0x3, 0x0) (async, rerun: 32) unshare(0x2a020480) (rerun: 32) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000040)={0x0, 0x9, 0x7, 0xfffd, 0x4, "7242c7b8b8c44b0c"}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000018000000100000001000000002000000040000000000000e04000000000000000000dcc3a626d6e31ce89290cdbbbe7795af4bf6148b289df1bfe664f60cc4a377c654e7ecd703bee89be99ad01dd666c17e571e76eea4013036beb7100198e798116f0fe45a5b7b182f36"], 0x0, 0x2a}, 0x28) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 1.309595277s ago: executing program 5 (id=692): ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(&(0x7f00000031c0), 0x0, 0x6000) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000003200)=0x5572) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x80000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r9}}) (async) r10 = openat$cgroup_subtree(r1, &(0x7f0000002fc0), 0x2, 0x0) (async) r11 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x6fbe, 0x10100, 0x0, 0x2e0}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r11, 0x81, 0x0, 0x0, 0x2, 0x1, {0x0, r14}}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x30, 0x4004, @fd=r10, 0x2, &(0x7f0000003180)=[{&(0x7f0000003000)=""/135, 0x87}, {&(0x7f00000030c0)=""/166, 0xa6}, {&(0x7f0000003640)=""/201, 0xc9}], 0x3, 0x1, 0x0, {0x0, r14}}) (async) r15 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c, 0x0) sendmmsg$inet6(r15, &(0x7f0000003240)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x33, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000002580)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000380)="50167ebf0dd2b2a4387b207c7017b314a0bf984bbb6978f255b71c808dbd77314b9d9a07423b644325dada70fe0522f8d1ecd40ffd57cbd24a15267c96927d92f70f0c1e1f5fe97d76d290bdc94bdf5529db20c9e0b89980025f95819595e1e3ea5f0adf4d15feeb7e69a7d2d98d4515d0443b2f8a1aa086aa7f33c4e4fcf9680ddf86a8c7ad0686ac3e37b68f5350e1a5dd9f44c0f92a0c7dacfb3bfcae1516512db4f504019ece271838a65a2c8a605642c7cc74959b8aaf43edc3160cfc", 0xbf}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000240)="d19e1ac0343d18f04312ef91b83ce8f3045947b4bee800a2ea88bec7b81878fa2b5c52fbf562da72852afdcb0ecda2a1a312ee76f3df1a3fc750b21c8809bee14419f1c84820d35df4ad", 0x4a}, {&(0x7f00000024c0)="a4ecd57388e0728a989b6db0958dc2e57bd6bf0101870de05921319e4a6754ee85664a6b2dba2a7e7b14a21d9a89f19ed7f66cb8456269f1e3cea316d34ee2617382a8cc0c631b273314835b5b397bebda18b52550c130b37d66605b26ac395e198bd08ce82f5118dd77a5fc6832e89cbec74bb503858663ea701189f8821a3984857c400ec3", 0x86}, {&(0x7f0000000440)="3e2841a1f4426ffabf3f6cf8a2fb3336acd0619b1c361a", 0x17}], 0x6}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002600)="42bd9e957be52152c10a223e769d76fddb7208aea79d287fd13dd4865f8748b4cfcff5b451902fdc403800803b2811df5d07236c449a1e87175292ca19c9b7caffeba6c1c5", 0x45}, {&(0x7f0000002680)="a088c5a275e459c1ae44d3ac", 0xc}, {&(0x7f00000026c0)="4f0eb36259cbd2e4aba96b25e32aeecfb5679487ea5fa88092ad30dd321eddeb03cebabd7b34363babccf2773a78ff8a3b129e60d503c216504434db6273d975ab0796075df623558071fc8ce2056f5815fa77d168fbe96dc96105b07ccfd291f00d27be", 0x64}, {&(0x7f0000002740)="b3676c38112bd2946b5a3e572892841fa4bb0ac52c44be4ed58a6498ff8fcc5b6e6581f344b9c452b04f849c460283a75f95d6075f8df401b87866717f18513dfcfd051af25b2399e2525e", 0x4b}, {&(0x7f00000027c0)="ca8a8afd86e724cdee9b737daba0357217dff0e037e1329b500b34a7d24d012f2685", 0x22}, {&(0x7f0000002800)="c7244899ddd7397752f31870bd9275798876940c7bac360eb02025a4942725b3186f43f36aa7bb16f1689488a9e1e620cae8187e31154eba45fd34f8e59318e9c15c69f6198088f250888c44a75c3e7baed2c8badda5a41b47b4e8d78632300ea665fd6575ca9809b44004e8f13909305f74a2b326f5fdb4c5784c76e8ec9ea14559808ff4cddeb9e74c45f0dc5cf761fd7261125c95776be4e7bf196a5894c18e6ab0753ae959dfa4a194bf3e4923361f684ade473f74615b04b7d42fc55f484f975b8c123412c30745130ee6c386c8ea8abae92d7ca4527f26a569126db07b6b7b4e82d0d3406bea8feb0af9dba3dafd8d2136208310", 0xf7}], 0x6}}, {{&(0x7f0000002980)={0xa, 0x4e22, 0x0, @private0, 0xc61}, 0x1c, &(0x7f0000002f40)=[{&(0x7f00000029c0)="12b9c5ac2658d72f29b1c746f9638f5a", 0x10}, {&(0x7f0000002a00)="e352aeeb2914bc68c6382fdf32ffa7bd59287890b5a7b1e68b8fcb5dbb409a62e8de75aefa25f6c1c1f2d1c4b45587ba459f1a1662d964bcf7ad12ceb28e50311cb4672a628d816b21ce57b5e841b3e74e030b0896187504b1171f431f5b93950ac729836f5fa9357340", 0x6a}, {&(0x7f0000002a80)="716f09283e2f903ffd5f6432285f1cf65416248739c8e2b00075fbf84079a556d68f8e581181db2453f3470a69b8fadb2ab0375cd5319dcae4272f89956f41fd7caf258c7967598d7b1e8acc11970af01d7ad9e88c974ee2ed2b1198937c130aafb5e66907414b6f0babe8a83b03b946e402e7480e61b60f4422aa0a725a4dea9c7e42c295c4e467a20586b7b34ee29c0d10bfe09e827c71127c1086a61b2e1ae5375f5107209d869c926809fbaa47be23dfdf9e8cc4c99be94f83348cbef1e2115e92290d270e8bd15f6d13b40b418246ca0043bc3327920f0f736c17d2b662dab4044a8cf75a950a48975c8a63", 0xee}, {&(0x7f0000002b80)="27d3b2371c8a39ab662f49af4c1729b2747c5666301f9df0e89c85fbcc16534bb0eab8fa06ea6de4a27aabe71136a2288525cbec362e577a997eaf3944619690e0bfedccb335021950a80d82b52fe3c7c8517cb555c19198c3e017d5db601d59741122feda7ab522f2896eb4d0b07549b13c68533d0d88cb470bb53a273c5254d2eb05d1522093af800c43acf3d7e80b444b37e069edc94457e5b150866934ad23462d4d4fad11e4475806de59b8f50abd8b2a5bec044d4453e8fb16912528f588125cde2856bd09ac", 0xc9}, {&(0x7f0000002c80)="e520e42478a9879148589bc0577cdbffcffcda4fcd94c91972119bab1793a4a5141c543b0c77279c93635044d6566cd0a72df03b449757f977206f52730fd08c6996df078780fb2bc7d232eb92f1be150c0857c4145d5bcc142a4593b1a98e57c0816bda06f68ad21169c3d2a19927beb5c4c5f35aa2d9321799bbd9e6bb4c07ef2ca24a782fc3f9d44a4d771e02c02cc6d48b775cd218a639c5203bcd3620e981c9d18c639c4f518f1a78158725b2ced0c7058b6e39753135ed0dfdc63f4b2fdf7e12e2e22bfd87ad767386f68b75fca7ce029842a020687d34d2f073e07a219183e5e3d2b0bf95a6dd282f6f13699de849d570e4a6", 0xf6}, {&(0x7f0000002d80)="cff17855eb7c77299cd4dddbf2199e29986269f2550adfaf2c05e60bc0b8e948579dbe6a62ef354db999599190298dfddab4a132cf47f288b02964faec15a9190576cd545dfc87fec112279a959f7796fdbd01ba7c0a7ad328babee6250cbff462bc826ec67e7d06ee1ab6563e6a83db9ffca401c45d9a9842c836db49b2bef9a379d3450db0fa74179e79f8a42ed18daca304704245b0e64ff6ca1d2a66df830ef6b3a767b10c43f086", 0xaa}, {&(0x7f0000002e40)="3948c5d6b509d75332ed00d41581771b96563bfdff1a8f320cc40572ef8bb03925ab5f8c68a67c76799091760ff3a1d0f7b1bcaf90c42e030e2a2c8b95cbeabf56762a0ecd95d18ab65581afdd59f4f4ae9a0f5c001bb9dec73a4e5d9387ac4cf955ce339a38840b25a4b47cf0a7c9e0c36cbebc47e2753602fdb797374a3243a021d7119bf4a31cb3759e8166bd9fbedd793b0fbefbf938aea0ab7ebae7f0254802ae6649c9b550738ead26b79b39f773c8", 0xb2}, {&(0x7f0000002f00)="6ad09772f09bb7", 0x7}], 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], 0x280}}], 0x3, 0x40) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x69b7, 0xbb58, 0x4, 0x0, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="1f000100"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.308673877s ago: executing program 5 (id=694): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40, 0x10, 0x0, 0x94, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xf423f, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x6, 0x0, 0x82c, 0x0, 0x40081, 0x8000004}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000380), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffcf6, 0x80800}) write$cgroup_int(r9, &(0x7f00000003c0)=0x1000, 0x12) mkdirat$cgroup(r8, &(0x7f0000000040)='syz1\x00', 0x1ff) tee(r5, r7, 0xfffffffffffffc01, 0x0) clock_gettime(0x0, &(0x7f0000000080)) sendmsg$can_bcm(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) clock_adjtime(0x3, &(0x7f0000000440)={0x4d2, 0x8, 0x100, 0x80, 0x1, 0x5, 0x8bbc, 0x6, 0x80000001, 0x3000000000000000, 0x1, 0x100, 0x7fffffffffffffff, 0xffffffffffffffff, 0x74f, 0x8, 0x8, 0x0, 0x200, 0x3, 0x4, 0x8000, 0x8, 0x0, 0x10, 0x6}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000010000304007400000000a1ff00000000", @ANYRES32=r1, @ANYBLOB="00080000000000003c0012800b00010062726964676500002c00028005001900020000000c002300070000000000000005002a00010000000c002e000000000001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', r1, 0x4, 0x3, 0x9, 0x7ff, 0x78, @empty, @remote, 0x10, 0x20, 0x4, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000540)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x0, r7, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x2, 0x4f, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[r7, r6, r6], &(0x7f0000000740)=[{0x1, 0x3, 0x10, 0xe}], 0x10, 0x84}, 0x94) ioctl$BLKDISCARDZEROES(r7, 0x127c, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) 999.479712ms ago: executing program 0 (id=698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4a", 0x4, r2) keyctl$link(0x8, r3, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000001000/0x4000)=nil, 0x4000}, 0x1}) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 998.406051ms ago: executing program 0 (id=699): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a30000000000800410072786500140033006970766d616e31000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='nfs4\x00', 0x0, &(0x7f00000000c0)='rdma') ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r11, 0x5411, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xa8, 0x0, &(0x7f0000000900)="e0b9547ed387dbe9abc89b6f5bec385182fae131b003814fa032c97896144923a9b21a857c75a58f0d73b7ab3dbbb37425f12a4d414e6da6c3817bf3cf32c6ae5fff4e3d0e836c246c52a3f5ded12509f2e8f0d2095a7f29d55e42e367181a4cb53c9a05606f0e3e31c599c9551e113f4345e725023032c73d1039338db32215deafe6bea9cd739129a76fd26e57d8010dd9e6bb972ed26cfdabfded15129ec7410347b34e699f4c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = creat(&(0x7f00000001c0)='./file0\x00', 0x24) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[@ANYBLOB="2b6d656d6f7279202b6d656d6f7279202b667265657a6572202d6370752066fe71077320"], 0x24) sendto$packet(r2, &(0x7f0000000680)="a6d5dda5e986000000083a4b7fc08a086fc6910000100000000000000044bd5af37ca95213ead8835797857a0e591e5d9c0692c99700ef00000000ee4b5f033e8917f54727e46d5d5f0abe356126c04d7420f30142b4c0cf60f438191f07bd3b1c42f37fbce1500b0f3f91e9bba2cd4c1802306bff85449be05fa6ad56b02967988fe4f7747b77bcded267d0ad19e38c16947608fdc1298f7afcd622a132124ed8c05937e9eaa60203d2d3a05945b7116422c6340d6f7ffe831760068a19b6b2e1", 0xc1, 0x4040044, &(0x7f0000000140)={0x11, 0x17, r13}, 0x14) 919.822461ms ago: executing program 0 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x8001, 0x4) listen(r2, 0x2000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0xd0c0, r2}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x44a2c2, 0x0) 820.100156ms ago: executing program 0 (id=702): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r7, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x6}}, @TCA_FW_MASK={0x8, 0x5, 0x77}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', r5, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe5c, 0x10, 0x0, 0x0, r2}, 0x94) 819.953977ms ago: executing program 0 (id=703): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='auxv\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) 719.211422ms ago: executing program 0 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) poll(&(0x7f0000007840)=[{r1, 0x2}], 0x1, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r3) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f27, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf, 0x7, 0xa, 0x100, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000428bd7000ffdbdf25020000000c000f00090000000000000006001a004e20000005000500010000000c19212c7263aa45a2a18a77001000ffff00000000000005000700020000000c000f009800000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840) 389.973481ms ago: executing program 5 (id=707): mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000080)={[], [{@seclabel}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xfffffffffffffe74}], 0x1}, 0x4) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f080000000d0010000400060103000000005f30002e61"], 0x0, 0x37, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000200)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpeername(r4, 0x0, &(0x7f00000000c0)) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000180)={@rand_addr=0x64010102, @multicast2, 0xffffffffffffffff, "fc38bc9e1b175f3ec4e967a7349bde3d9129c262f7fbb0de1280ccc614249db4", 0x3, 0x3, 0x0, 0xc}, 0x3c) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x33, 0x2, 0x1dad9f8604b238cb, "0600836a330000000000000007000200268d09ff07690000010040c39b08fc00"}) r7 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_int(r7, 0x0, 0xf, 0x0, &(0x7f0000000240)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./cgroup\x00', r0}, 0x18) 208.45075ms ago: executing program 1 (id=714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x0, 0x8001, 0x1}}, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0x1, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x7, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0xb, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1003, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xb, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x200, 0xfffffffd, 0xffffffff, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x6, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0x3, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x54, r6, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="80"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ed5a8e89a69f0518e"}]}]}]}, 0x54}}, 0x4804) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x3, r9, 0x1, 0x82, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') (async) socket$packet(0x11, 0x2, 0x300) 150.355898ms ago: executing program 1 (id=715): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x1, 0x4}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb"}, {0x0}], 0x2, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e1d}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x20008880) close_range(r0, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x1, 0x4}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb"}, {0x0}], 0x2, 0x0, 0x0, 0x4040000}}, {{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e1d}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x20008880) (async) close_range(r0, r2, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 147.872209ms ago: executing program 1 (id=716): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000), 0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000001680)) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0x8, @pix={0x0, 0xa47, 0x30383653, 0x6, 0x1, 0x4, 0x7, 0x3000000, 0x1, 0x2, 0x0, 0x2}}) 79.77096ms ago: executing program 1 (id=717): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2b0}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000c00000004000000b47c001600000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300000200"/28], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000040)='./file0\x00', 0x101000, 0xd) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x8, 0x8000000000000000, 0x0, 0x10001, 0x0, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}, 0x9, 0x1, {}, 0x6}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000003c0), 0xb315) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000040)={0x4, 0x800, 0x435}) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000000000000000002000000000000000100", @ANYRES32=0x0, @ANYBLOB="018c0000075005001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x0, 0x0, 0xfc, 0x8000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040049}, 0x20004804) write$binfmt_script(r8, &(0x7f0000000680)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, '{]\\'}, {}, {0x20, '#! '}], 0xa, "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"}, 0x115) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 190.478µs ago: executing program 1 (id=718): r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x32c0, 0x101000) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000000100)={0xc1, 0x0, 0x2}) r1 = socket(0xa, 0x5, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400004007000000000080010000000012000000000000008400000006"], 0x30, 0x8000}, 0x28004001) 0s ago: executing program 1 (id=719): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="10", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x0, 0x8f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x81, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe) poll(&(0x7f0000000080), 0x20000000000002ac, 0x400) shutdown(r1, 0x1) kernel console output (not intermixed with test programs): fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.067630][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.092973][ T5958] hsr_slave_0: entered promiscuous mode [ 47.095415][ T5958] hsr_slave_1: entered promiscuous mode [ 47.097506][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.100230][ T5958] Cannot create hsr debugfs directory [ 47.147969][ T5949] team0: Port device team_slave_0 added [ 47.151464][ T5949] team0: Port device team_slave_1 added [ 47.217140][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.219894][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.228254][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.254822][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.257059][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.265084][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.274393][ T5951] hsr_slave_0: entered promiscuous mode [ 47.276620][ T5951] hsr_slave_1: entered promiscuous mode [ 47.278675][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.281110][ T5951] Cannot create hsr debugfs directory [ 47.459901][ T5949] hsr_slave_0: entered promiscuous mode [ 47.463096][ T5949] hsr_slave_1: entered promiscuous mode [ 47.466166][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.469230][ T5949] Cannot create hsr debugfs directory [ 47.669784][ T5948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.680419][ T5948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.688544][ T5948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.708387][ T5948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.735019][ T5951] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.739482][ T5951] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.751662][ T5951] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.757989][ T5951] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.802672][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.813351][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.819882][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.826164][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.873416][ T5953] Bluetooth: hci3: command tx timeout [ 47.873423][ T5963] Bluetooth: hci1: command tx timeout [ 47.873778][ T5963] Bluetooth: hci2: command tx timeout [ 47.874666][ T5960] Bluetooth: hci0: command tx timeout [ 47.885333][ T5949] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.889505][ T5949] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.907970][ T5949] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.913474][ T5949] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.971646][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.988490][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.013942][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.018382][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.024278][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.035227][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.037680][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.047099][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.053633][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.055857][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.059058][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.061286][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.069375][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.071666][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.081043][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.083318][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.100078][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.102325][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.113988][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.156518][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.169451][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.172277][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.182616][ T40] audit: type=1400 audit(1753449971.676:89): avc: denied { sys_module } for pid=5951 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.185624][ T5958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.196919][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.199159][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.253353][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.277674][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.284133][ T5951] veth0_vlan: entered promiscuous mode [ 48.296388][ T5951] veth1_vlan: entered promiscuous mode [ 48.317894][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.328743][ T5948] veth0_vlan: entered promiscuous mode [ 48.334964][ T5951] veth0_macvtap: entered promiscuous mode [ 48.345910][ T5951] veth1_macvtap: entered promiscuous mode [ 48.349757][ T5948] veth1_vlan: entered promiscuous mode [ 48.367054][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.372343][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.381383][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.396360][ T5948] veth0_macvtap: entered promiscuous mode [ 48.401928][ T5951] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.405329][ T5951] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.408062][ T5951] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.410783][ T5951] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.416047][ T5958] veth0_vlan: entered promiscuous mode [ 48.418509][ T5948] veth1_macvtap: entered promiscuous mode [ 48.430782][ T5958] veth1_vlan: entered promiscuous mode [ 48.447139][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.458264][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.476767][ T5948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.480153][ T5948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.484511][ T5948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.487233][ T5948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.497305][ T5949] veth0_vlan: entered promiscuous mode [ 48.502094][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.507286][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.528454][ T5949] veth1_vlan: entered promiscuous mode [ 48.533343][ T5958] veth0_macvtap: entered promiscuous mode [ 48.536310][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.538804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.563234][ T5958] veth1_macvtap: entered promiscuous mode [ 48.576586][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.576853][ T5949] veth0_macvtap: entered promiscuous mode [ 48.579657][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.586409][ T5949] veth1_macvtap: entered promiscuous mode [ 48.597294][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.599278][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.616656][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.621146][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.622010][ T5958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.625033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.627848][ T5958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.634109][ T5958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.637539][ T5958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.646180][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.656040][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.661014][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.664090][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.666826][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.669460][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.719007][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.721840][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.744292][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.747267][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.759763][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.762118][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.771335][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.774523][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.884239][ T6051] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 48.886851][ T6055] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 48.997313][ T6067] hpfs: hpfs_map_sector(): read error [ 49.105611][ T6074] ALSA: seq fatal error: cannot create timer (-19) [ 49.172926][ T74] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.335168][ T74] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 49.337854][ T74] usb 6-1: config 0 has no interface number 0 [ 49.339827][ T74] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 49.344122][ T74] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 49.345561][ T6081] overlayfs: overlapping lowerdir path [ 49.347678][ T74] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 49.347706][ T74] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 49.347718][ T74] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.349937][ T74] usb 6-1: config 0 descriptor?? [ 49.373712][ T74] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.120/input/input5 [ 49.629905][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.707657][ T6061] syzkaller0: entered promiscuous mode [ 49.709454][ T6061] syzkaller0: entered allmulticast mode [ 49.818799][ T6095] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 49.821861][ T6095] overlayfs: missing 'lowerdir' [ 49.963013][ T5963] Bluetooth: hci2: command tx timeout [ 49.963194][ T5962] Bluetooth: hci3: command tx timeout [ 49.965358][ T5963] Bluetooth: hci0: command tx timeout [ 49.967272][ T5953] Bluetooth: hci1: command tx timeout [ 50.416557][ T6125] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.451675][ T6130] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 50.457590][ T6130] netlink: 152 bytes leftover after parsing attributes in process `syz.3.25'. [ 50.458381][ T5996] usb 6-1: USB disconnect, device number 2 [ 50.465566][ T6130] : renamed from bond0 (while UP) [ 50.542222][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 50.542236][ T40] audit: type=1400 audit(1753449974.036:183): avc: denied { create } for pid=6134 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.544106][ T6136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45328 sclass=netlink_audit_socket pid=6136 comm=syz.0.27 [ 50.545239][ T40] audit: type=1400 audit(1753449974.046:184): avc: denied { setopt } for pid=6134 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.565113][ T40] audit: type=1400 audit(1753449974.046:185): avc: denied { write } for pid=6134 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.572297][ T40] audit: type=1400 audit(1753449974.046:186): avc: denied { read write } for pid=6135 comm="syz.2.28" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.581506][ T40] audit: type=1400 audit(1753449974.046:187): avc: denied { open } for pid=6135 comm="syz.2.28" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.589309][ T40] audit: type=1400 audit(1753449974.046:188): avc: denied { name_connect } for pid=6135 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 50.596945][ T40] audit: type=1400 audit(1753449974.086:189): avc: denied { create } for pid=6141 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.603509][ T40] audit: type=1400 audit(1753449974.086:190): avc: denied { connect } for pid=6141 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.609398][ T40] audit: type=1400 audit(1753449974.086:191): avc: denied { ioctl } for pid=6143 comm="syz.0.30" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.641747][ T40] audit: type=1400 audit(1753449974.136:192): avc: denied { shutdown } for pid=6141 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.721997][ T6152] process 'syz.3.32' launched '/dev/fd/3' with NULL argv: empty string added [ 50.880704][ T6156] capability: warning: `syz.3.33' uses 32-bit capabilities (legacy support in use) [ 51.028854][ T6162] openvswitch: netlink: Duplicate or invalid key (type 0). [ 51.032533][ T6162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.036861][ T6162] ======================================================= [ 51.036861][ T6162] WARNING: The mand mount option has been deprecated and [ 51.036861][ T6162] and is ignored by this kernel. Remove the mand [ 51.036861][ T6162] option from the mount to silence this warning. [ 51.036861][ T6162] ======================================================= [ 51.050986][ T6162] overlay: ./file0 is not a directory [ 51.095459][ T6167] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 51.210586][ T6177] netlink: 'syz.3.39': attribute type 4 has an invalid length. [ 51.993899][ T6209] netlink: 'syz.1.49': attribute type 23 has an invalid length. [ 52.033165][ T5963] Bluetooth: hci0: command tx timeout [ 52.033283][ T5953] Bluetooth: hci3: command tx timeout [ 52.033766][ T5960] Bluetooth: hci2: command tx timeout [ 52.033798][ T5960] Bluetooth: hci1: command tx timeout [ 52.074846][ T6213] No source specified [ 52.121004][ T6215] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 52.230880][ T6217] Bluetooth: MGMT ver 1.23 [ 52.275854][ T6221] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.286846][ T6221] evm: overlay not supported [ 52.322376][ T6224] netlink: 168 bytes leftover after parsing attributes in process `syz.2.56'. [ 52.428819][ T6242] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 52.429127][ T6241] raw_sendmsg: syz.1.61 forgot to set AF_INET. Fix it! [ 52.438623][ T6242] CIFS: Unable to determine destination address [ 52.445793][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.60'. [ 52.459326][ T6247] Zero length message leads to an empty skb [ 52.499675][ T6261] nvme_fabrics: unknown parameter or missing value 'o sWU߰`=oyCOi]UoY6K\V' in ctrl creation request [ 52.504992][ T6262] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 52.505019][ T6262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.506248][ T6262] vhci_hcd vhci_hcd.0: Device attached [ 52.514913][ T6266] vhci_hcd: connection closed [ 52.518935][ T60] vhci_hcd: stop threads [ 52.522877][ T60] vhci_hcd: release socket [ 52.524349][ T60] vhci_hcd: disconnect device [ 52.557756][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 52.561248][ T6273] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 52.664486][ T6287] overlayfs: failed to resolve './file0': -2 [ 52.686299][ T6289] fuse: Bad value for 'fd' [ 52.794974][ T6307] usb usb1: check_ctrlrecip: process 6307 (syz.0.81) requesting ep 01 but needs 81 [ 52.797976][ T6307] usb usb1: usbfs: process 6307 (syz.0.81) did not claim interface 0 before use [ 52.804767][ T6307] usb usb1: check_ctrlrecip: process 6307 (syz.0.81) requesting ep 01 but needs 81 [ 52.807768][ T6307] usb usb1: usbfs: process 6307 (syz.0.81) did not claim interface 0 before use [ 52.838392][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 53.050856][ T6320] pimreg3: entered allmulticast mode [ 53.092936][ T6009] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 53.242796][ T6009] usb 6-1: Using ep0 maxpacket: 8 [ 53.246026][ T6009] usb 6-1: config 0 has no interfaces? [ 53.247768][ T6009] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 53.250628][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.254593][ T6009] usb 6-1: config 0 descriptor?? [ 53.459992][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.462938][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.529062][ T6326] loop4: detected capacity change from 0 to 2560 [ 53.535113][ T5955] Buffer I/O error on dev loop4, logical block 0, async page read [ 53.538471][ T5955] Buffer I/O error on dev loop4, logical block 0, async page read [ 53.548003][ T6326] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 53.551113][ T6326] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 53.555893][ T6326] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 53.558699][ T6326] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 53.561310][ T6326] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 53.565361][ T6326] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 53.568135][ T6326] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 53.570838][ T6326] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 53.659825][ T74] usb 6-1: USB disconnect, device number 3 [ 53.862879][ T5748] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.022944][ T5748] usb 8-1: Using ep0 maxpacket: 8 [ 54.032611][ T5748] usb 8-1: config index 0 descriptor too short (expected 19730, got 18) [ 54.035473][ T5748] usb 8-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 54.038758][ T5748] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 54 [ 54.045641][ T5748] usb 8-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 54.048442][ T5748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.050920][ T5748] usb 8-1: Product: syz [ 54.052233][ T5748] usb 8-1: Manufacturer: syz [ 54.062829][ T5748] usb 8-1: SerialNumber: syz [ 54.065979][ T5748] usb 8-1: config 0 descriptor?? [ 54.113054][ T5953] Bluetooth: hci0: command tx timeout [ 54.113782][ T5959] Bluetooth: hci1: command tx timeout [ 54.115225][ T5953] Bluetooth: hci3: command 0x0419 tx timeout [ 54.117247][ T5959] Bluetooth: hci2: command tx timeout [ 54.152789][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.214138][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 54.218251][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 54.282831][ T24] usb 7-1: device descriptor read/64, error -71 [ 54.306683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 54.310795][ T5748] usb 8-1: USB disconnect, device number 2 [ 54.325325][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 54.340874][ T6343] netlink: 'syz.1.91': attribute type 1 has an invalid length. [ 54.343186][ T6343] netlink: 'syz.1.91': attribute type 2 has an invalid length. [ 54.466082][ T6354] cgroup: Invalid name [ 54.542804][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.591624][ T6358] tipc: Started in network mode [ 54.593632][ T6358] tipc: Node identity 8a04b00e59ef, cluster identity 4711 [ 54.596039][ T6358] tipc: Enabled bearer , priority 0 [ 54.598712][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 54.598985][ T6357] syzkaller0: entered promiscuous mode [ 54.604449][ T6357] syzkaller0: entered allmulticast mode [ 54.616194][ T6356] tipc: Resetting bearer [ 54.623764][ T6356] tipc: Disabling bearer [ 54.702819][ T24] usb 7-1: device descriptor read/64, error -71 [ 54.813161][ T24] usb usb7-port1: attempt power cycle [ 55.020927][ T6376] syz.0.103 uses obsolete (PF_INET,SOCK_PACKET) [ 55.172831][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 55.203628][ T24] usb 7-1: device descriptor read/8, error -71 [ 55.423302][ T6034] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.447190][ T6396] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.452896][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 55.471500][ T6400] netlink: 830 bytes leftover after parsing attributes in process `syz.3.109'. [ 55.474859][ T24] usb 7-1: device descriptor read/8, error -71 [ 55.477966][ T6400] netlink: 830 bytes leftover after parsing attributes in process `syz.3.109'. [ 55.487101][ T6404] netlink: 156 bytes leftover after parsing attributes in process `syz.1.110'. [ 55.582842][ T6034] usb 5-1: Using ep0 maxpacket: 16 [ 55.585177][ T24] usb usb7-port1: unable to enumerate USB device [ 55.589168][ T6034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.594341][ T6034] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 55.597202][ T6034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.597571][ T40] kauditd_printk_skb: 107 callbacks suppressed [ 55.597580][ T40] audit: type=1400 audit(1753449979.096:300): avc: denied { write } for pid=6409 comm="syz.1.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.598586][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 55.598604][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 55.599784][ T6034] usb 5-1: Product: syz [ 55.614838][ T6034] usb 5-1: Manufacturer: syz [ 55.616319][ T6034] usb 5-1: SerialNumber: syz [ 55.619900][ T6034] usb 5-1: config 0 descriptor?? [ 55.624751][ T6034] hub 5-1:0.0: bad descriptor, ignoring hub [ 55.626578][ T6034] hub 5-1:0.0: probe with driver hub failed with error -5 [ 55.630174][ T6034] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input9 [ 55.679457][ T40] audit: type=1400 audit(1753449979.176:301): avc: denied { read write } for pid=6416 comm="syz.1.114" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.686996][ T40] audit: type=1400 audit(1753449979.176:302): avc: denied { open } for pid=6416 comm="syz.1.114" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 55.688305][ T839] hid (null): unknown global tag 0x87 [ 55.696853][ T839] hid (null): report_id 793988258 is invalid [ 55.701405][ T839] hid-generic 1010:0005:0001.0002: unexpected long global item [ 55.704794][ T839] hid-generic 1010:0005:0001.0002: probe with driver hid-generic failed with error -22 [ 55.823919][ T40] audit: type=1400 audit(1753449979.326:303): avc: denied { write } for pid=6384 comm="syz.0.105" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.093708][ T839] usb 5-1: USB disconnect, device number 2 [ 56.142778][ T6064] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 56.202856][ T5963] Bluetooth: hci3: command 0x0419 tx timeout [ 56.202889][ T5959] Bluetooth: hci2: command tx timeout [ 56.274894][ T6064] usb 6-1: device descriptor read/64, error -71 [ 56.509506][ T6420] nbd: couldn't find a device at index -1605786504 [ 56.522780][ T6064] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.652771][ T6064] usb 6-1: device descriptor read/64, error -71 [ 56.678635][ T40] audit: type=1400 audit(1753449980.176:304): avc: denied { create } for pid=6429 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.705178][ T40] audit: type=1400 audit(1753449980.206:305): avc: denied { map } for pid=6432 comm="syz.3.120" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 56.719907][ T40] audit: type=1400 audit(1753449980.216:306): avc: denied { ioctl } for pid=6432 comm="syz.3.120" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 56.750515][ T6428] netlink: zone id is out of range [ 56.765433][ T6064] usb usb6-port1: attempt power cycle [ 56.769842][ T6428] netlink: set zone limit has 4 unknown bytes [ 56.770918][ T40] audit: type=1400 audit(1753449980.266:307): avc: denied { open } for pid=6436 comm="syz.3.121" path="/dev/ttyqa" dev="devtmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 56.945351][ T40] audit: type=1400 audit(1753449980.446:308): avc: denied { mounton } for pid=6449 comm="syz.2.125" path="/18/file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.952168][ T6450] Invalid source name [ 56.953579][ T6450] UBIFS error (pid: 6450): cannot open "./file0", error -22 [ 56.953833][ T6450] Invalid source name [ 56.957480][ T6450] UBIFS error (pid: 6450): cannot open "./file0", error -22 [ 56.957588][ T40] audit: type=1400 audit(1753449980.456:309): avc: denied { getopt } for pid=6451 comm="syz.0.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.073168][ T6463] random: crng reseeded on system resumption [ 57.102807][ T6064] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 57.123854][ T6064] usb 6-1: device descriptor read/8, error -71 [ 57.136182][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.130'. [ 57.262779][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 57.362927][ T6064] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 57.383465][ T6064] usb 6-1: device descriptor read/8, error -71 [ 57.412797][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 57.425095][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.428887][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.432903][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 57.435685][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.443332][ T24] usb 7-1: config 0 descriptor?? [ 57.502792][ T6064] usb usb6-port1: unable to enumerate USB device [ 57.634929][ T6466] netlink: 'syz.3.131': attribute type 2 has an invalid length. [ 57.637293][ T6466] netlink: 46 bytes leftover after parsing attributes in process `syz.3.131'. [ 57.849609][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 57.851625][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 57.855465][ T24] usb 7-1: USB disconnect, device number 6 [ 57.978712][ T6482] netlink: 'syz.3.136': attribute type 2 has an invalid length. [ 58.010485][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.013594][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.016178][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 58.166983][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 58.220761][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.224520][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.242897][ T6009] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.260530][ T6487] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 58.264463][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 58.326993][ T6503] IPv6: sit1: Disabled Multicast RS [ 58.329226][ T6503] sit1: entered allmulticast mode [ 58.346860][ T6503] kvm: Disabled LAPIC found during irq injection [ 58.365301][ T6503] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 58.373102][ T6009] usb 8-1: device descriptor read/64, error -71 [ 58.418939][ T6503] gretap1: entered promiscuous mode [ 58.612860][ T6009] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 58.672894][ T24] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 58.723706][ T6529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6529 comm=syz.0.151 [ 58.752767][ T6009] usb 8-1: device descriptor read/64, error -71 [ 58.761897][ T6033] IPVS: starting estimator thread 0... [ 58.764413][ T6531] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 58.836194][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.838585][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.841840][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.846862][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.850442][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.854175][ T6535] IPVS: using max 42 ests per chain, 100800 per kthread [ 58.863009][ T6009] usb usb8-port1: attempt power cycle [ 58.863337][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.867168][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.870606][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.874376][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.877768][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.884485][ T24] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.886834][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 58.888359][ T6548] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 58.890132][ T24] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.890147][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 58.890160][ T24] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 58.904733][ T6548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.914256][ T6548] vlan2: entered allmulticast mode [ 58.916520][ T6548] veth1: entered allmulticast mode [ 58.917376][ T24] usb 7-1: string descriptor 0 read error: -22 [ 58.920179][ T24] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 58.920323][ T6548] bond1: (slave vlan2): making interface the new active one [ 58.923077][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.927521][ T24] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 58.934787][ T6548] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 59.127609][ T6511] tmpfs: Bad value for 'mpol' [ 59.150161][ T6566] kvm: user requested TSC rate below hardware speed [ 59.187498][ T6568] mkiss: ax0: crc mode is auto. [ 59.222942][ T6009] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 59.253584][ T6009] usb 8-1: device descriptor read/8, error -71 [ 59.513755][ T6009] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 59.533494][ T6009] usb 8-1: device descriptor read/8, error -71 [ 59.542892][ T6033] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 59.643019][ T6009] usb usb8-port1: unable to enumerate USB device [ 59.692767][ T6033] usb 5-1: Using ep0 maxpacket: 8 [ 59.695827][ T6033] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.698449][ T6033] usb 5-1: config 0 has no interface number 0 [ 59.700423][ T6033] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.704224][ T6033] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.708291][ T6033] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 59.712685][ T6033] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.717683][ T6033] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.720739][ T6033] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.726605][ T6033] usb 5-1: config 0 descriptor?? [ 59.734035][ T6033] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 59.993050][ T24] usb 5-1: USB disconnect, device number 3 [ 59.998781][ T24] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 60.040608][ T6582] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 60.891415][ T40] kauditd_printk_skb: 49 callbacks suppressed [ 60.891426][ T40] audit: type=1400 audit(1753449984.386:359): avc: denied { create } for pid=6600 comm="syz.0.173" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.910008][ T40] audit: type=1326 audit(1753449984.406:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="syz.0.173" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f549598e9a9 code=0x0 [ 61.046852][ T6607] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 61.046864][ T6608] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 61.051900][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.055460][ T6608] : (slave batadv0): Enslaving as an active interface with an up link [ 61.063199][ T40] audit: type=1400 audit(1753449984.566:362): avc: denied { create } for pid=6606 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.069620][ T40] audit: type=1400 audit(1753449984.566:361): avc: denied { create } for pid=6606 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.153204][ T9] usb 7-1: USB disconnect, device number 7 [ 61.195988][ T6613] syz.3.176: attempt to access beyond end of device [ 61.195988][ T6613] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 61.200024][ T6613] vxfs: unable to read disk superblock at 1 [ 61.202122][ T6613] syz.3.176: attempt to access beyond end of device [ 61.202122][ T6613] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 61.206730][ T6613] vxfs: unable to read disk superblock at 8 [ 61.209102][ T6613] vxfs: can't find superblock. [ 61.242501][ T40] audit: type=1400 audit(1753449984.736:363): avc: denied { ioctl } for pid=6617 comm="syz.1.178" path="socket:[11045]" dev="sockfs" ino=11045 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.297897][ T40] audit: type=1400 audit(1753449984.796:364): avc: denied { ioctl } for pid=6622 comm="syz.3.179" path="socket:[11051]" dev="sockfs" ino=11051 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.305304][ T40] audit: type=1400 audit(1753449984.796:365): avc: denied { mount } for pid=6622 comm="syz.3.179" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 61.533856][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 61.574784][ T40] audit: type=1400 audit(1753449985.076:366): avc: denied { ioctl } for pid=6624 comm="syz.1.180" path="socket:[12198]" dev="sockfs" ino=12198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.583961][ T40] audit: type=1400 audit(1753449985.076:367): avc: denied { getopt } for pid=6624 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.682875][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 61.685774][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 61.688262][ T9] usb 7-1: config 0 has no interface number 0 [ 61.690191][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 61.693946][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 61.696759][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.699236][ T9] usb 7-1: Product: syz [ 61.700551][ T9] usb 7-1: Manufacturer: syz [ 61.702045][ T9] usb 7-1: SerialNumber: syz [ 61.705874][ T9] usb 7-1: config 0 descriptor?? [ 61.708679][ T9] smsc75xx v1.0.0 [ 61.709873][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 61.713330][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 61.746370][ T6632] cgroup: Invalid name [ 61.875905][ T6649] netlink: 'syz.3.187': attribute type 2 has an invalid length. [ 61.878352][ T6649] __nla_validate_parse: 10 callbacks suppressed [ 61.878359][ T6649] netlink: 244 bytes leftover after parsing attributes in process `syz.3.187'. [ 61.944576][ T9] usb 7-1: USB disconnect, device number 8 [ 62.212253][ T6659] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.215366][ T6659] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.218107][ T6659] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.220791][ T6659] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.227543][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 62.274494][ T6661] nbd: must specify a device to reconfigure [ 62.298233][ T6665] capability: warning: `syz.1.193' uses deprecated v2 capabilities in a way that may be insecure [ 62.435515][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 62.439701][ T40] audit: type=1400 audit(1753449985.936:368): avc: denied { name_connect } for pid=6675 comm="syz.1.197" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 62.584430][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 62.645161][ T6697] binder: 6692:6697 unknown command 0 [ 62.646241][ T6700] netlink: 'syz.1.205': attribute type 10 has an invalid length. [ 62.646931][ T6697] binder: 6692:6697 ioctl c0306201 2000000003c0 returned -22 [ 62.648351][ T6697] input: syz0 as /devices/virtual/input/input10 [ 62.660581][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 62.674028][ T6700] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.031702][ T6727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 63.062163][ T6731] fuse: Unknown parameter '00000000020^oU_id' [ 63.068005][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 63.177135][ T6748] IPv6: Can't replace route, no match found [ 63.180941][ T6740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'. [ 63.185717][ T6748] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 63.306155][ T6756] netlink: 'syz.2.222': attribute type 11 has an invalid length. [ 63.309381][ T6756] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.222'. [ 63.396196][ T6758] netlink: 32 bytes leftover after parsing attributes in process `syz.0.223'. [ 63.552771][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 63.712803][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 63.716526][ T34] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.719943][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.722985][ T34] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.726184][ T34] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.730897][ T34] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.733811][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.794703][ T5959] Bluetooth: hci3: command 0x0419 tx timeout [ 63.939740][ T34] usb 7-1: usb_control_msg returned -32 [ 63.941837][ T34] usbtmc 7-1:16.0: can't read capabilities [ 63.946257][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.947164][ T34] usb 7-1: USB disconnect, device number 9 [ 63.962571][ T840] cfg80211: failed to load regulatory.db [ 64.039535][ T6772] No source specified [ 64.221706][ T6792] overlayfs: failed to resolve './file0': -2 [ 64.279969][ T6796] fuse: Bad value for 'fd' [ 64.287648][ T6796] syz.0.235: attempt to access beyond end of device [ 64.287648][ T6796] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 64.287941][ T6794] dlm: plock device version mismatch: kernel (1.2.0), user (4207687471.1574799195.3139252685) [ 64.293516][ T6796] exFAT-fs (nbd0): unable to read boot sector [ 64.298377][ T6796] exFAT-fs (nbd0): failed to read boot sector [ 64.300557][ T6796] exFAT-fs (nbd0): failed to recognize exfat type [ 64.482583][ T6804] loop6: detected capacity change from 0 to 63 [ 64.493828][ T6391] buffer_io_error: 313 callbacks suppressed [ 64.493844][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.500885][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.505009][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.509408][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 64.513867][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 65.065040][ T6842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.182949][ T6849] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.426376][ T6864] Cannot find map_set index 0 as target [ 65.728454][ T6902] syz_tun: entered allmulticast mode [ 65.755763][ T6902] syz_tun: left allmulticast mode [ 65.826444][ T6915] Cannot find set identified by id 3 to match [ 65.886950][ T6924] loop8: detected capacity change from 0 to 524287999 [ 65.963240][ T6924] Invalid logical block size (2) [ 65.999730][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 65.999742][ T40] audit: type=1400 audit(1753449989.496:398): avc: denied { create } for pid=6939 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.008725][ T40] audit: type=1400 audit(1753449989.496:399): avc: denied { bind } for pid=6939 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.014970][ T40] audit: type=1400 audit(1753449989.496:400): avc: denied { listen } for pid=6939 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.021505][ T40] audit: type=1400 audit(1753449989.496:401): avc: denied { accept } for pid=6939 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.029058][ T40] audit: type=1400 audit(1753449989.496:402): avc: denied { setattr } for pid=6939 comm="syz.3.274" path="socket:[15900]" dev="sockfs" ino=15900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.092297][ T40] audit: type=1400 audit(1753449989.586:403): avc: denied { write } for pid=6946 comm="syz.2.276" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.102612][ T74] IPVS: starting estimator thread 0... [ 66.122240][ T6944] netlink: 'syz.1.275': attribute type 10 has an invalid length. [ 66.135295][ T6944] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 66.165108][ T6954] mmap: syz.0.278 (6954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.224996][ T6949] IPVS: using max 42 ests per chain, 100800 per kthread [ 66.260324][ T6959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6959 comm=syz.0.279 [ 66.264316][ T6959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6959 comm=syz.0.279 [ 66.274709][ T40] audit: type=1400 audit(1753449989.766:404): avc: denied { audit_write } for pid=6958 comm="syz.0.279" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.605079][ T40] audit: type=1400 audit(1753449990.106:405): avc: denied { map } for pid=6965 comm="syz.0.282" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 66.606000][ T46] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 66.613545][ T40] audit: type=1400 audit(1753449990.106:406): avc: denied { execute } for pid=6965 comm="syz.0.282" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 67.034378][ T40] audit: type=1400 audit(1753449990.536:407): avc: denied { accept } for pid=6983 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.085836][ T6989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=6989 comm=syz.0.286 [ 67.141648][ T6989] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6989 comm=syz.0.286 [ 67.146476][ T7001] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 67.151407][ T7003] __nla_validate_parse: 5 callbacks suppressed [ 67.151417][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 67.203207][ T7007] nbd: must specify at least one socket [ 67.205184][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 67.207937][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.293'. [ 67.211327][ T7007] netlink: 'syz.3.293': attribute type 7 has an invalid length. [ 67.257899][ T7015] netlink: 'syz.3.296': attribute type 21 has an invalid length. [ 67.265417][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 67.347563][ T7018] vlan3: entered promiscuous mode [ 67.349598][ T7018] bridge0: entered promiscuous mode [ 67.351946][ T7018] vlan3: entered allmulticast mode [ 67.357891][ T7018] bridge0: entered allmulticast mode [ 67.433488][ T7042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.435888][ T7042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.439232][ T7042] vhci_hcd vhci_hcd.0: Device attached [ 67.454228][ T7043] vhci_hcd: connection closed [ 67.454985][ T60] vhci_hcd: stop threads [ 67.457946][ T60] vhci_hcd: release socket [ 67.459364][ T60] vhci_hcd: disconnect device [ 67.466944][ T7046] netlink: 36 bytes leftover after parsing attributes in process `syz.2.305'. [ 67.669797][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 67.674616][ T7059] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 67.728663][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 67.802834][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.928168][ T840] IPVS: starting estimator thread 0... [ 67.975199][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.978588][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.981971][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.982819][ T7069] netlink: 'syz.1.312': attribute type 2 has an invalid length. [ 67.987494][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.989813][ T7069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.312'. [ 67.993075][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.998628][ T7069] netlink: 'syz.1.312': attribute type 2 has an invalid length. [ 68.001077][ T7069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.312'. [ 68.008869][ T34] usb 7-1: config 0 descriptor?? [ 68.012986][ T7067] IPVS: using max 42 ests per chain, 100800 per kthread [ 68.039015][ T7075] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.101021][ T5963] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 68.131914][ T5963] CPU: 3 UID: 0 PID: 5963 Comm: kworker/u33:7 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 68.131930][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.131938][ T5963] Workqueue: hci2 hci_rx_work [ 68.131988][ T5963] Call Trace: [ 68.131992][ T5963] [ 68.131998][ T5963] dump_stack_lvl+0x16c/0x1f0 [ 68.132019][ T5963] sysfs_warn_dup+0x7f/0xa0 [ 68.132042][ T5963] sysfs_create_dir_ns+0x24b/0x2b0 [ 68.132059][ T5963] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 68.132076][ T5963] ? find_held_lock+0x2b/0x80 [ 68.132093][ T5963] ? do_raw_spin_unlock+0x172/0x230 [ 68.132107][ T5963] kobject_add_internal+0x2c4/0x9b0 [ 68.132123][ T5963] kobject_add+0x16e/0x240 [ 68.132135][ T5963] ? __pfx_kobject_add+0x10/0x10 [ 68.132148][ T5963] ? do_raw_spin_unlock+0x172/0x230 [ 68.132163][ T5963] ? kobject_put+0xab/0x5a0 [ 68.132178][ T5963] device_add+0x288/0x1a70 [ 68.132192][ T5963] ? __pfx_dev_set_name+0x10/0x10 [ 68.132206][ T5963] ? __pfx_device_add+0x10/0x10 [ 68.132218][ T5963] ? mgmt_send_event_skb+0x2fb/0x460 [ 68.132239][ T5963] hci_conn_add_sysfs+0x17e/0x230 [ 68.132268][ T5963] le_conn_complete_evt+0x1075/0x1d70 [ 68.132290][ T5963] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 68.132308][ T5963] ? hci_event_packet+0x459/0x11c0 [ 68.132330][ T5963] hci_le_conn_complete_evt+0x23c/0x370 [ 68.132351][ T5963] hci_le_meta_evt+0x357/0x5e0 [ 68.132362][ T5963] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 68.132382][ T5963] hci_event_packet+0x682/0x11c0 [ 68.132400][ T5963] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 68.132413][ T5963] ? __pfx_hci_event_packet+0x10/0x10 [ 68.132432][ T5963] ? kcov_remote_start+0x3c9/0x6d0 [ 68.132445][ T5963] ? lockdep_hardirqs_on+0x7c/0x110 [ 68.132464][ T5963] hci_rx_work+0x2c5/0x16b0 [ 68.132476][ T5963] ? rcu_is_watching+0x12/0xc0 [ 68.132492][ T5963] process_one_work+0x9cf/0x1b70 [ 68.132510][ T5963] ? __pfx_process_one_work+0x10/0x10 [ 68.132531][ T5963] ? assign_work+0x1a0/0x250 [ 68.132543][ T5963] worker_thread+0x6c8/0xf10 [ 68.132559][ T5963] ? __kthread_parkme+0x19e/0x250 [ 68.132576][ T5963] ? __pfx_worker_thread+0x10/0x10 [ 68.132588][ T5963] kthread+0x3c5/0x780 [ 68.132599][ T5963] ? __pfx_kthread+0x10/0x10 [ 68.132611][ T5963] ? rcu_is_watching+0x12/0xc0 [ 68.132626][ T5963] ? __pfx_kthread+0x10/0x10 [ 68.132637][ T5963] ret_from_fork+0x5d4/0x6f0 [ 68.132654][ T5963] ? __pfx_kthread+0x10/0x10 [ 68.132665][ T5963] ret_from_fork_asm+0x1a/0x30 [ 68.132685][ T5963] [ 68.210135][ T5963] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 68.214900][ T5963] Bluetooth: hci2: failed to register connection device [ 68.424678][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 68.435331][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 68.735767][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 69.312853][ T5959] Bluetooth: hci1: command tx timeout [ 69.405388][ T7129] input: syz0 as /devices/virtual/input/input11 [ 69.519673][ T7143] SELinux: ebitmap: truncated map [ 69.525063][ T7143] SELinux: failed to load policy [ 69.593969][ T7157] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 69.602542][ T7153] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 69.613389][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.626085][ T7160] binder: 7159:7160 ioctl c0046209 0 returned -22 [ 69.627423][ T7153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.631701][ T7153] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 69.635687][ T7153] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 69.711530][ T7171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 69.921798][ T7188] netlink: 'syz.2.349': attribute type 11 has an invalid length. [ 69.935389][ T7188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=7188 comm=syz.2.349 [ 70.056729][ T7196] loop4: detected capacity change from 0 to 2560 [ 70.063477][ T7196] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 70.066206][ T7196] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 70.069572][ T7196] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 70.072474][ T7196] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 70.075695][ T7196] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 70.078437][ T7196] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 70.081355][ T7196] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 70.084673][ T7196] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 70.087498][ T7196] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 70.090185][ T7196] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 70.279259][ T7201] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 70.282011][ T7201] overlayfs: failed to set xattr on upper [ 70.284626][ T7201] overlayfs: ...falling back to redirect_dir=nofollow. [ 70.286913][ T7201] overlayfs: ...falling back to index=off. [ 70.288792][ T7201] overlayfs: ...falling back to uuid=null. [ 70.348830][ T7206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.410480][ T7206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.488367][ T7208] syzkaller0: entered allmulticast mode [ 70.518277][ T34] usb 7-1: USB disconnect, device number 10 [ 70.552053][ T7211] 9pnet_fd: p9_fd_create_tcp (7211): problem connecting socket to 127.0.0.1 [ 70.558660][ T7211] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.840613][ T5959] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 70.841229][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.988795][ T7251] loop7: detected capacity change from 0 to 7 [ 71.086444][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.088725][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.093196][ T6388] Dev loop7: unable to read RDB block 7 [ 71.095166][ T6388] loop7: unable to read partition table [ 71.097066][ T6388] loop7: partition table beyond EOD, truncated [ 71.313294][ T7207] syzkaller0: left allmulticast mode [ 71.435499][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 71.435515][ T40] audit: type=1326 audit(1753449994.936:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.0.373" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f549598e9a9 code=0x0 [ 71.445997][ T40] audit: type=1326 audit(1753449994.936:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.0.373" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f549598e9a9 code=0x0 [ 71.513550][ T40] audit: type=1404 audit(1753449995.006:460): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 71.529433][ T40] audit: type=1404 audit(1753449995.026:461): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 71.548010][ T40] audit: type=1400 audit(1753449995.046:462): avc: denied { read write } for pid=5951 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.558757][ T40] audit: type=1400 audit(1753449995.046:463): avc: denied { open } for pid=5951 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.569810][ T40] audit: type=1400 audit(1753449995.046:464): avc: denied { ioctl } for pid=5951 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.578292][ T40] audit: type=1400 audit(1753449995.066:465): avc: denied { read } for pid=7280 comm="syz.3.376" dev="nsfs" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.587459][ T40] audit: type=1400 audit(1753449995.066:466): avc: denied { open } for pid=7280 comm="syz.3.376" path="net:[4026533023]" dev="nsfs" ino=4026533023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.592523][ T7281] tipc: Enabled bearer , priority 0 [ 71.597650][ T40] audit: type=1400 audit(1753449995.066:467): avc: denied { create } for pid=7280 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.601999][ T7281] syzkaller0: entered promiscuous mode [ 71.606980][ T7281] syzkaller0: entered allmulticast mode [ 71.619782][ T7281] tipc: Resetting bearer [ 72.288489][ T7293] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.366752][ T7300] No source specified [ 72.614984][ T6009] tipc: Node number set to 3555438606 [ 72.674832][ T7315] netlink: 'syz.3.386': attribute type 10 has an invalid length. [ 72.687453][ T7315] team0: Cannot enslave team device to itself [ 72.731936][ T7317] __nla_validate_parse: 2 callbacks suppressed [ 72.731952][ T7317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.387'. [ 73.165109][ T7332] netlink: 84 bytes leftover after parsing attributes in process `syz.0.392'. [ 73.282446][ T7335] xt_CONNSECMARK: invalid mode: 0 [ 73.608663][ T7347] mmap: syz.0.398 (7347): VmData 37466112 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 73.637861][ T7349] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 73.653744][ T7351] netlink: 68 bytes leftover after parsing attributes in process `syz.3.397'. [ 73.656781][ T7352] netlink: 68 bytes leftover after parsing attributes in process `syz.3.397'. [ 73.679921][ T7349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.811633][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7362 comm=syz.3.401 [ 73.817021][ T7362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=7362 comm=syz.3.401 [ 74.010632][ T7393] netlink: 'syz.1.410': attribute type 2 has an invalid length. [ 74.106371][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 74.109393][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 74.169300][ T7413] binder: 7412:7413 ioctl c0046209 0 returned -22 [ 74.402991][ T34] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 74.522977][ T5959] Bluetooth: hci2: command 0x0406 tx timeout [ 74.574350][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.577571][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.581021][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.584112][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 74.588133][ T34] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 74.591049][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.595249][ T34] usb 8-1: config 0 descriptor?? [ 74.799984][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.803982][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.242791][ T6033] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 75.346971][ T5959] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 75.347723][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 75.352122][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 75.383877][ T7435] netlink: 'syz.0.425': attribute type 27 has an invalid length. [ 75.383924][ T7436] netlink: 'syz.0.425': attribute type 27 has an invalid length. [ 75.418533][ T6033] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 108, setting to 64 [ 75.421821][ T6033] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.430193][ T6033] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 75.436001][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 75.437207][ T7437] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.425'. [ 75.438456][ T6033] usb 6-1: Product: syz [ 75.438466][ T6033] usb 6-1: Manufacturer: syz [ 75.438474][ T6033] usb 6-1: SerialNumber: syz [ 75.446295][ T7429] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 75.451069][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.552633][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.568704][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.654426][ T6033] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 75.657961][ T7435] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.660769][ T7435] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.663595][ T7435] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.666323][ T7435] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.698176][ T7435] sit1: left allmulticast mode [ 75.701997][ T7435] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.706584][ T7435] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.710086][ T7435] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.713709][ T7435] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.857019][ C3] usblp0: nonzero write bulk status received: -71 [ 75.863482][ T6064] usb 6-1: USB disconnect, device number 8 [ 75.868793][ T6064] usblp0: removed [ 76.619097][ T40] kauditd_printk_skb: 137 callbacks suppressed [ 76.619111][ T40] audit: type=1400 audit(1753450000.116:605): avc: denied { create } for pid=7450 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.671390][ T40] audit: type=1400 audit(1753450000.166:606): avc: denied { setopt } for pid=7450 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.885355][ T40] audit: type=1400 audit(1753450000.386:607): avc: denied { append } for pid=7457 comm="syz.1.431" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.918842][ T7458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=7458 comm=syz.1.431 [ 77.042922][ T40] audit: type=1400 audit(1753450000.536:608): avc: denied { map } for pid=7461 comm="syz.1.432" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.130870][ T40] audit: type=1400 audit(1753450000.626:609): avc: denied { watch } for pid=7465 comm="syz.1.433" path="/104/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.165325][ T34] usbhid 8-1:0.0: can't add hid device: -71 [ 77.168085][ T34] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 77.172115][ T34] usb 8-1: USB disconnect, device number 7 [ 77.184928][ T40] audit: type=1400 audit(1753450000.686:610): avc: denied { block_suspend } for pid=7465 comm="syz.1.433" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.221779][ T40] audit: type=1400 audit(1753450000.716:611): avc: denied { write } for pid=7480 comm="syz.0.437" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.230076][ T40] audit: type=1400 audit(1753450000.736:612): avc: denied { read write } for pid=7482 comm="syz.3.438" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.238062][ T40] audit: type=1400 audit(1753450000.736:613): avc: denied { open } for pid=7482 comm="syz.3.438" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.250318][ T40] audit: type=1400 audit(1753450000.736:614): avc: denied { ioctl } for pid=7482 comm="syz.3.438" path="socket:[19782]" dev="sockfs" ino=19782 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.261242][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 77.307153][ T5959] Bluetooth: hci2: unexpected subevent 0x0a length: 90 > 30 [ 77.309562][ T5959] Bluetooth: hci2: Invalid handle: 0x3130 > 0x0eff [ 77.832575][ T7526] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.007453][ T7535] deleting an unspecified loop device is not supported. [ 78.011477][ T7535] netlink: 'syz.1.454': attribute type 21 has an invalid length. [ 78.080063][ T7540] syz.1.456: attempt to access beyond end of device [ 78.080063][ T7540] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 78.086287][ T7540] syz.1.456: attempt to access beyond end of device [ 78.086287][ T7540] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 78.110011][ T7540] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 78.112495][ T7540] netlink: 'syz.1.456': attribute type 2 has an invalid length. [ 78.115555][ T7540] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 78.118682][ T7540] __nla_validate_parse: 1 callbacks suppressed [ 78.118692][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 78.124680][ T7542] syz.1.456: attempt to access beyond end of device [ 78.124680][ T7542] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 78.128786][ T7542] syz.1.456: attempt to access beyond end of device [ 78.128786][ T7542] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 78.376113][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 78.378892][ T7563] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 78.381550][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.397313][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 78.472684][ T7572] input: syz0 as /devices/virtual/input/input14 [ 78.480603][ T7567] team0 (unregistering): Port device team_slave_0 removed [ 78.487375][ T7567] team0 (unregistering): Port device team_slave_1 removed [ 78.539753][ T7576] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.546737][ T7576] syzkaller0: entered promiscuous mode [ 78.548797][ T7576] syzkaller0: entered allmulticast mode [ 78.936681][ T7603] netlink: 'syz.3.473': attribute type 21 has an invalid length. [ 78.990688][ T7604] tmpfs: Unknown parameter 'inode.' [ 79.413055][ T7602] pimreg448: entered allmulticast mode [ 79.447207][ T7608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.448878][ T7606] netlink: 'syz.1.475': attribute type 21 has an invalid length. [ 79.450280][ T7608] IPv6: NLM_F_CREATE should be set when creating new route [ 79.455011][ T7608] IPv6: NLM_F_CREATE should be set when creating new route [ 79.457905][ T7609] lo: entered allmulticast mode [ 79.463367][ T7609] tunl0: entered allmulticast mode [ 79.466819][ T7609] gre0: entered allmulticast mode [ 79.484837][ T7609] gretap0: entered allmulticast mode [ 79.489853][ T7609] erspan0: entered allmulticast mode [ 79.494148][ T7609] ip_vti0: entered allmulticast mode [ 79.496810][ T7609] ip6_vti0: entered allmulticast mode [ 79.499394][ T7609] sit0: entered allmulticast mode [ 79.501203][ T7609] ip6tnl0: entered allmulticast mode [ 79.504599][ T7609] ip6gre0: entered allmulticast mode [ 79.509561][ T7609] syz_tun: entered allmulticast mode [ 79.515844][ T7609] ip6gretap0: entered allmulticast mode [ 79.520471][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.523014][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.527588][ T7609] bridge0: entered allmulticast mode [ 79.533960][ T7609] vcan0: entered allmulticast mode [ 79.537247][ T7609] : entered allmulticast mode [ 79.538771][ T7609] bond_slave_0: entered allmulticast mode [ 79.540588][ T7609] bond_slave_1: entered allmulticast mode [ 79.542919][ T7609] batadv0: entered allmulticast mode [ 79.544724][ T7609] team0: entered allmulticast mode [ 79.546263][ T7609] team_slave_0: entered allmulticast mode [ 79.547979][ T7609] team_slave_1: entered allmulticast mode [ 79.550055][ T7609] dummy0: entered allmulticast mode [ 79.555849][ T7609] nlmon0: entered allmulticast mode [ 79.557622][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 79.559890][ T7609] caif0: entered allmulticast mode [ 79.560400][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 79.562347][ T7609] vxcan0: entered allmulticast mode [ 79.565187][ T7616] netlink: 'syz.1.478': attribute type 19 has an invalid length. [ 79.567188][ T7609] vxcan1: entered allmulticast mode [ 79.571935][ T7609] veth0: entered allmulticast mode [ 79.578875][ T7609] veth1: entered allmulticast mode [ 79.585198][ T7609] wg0: entered allmulticast mode [ 79.588562][ T7609] wg1: entered allmulticast mode [ 79.593939][ T7609] wg2: entered allmulticast mode [ 79.598632][ T7609] veth0_to_bridge: entered allmulticast mode [ 79.607753][ T7609] veth1_to_bridge: entered allmulticast mode [ 79.616084][ T7609] veth0_to_bond: entered allmulticast mode [ 79.623545][ T7609] veth1_to_bond: entered allmulticast mode [ 79.632098][ T7609] veth0_to_team: entered allmulticast mode [ 79.641922][ T7609] veth1_to_team: entered allmulticast mode [ 79.647850][ T7609] veth0_to_batadv: entered allmulticast mode [ 79.650957][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.656285][ T7609] batadv_slave_0: entered allmulticast mode [ 79.664236][ T7609] veth1_to_batadv: entered allmulticast mode [ 79.671515][ T7609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.675645][ T7609] batadv_slave_1: entered allmulticast mode [ 79.680013][ T7609] xfrm0: entered allmulticast mode [ 79.684607][ T7609] veth0_to_hsr: entered allmulticast mode [ 79.688628][ T7609] hsr_slave_0: entered allmulticast mode [ 79.691853][ T7609] veth1_to_hsr: entered allmulticast mode [ 79.698551][ T7609] hsr_slave_1: entered allmulticast mode [ 79.705080][ T7609] hsr0: entered allmulticast mode [ 79.709492][ T7609] veth1_virt_wifi: entered allmulticast mode [ 79.714576][ T7609] veth0_virt_wifi: entered allmulticast mode [ 79.717524][ T7609] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 79.720657][ T7609] veth1_vlan: entered allmulticast mode [ 79.727472][ T7609] veth0_vlan: entered allmulticast mode [ 79.734602][ T7609] vlan0: entered allmulticast mode [ 79.736356][ T7609] vlan1: entered allmulticast mode [ 79.742087][ T7609] macvlan0: entered allmulticast mode [ 79.749139][ T7609] macvlan1: entered allmulticast mode [ 79.753203][ T7609] ipvlan0: entered allmulticast mode [ 79.755029][ T7609] ipvlan1: entered allmulticast mode [ 79.757565][ T7609] veth1_macvtap: entered allmulticast mode [ 79.761186][ T7609] veth0_macvtap: entered allmulticast mode [ 79.771177][ T7609] macvtap0: entered allmulticast mode [ 79.776819][ T7609] macsec0: entered allmulticast mode [ 79.782285][ T7609] geneve0: entered allmulticast mode [ 79.787941][ T7609] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.790680][ T7609] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.793585][ T7609] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.796286][ T7609] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.799074][ T7609] geneve1: entered allmulticast mode [ 79.803845][ T7609] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 79.810137][ T7609] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 79.814897][ T7609] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 79.821005][ T7609] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 79.832886][ T7609] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 79.838509][ T7609] bridge1: entered allmulticast mode [ 79.840396][ T7609] batadv0.5: entered allmulticast mode [ 79.842246][ T7609] vxlan0: entered allmulticast mode [ 79.844439][ T7609] ip6erspan0: entered allmulticast mode [ 79.846249][ T7609] bond0: entered allmulticast mode [ 79.847962][ T7609] tipc: Resetting bearer [ 79.850238][ T7609] syzkaller0: left promiscuous mode [ 79.852942][ T7609] K: entered allmulticast mode [ 79.909542][ T7626] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 80.005531][ T7637] loop6: detected capacity change from 0 to 2560 [ 80.009922][ T6391] buffer_io_error: 310 callbacks suppressed [ 80.009936][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.016180][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.019453][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.023050][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.026335][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.029632][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.036064][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.039435][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.042498][ T6391] ldm_validate_partition_table(): Disk read failed. [ 80.045974][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.049473][ T6391] Buffer I/O error on dev loop6, logical block 0, async page read [ 80.053019][ T6391] Dev loop6: unable to read RDB block 0 [ 80.057443][ T6391] loop6: unable to read partition table [ 80.066501][ T7637] ldm_validate_partition_table(): Disk read failed. [ 80.069572][ T7637] Dev loop6: unable to read RDB block 0 [ 80.071984][ T7637] loop6: unable to read partition table [ 80.074245][ T7637] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 80.280278][ T7655] Cannot find del_set index 85 as target [ 80.289381][ T7655] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 80.307570][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.319021][ T7655] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.322171][ T7655] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.325113][ T7655] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.327898][ T7655] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.332042][ T7655] bond1: (slave geneve2): making interface the new active one [ 80.338257][ T7655] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 80.466318][ T5959] Bluetooth: hci2: unexpected event for opcode 0xb2cf [ 80.625628][ T7677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.626153][ T7678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.633767][ T7678] overlayfs: missing 'lowerdir' [ 80.634888][ T7677] overlayfs: missing 'lowerdir' [ 80.665821][ T7682] vlan2: entered allmulticast mode [ 80.698798][ T7686] netlink: 64 bytes leftover after parsing attributes in process `syz.3.497'. [ 80.802432][ T7688] tmpfs: Unknown parameter '' [ 81.472851][ T6033] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 81.623960][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.627404][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.630441][ T6033] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.634802][ T6033] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.637663][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.641451][ T6033] usb 6-1: config 0 descriptor?? [ 82.053517][ T6033] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.055965][ T6033] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.058295][ T6033] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.060581][ T6033] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.062956][ T6033] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.065267][ T6033] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 82.075495][ T6033] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.259919][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 82.259930][ T40] audit: type=1400 audit(1753450005.821:668): avc: denied { associate } for pid=7701 comm="syz.0.502" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.316779][ T40] audit: type=1400 audit(1753450005.881:669): avc: denied { connect } for pid=7706 comm="syz.0.504" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.324063][ T40] audit: type=1400 audit(1753450005.881:670): avc: denied { name_connect } for pid=7706 comm="syz.0.504" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 82.573938][ T7692] team_slave_1: mtu less than device minimum [ 82.812805][ T839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 82.962852][ T839] usb 8-1: Using ep0 maxpacket: 32 [ 82.966324][ T839] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.970946][ T839] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.974556][ T839] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.977704][ T839] usb 8-1: Product: syz [ 82.979330][ T839] usb 8-1: Manufacturer: syz [ 82.980966][ T839] usb 8-1: SerialNumber: syz [ 82.984861][ T839] usb 8-1: config 0 descriptor?? [ 82.986934][ T7692] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.989788][ T839] hub 8-1:0.0: bad descriptor, ignoring hub [ 82.991673][ T839] hub 8-1:0.0: probe with driver hub failed with error -5 [ 83.223615][ T40] audit: type=1400 audit(1753450006.791:671): avc: denied { append } for pid=7716 comm="syz.0.506" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.370842][ T40] audit: type=1400 audit(1753450006.931:672): avc: denied { read } for pid=7718 comm="syz.0.507" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.379140][ T40] audit: type=1400 audit(1753450006.931:673): avc: denied { open } for pid=7718 comm="syz.0.507" path="/154/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.380292][ T7721] block device autoloading is deprecated and will be removed. [ 83.393752][ T7719] md: md2 stopped. [ 83.395784][ T40] audit: type=1400 audit(1753450006.961:674): avc: denied { ioctl } for pid=7718 comm="syz.0.507" path="/154/file0/file0" dev="fuse" ino=4 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 83.560900][ T34] usb 8-1: USB disconnect, device number 8 [ 83.570778][ T5959] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 83.570796][ T40] audit: type=1400 audit(1753450007.131:675): avc: denied { append } for pid=7728 comm="syz.0.509" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.584680][ T40] audit: type=1400 audit(1753450007.131:676): avc: denied { create } for pid=7728 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.591033][ T40] audit: type=1400 audit(1753450007.131:677): avc: denied { setopt } for pid=7728 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.852251][ T7749] binder: 7748:7749 ioctl c0286404 2000000002c0 returned -22 [ 83.883263][ T7752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.912934][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 84.024637][ T7766] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 84.028653][ T7766] comedi comedi3: comedi_config --init_data is deprecated [ 84.034804][ T74] usb 6-1: USB disconnect, device number 9 [ 84.059573][ T7768] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 84.072803][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 84.075784][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 84.088281][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 84.091287][ T34] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 84.095035][ T34] usb 8-1: Product: syz [ 84.096842][ T34] usb 8-1: Manufacturer: ˔⊸얩龳蚀봼봯ⷛ䣅쇵瀬᝞淌怒鯡Ⱶ섛㉕䔌邾摨隄㫜ᴊ켊寱麻 [ 84.097608][ T7773] xt_l2tp: v2 tid > 0xffff: 150994944 [ 84.103707][ T34] usb 8-1: config 0 descriptor?? [ 84.107951][ T7691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.115878][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 84.118424][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 84.121326][ T7773] wireguard0: entered promiscuous mode [ 84.125268][ T7773] wireguard0: entered allmulticast mode [ 84.392514][ T7782] netlink: 'syz.1.523': attribute type 63 has an invalid length. [ 84.395563][ T7782] mac80211_hwsim hwsim9 `: renamed from wlan1 (while UP) [ 84.428121][ T7784] openvswitch: netlink: Unknown key attributes 2 [ 84.442966][ T74] usb 8-1: USB disconnect, device number 9 [ 84.590798][ T7794] binder: BINDER_SET_CONTEXT_MGR already set [ 84.594684][ T7794] binder: 7793:7794 ioctl 4018620d 200000000040 returned -16 [ 84.770503][ T7798] netlink: 'syz.1.529': attribute type 17 has an invalid length. [ 84.874213][ T5959] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 85.170933][ T7841] ipt_REJECT: ECHOREPLY no longer supported. [ 85.335484][ T7844] overlayfs: failed to resolve './file1': -2 [ 85.432943][ T839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.592777][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 85.595657][ T839] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.598476][ T839] usb 5-1: config 0 has no interface number 0 [ 85.600423][ T839] usb 5-1: config 0 interface 184 has no altsetting 0 [ 85.604529][ T839] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.607887][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.610603][ T839] usb 5-1: Product: syz [ 85.611924][ T839] usb 5-1: Manufacturer: syz [ 85.614463][ T839] usb 5-1: SerialNumber: syz [ 85.618505][ T839] usb 5-1: config 0 descriptor?? [ 85.625699][ T839] smsc75xx v1.0.0 [ 85.627258][ T839] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 85.631516][ T839] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 85.834732][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.838241][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.963648][ T24] usb 5-1: USB disconnect, device number 4 [ 86.017454][ T7860] binder: 7859:7860 ioctl 400c620e 2000000004c0 returned -22 [ 86.022513][ T5959] Bluetooth: hci2: unexpected subevent 0x06 length: 9 < 10 [ 86.135258][ T5963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.138317][ T5963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.141723][ T5963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.146397][ T5963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.150108][ T5963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.264637][ T7873] chnl_net:caif_netlink_parms(): no params data found [ 86.332247][ T7886] netlink: 'syz.3.550': attribute type 2 has an invalid length. [ 86.366597][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.368871][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.371121][ T7873] bridge_slave_0: entered allmulticast mode [ 86.373392][ T74] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 86.374097][ T7873] bridge_slave_0: entered promiscuous mode [ 86.379393][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.381693][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.384732][ T7873] bridge_slave_1: entered allmulticast mode [ 86.387316][ T7873] bridge_slave_1: entered promiscuous mode [ 86.431428][ T7873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.436980][ T7873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.478002][ T7873] team0: Port device team_slave_0 added [ 86.484276][ T7873] team0: Port device team_slave_1 added [ 86.513732][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.515921][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.524349][ T7873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.538001][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.540260][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.542858][ T74] usb 6-1: Using ep0 maxpacket: 32 [ 86.548532][ T7873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.552371][ T74] usb 6-1: config 1 has an invalid descriptor of length 156, skipping remainder of the config [ 86.556443][ T74] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.563234][ T74] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.566338][ T74] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.569800][ T74] usb 6-1: Product: ఁ [ 86.570907][ T7891] QAT: failed to copy from user cfg_data. [ 86.571174][ T74] usb 6-1: Manufacturer: 虮킍䍇좩ￏ′塩㈢ꠂ嚑↝줒ꊝ猦汝僖孫訊﷓䉡ʰ겐뜖㛋鈷ᑤ猊⏳쇙쳏耎㭾⮿妡䝟䖓પ敠葯㝂㰔뼾䮄㲾㝄 [ 86.578567][ T74] usb 6-1: SerialNumber: Ф [ 86.609569][ T7873] hsr_slave_0: entered promiscuous mode [ 86.612252][ T7873] hsr_slave_1: entered promiscuous mode [ 86.614762][ T7873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.617163][ T7873] Cannot create hsr debugfs directory [ 86.782373][ T7873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.792530][ T7873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.797688][ T7873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.802186][ T7873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.823370][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.826460][ T7873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.829517][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.832492][ T7873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.865996][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.900546][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.910447][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.918285][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.934992][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.942949][ T7873] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.949312][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.951590][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.958724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.961542][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.986901][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.997174][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.997963][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.001211][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.006900][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.009408][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.014932][ T7910] sctp: [Deprecated]: syz.0.559 (pid 7910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.014932][ T7910] Use struct sctp_sack_info instead [ 87.020807][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 87.024675][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 87.027444][ T7910] netlink: 'syz.0.559': attribute type 7 has an invalid length. [ 87.054416][ T74] usb 6-1: 0:2 : does not exist [ 87.073206][ T74] usb 6-1: USB disconnect, device number 10 [ 87.078208][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.100651][ T6391] udevd[6391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.117151][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7919 comm=syz.0.561 [ 87.176967][ T7873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.199172][ T7907] chnl_net:caif_netlink_parms(): no params data found [ 87.249624][ T71] bridge_slave_1: left promiscuous mode [ 87.253224][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.261871][ T71] bridge_slave_0: left promiscuous mode [ 87.264812][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.352272][ T71] bond1 (unregistering): (slave geneve2): Releasing active interface [ 87.499106][ T71] tipc: Disabling bearer [ 87.588501][ T71]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.591881][ T71]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.595581][ T71]  (unregistering): (slave batadv0): Releasing backup interface [ 87.598653][ T71]  (unregistering): Released all slaves [ 87.630349][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 87.630362][ T40] audit: type=1400 audit(1753450011.191:725): avc: denied { read } for pid=7944 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.665858][ T71] bond0 (unregistering): Released all slaves [ 87.681779][ T40] audit: type=1400 audit(1753450011.241:726): avc: denied { setopt } for pid=7944 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.728971][ T71] bond1 (unregistering): Released all slaves [ 87.767007][ T40] audit: type=1400 audit(1753450011.331:727): avc: denied { search } for pid=5663 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.775724][ T40] audit: type=1400 audit(1753450011.331:728): avc: denied { search } for pid=5663 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.788209][ T40] audit: type=1400 audit(1753450011.331:729): avc: denied { search } for pid=5663 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.799916][ T40] audit: type=1400 audit(1753450011.331:730): avc: denied { read } for pid=5663 comm="dhcpcd" name="n106" dev="tmpfs" ino=4250 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.803734][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.567'. [ 87.806874][ T40] audit: type=1400 audit(1753450011.331:731): avc: denied { open } for pid=5663 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=4250 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.817991][ T40] audit: type=1400 audit(1753450011.331:732): avc: denied { getattr } for pid=5663 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=4250 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.832256][ T71] tipc: Left network mode [ 87.833874][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.836267][ T40] audit: type=1400 audit(1753450011.401:733): avc: denied { setopt } for pid=7957 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.836834][ T7958] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 87.844182][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.849099][ T7907] bridge_slave_0: entered allmulticast mode [ 87.851808][ T7907] bridge_slave_0: entered promiscuous mode [ 87.856552][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.859625][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.862968][ T7907] bridge_slave_1: entered allmulticast mode [ 87.866649][ T7907] bridge_slave_1: entered promiscuous mode [ 87.889745][ T40] audit: type=1400 audit(1753450011.451:734): avc: denied { read open } for pid=7962 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1910 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.898810][ T7958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.899890][ T7958] team0: Port device bond0 added [ 87.900304][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 87.949375][ T7907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.014640][ T7967] team0 (unregistering): Port device team_slave_0 removed [ 88.018274][ T7967] team0 (unregistering): Port device team_slave_1 removed [ 88.026825][ T7967] team0 (unregistering): Port device bond0 removed [ 88.045349][ T7907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.146789][ T7907] team0: Port device team_slave_0 added [ 88.150358][ T7907] team0: Port device team_slave_1 added [ 88.183310][ T71] hsr_slave_0: left promiscuous mode [ 88.186318][ T71] hsr_slave_1: left promiscuous mode [ 88.188428][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.191249][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.202852][ T5963] Bluetooth: hci4: command tx timeout [ 88.463780][ T7989] overlayfs: missing 'lowerdir' [ 88.684935][ T71] team0 (unregistering): Port device team_slave_1 removed [ 88.740817][ T71] team0 (unregistering): Port device team_slave_0 removed [ 89.083523][ T5963] Bluetooth: hci2: command tx timeout [ 89.195218][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.197482][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.205922][ T7907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.211984][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.214786][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.224820][ T7907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.295391][ T7907] hsr_slave_0: entered promiscuous mode [ 89.298275][ T7907] hsr_slave_1: entered promiscuous mode [ 89.300340][ T7907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.302864][ T7907] Cannot create hsr debugfs directory [ 89.305851][ T7873] veth0_vlan: entered promiscuous mode [ 89.351871][ T7873] veth1_vlan: entered promiscuous mode [ 89.427268][ T8004] trusted_key: syz.0.577 sent an empty control message without MSG_MORE. [ 89.431391][ T8004] cgroup: none used incorrectly [ 89.456216][ T7873] veth0_macvtap: entered promiscuous mode [ 89.460001][ T7999] syzkaller1: entered promiscuous mode [ 89.461818][ T7999] syzkaller1: entered allmulticast mode [ 89.496835][ T7873] veth1_macvtap: entered promiscuous mode [ 89.548418][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.566572][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.570915][ T7907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.577800][ T7907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.582004][ T7873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.586549][ T7873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.589269][ T7873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.591928][ T7873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.597491][ T7907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.601439][ T7907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.614539][ T71] IPVS: stop unused estimator thread 0... [ 89.650497][ T8026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=8026 comm=syz.0.580 [ 89.686362][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.688863][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.705656][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.717215][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.719712][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.721169][ T7907] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.728001][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.730295][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.742372][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.744696][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.862230][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.914051][ T8045] gfs2: gfs2 mount does not exist [ 89.941986][ T8050] netlink: 272 bytes leftover after parsing attributes in process `syz.1.583'. [ 89.943317][ T5748] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 90.026773][ T7907] veth0_vlan: entered promiscuous mode [ 90.031652][ T7907] veth1_vlan: entered promiscuous mode [ 90.049588][ T7907] veth0_macvtap: entered promiscuous mode [ 90.053866][ T7907] veth1_macvtap: entered promiscuous mode [ 90.064433][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.065835][ T8064] vivid-000: ================= START STATUS ================= [ 90.069777][ T8064] vivid-000: Test Pattern: 75% Colorbar [ 90.070260][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.072036][ T8064] vivid-000: Fill Percentage of Frame: 100 [ 90.077642][ T8064] vivid-000: Horizontal Movement: No Movement [ 90.078391][ T7907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.079626][ T8064] vivid-000: Vertical Movement: [ 90.082360][ T7907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084981][ T8064] No Movement [ 90.089100][ T8064] vivid-000: OSD Text Mode: [ 90.089101][ T7907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.089109][ T8064] All [ 90.090606][ T8064] [ 90.094200][ T7907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.094772][ T8064] vivid-000: Show Border: [ 90.095185][ T5748] usb 5-1: not running at top speed; connect to a high speed hub [ 90.095962][ T5748] usb 5-1: config 1 interface 0 altsetting 40 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.098330][ T8064] false [ 90.099561][ T5748] usb 5-1: config 1 interface 0 has no altsetting 0 [ 90.102435][ T8064] [ 90.108338][ T5748] usb 5-1: New USB device found, idVendor=0b05, idProduct=196b, bcdDevice= 0.40 [ 90.110318][ T8064] vivid-000: Show Square: false [ 90.112536][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.114159][ T8064] vivid-000: Sensor Flipped Horizontally: false [ 90.114175][ T8064] vivid-000: Sensor Flipped Vertically: false [ 90.114186][ T8064] vivid-000: Insert SAV Code in Image: false [ 90.114197][ T8064] vivid-000: Insert EAV Code in Image: false [ 90.114208][ T8064] vivid-000: Insert Video Guard Band: false [ 90.114220][ T8064] vivid-000: Reduced Framerate: false [ 90.114231][ T8064] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 90.114243][ T8064] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 90.114255][ T8064] vivid-000: Enable Capture Cropping: true [ 90.114266][ T8064] vivid-000: Enable Capture Composing: true [ 90.114277][ T8064] vivid-000: Enable Capture Scaler: true [ 90.114288][ T8064] vivid-000: Timestamp Source: End of Frame [ 90.114303][ T8064] vivid-000: Colorspace: sRGB [ 90.114314][ T8064] vivid-000: Transfer Function: Default [ 90.114325][ T8064] vivid-000: Y'CbCr Encoding: Default [ 90.114336][ T8064] vivid-000: HSV Encoding: Hue 0-179 [ 90.114347][ T8064] vivid-000: Quantization: Default [ 90.114358][ T8064] vivid-000: Apply Alpha To Red Only: false [ 90.114369][ T8064] vivid-000: Standard Aspect Ratio: 4x3 [ 90.114380][ T8064] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 90.114395][ T8064] vivid-000: DV Timings: 640x480p59 inactive [ 90.114409][ T8064] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 90.114421][ T8064] vivid-000: Maximum EDID Blocks: 2 [ 90.114433][ T8064] vivid-000: Limited RGB Range (16-235): false [ 90.114444][ T8064] vivid-000: Rx RGB Quantization Range: Automatic [ 90.114456][ T8064] vivid-000: Power Present: 0x00000001 [ 90.114469][ T8064] tpg source WxH: 320x180 (R'G'B) [ 90.114476][ T8064] tpg field: 1 [ 90.114480][ T8064] tpg crop: (0,0)/320x180 [ 90.114487][ T8064] tpg compose: (0,0)/320x180 [ 90.117171][ T5748] usb 5-1: Product: ꢟꮽ⏵Ռ⸬荡⇨槽䆇㾮ﺱỬⲽ景㿨䎦㳨탰趟ᆊ화㰙횈ᢈﶎ恴唝耏筐淃쭟鳆齿䒒㛙肫샔姖횬ႜ뱼ꆫ⦮槒㑟炎덛忝잗ᳱ女ɥ唤簸鸘嬂皊铌஽ꐄ퇇俜 [ 90.119243][ T8064] tpg colorspace: 8 [ 90.120506][ T5748] usb 5-1: Manufacturer: ఇ [ 90.122510][ T8064] tpg transfer function: 0/0 [ 90.128131][ T5748] usb 5-1: SerialNumber: ф [ 90.131525][ T8064] tpg quantization: 0/0 [ 90.185730][ T8064] tpg RGB range: 0/2 [ 90.187012][ T8064] vivid-000: ================== END STATUS ================== [ 90.215641][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.218230][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.239382][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.242040][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.273353][ T5963] Bluetooth: hci4: command tx timeout [ 90.278449][ T8072] bridge: RTM_NEWNEIGH with invalid ether address [ 90.556384][ T5748] usbhid 5-1:1.0: can't add hid device: -71 [ 90.558270][ T5748] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 90.562826][ T6033] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 90.564935][ T5748] usb 5-1: USB disconnect, device number 5 [ 90.713046][ T6033] usb 6-1: Using ep0 maxpacket: 32 [ 90.727449][ T6033] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 90.730244][ T6033] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 90.741860][ T6033] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.745844][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.748319][ T6033] usb 6-1: Product: ј [ 90.749600][ T6033] usb 6-1: Manufacturer: ℍ촡䤤ㆰ氲쟋ů嫧戉ⴅnj錤汏斁¢뇊֛㗰嘄䧐ꪚ妠蔳山裙婭畹ᕽ๧䢅淕蘴ꕣ黺ਖ਼⨐朡ﬓ⻟땉垓㾭늕ꝵ㍉윧둗ꗘ儥⃂꼣텒橮쀱聋靴켡ꂺ氒묨곒涀ᓧ腻퍁㼜暱횂槣藠蹚핚ᐼ갍턵ẟ褌췉壅늋 [ 90.758309][ T6033] usb 6-1: SerialNumber: ⺠र三䀭ȳ枎㴲幣莅鄷䎬幬秏℟ü䊍攬肸乂菊㟛ꖐ㓞๗뭃ᱴⷒヾ蜟ᨈ妝ⵘ⠼ᇠ랩ꏘ᪏ﾞﯤ혿ꙙኽ箼驑틠ⶾ㊏ꮄଥ온ꯝۋ῍満苠옦椵 [ 90.773432][ T6033] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 90.776583][ T6033] usb 6-1: no configuration chosen from 1 choice [ 91.039240][ T8126] Cannot find del_set index 85 as target [ 91.152949][ T5963] Bluetooth: hci2: command tx timeout [ 91.203528][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8135 comm=syz.5.599 [ 91.208367][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.599'. [ 91.306052][ T8139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.381599][ T8157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 91.609243][ T8171] random: crng reseeded on system resumption [ 91.662793][ T8173] @: renamed from vlan0 [ 92.352858][ T5963] Bluetooth: hci4: command tx timeout [ 92.489233][ T8173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.586268][ T8189] syzkaller0: entered promiscuous mode [ 92.587985][ T8189] syzkaller0: entered allmulticast mode [ 93.082878][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.232956][ T5963] Bluetooth: hci2: command tx timeout [ 93.237505][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.242069][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.247061][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 93.250555][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.255676][ T10] usb 5-1: config 0 descriptor?? [ 93.333939][ T29] usb 6-1: USB disconnect, device number 11 [ 93.395862][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 93.395872][ T40] audit: type=1400 audit(1753450016.961:780): avc: denied { execute } for pid=8214 comm="syz.1.618" path="/dev/adsp1" dev="devtmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 93.454222][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 93.460389][ T8219] netlink: 64 bytes leftover after parsing attributes in process `syz.1.620'. [ 93.461152][ T8200] netlink: 'syz.0.614': attribute type 29 has an invalid length. [ 93.475070][ T5963] Bluetooth: hci3: unexpected event for opcode 0x080d [ 93.489684][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 93.491659][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 93.495909][ T10] usb 5-1: USB disconnect, device number 6 [ 93.508252][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'. [ 93.536926][ T40] audit: type=1400 audit(1753450017.101:781): avc: denied { append } for pid=8226 comm="syz.1.622" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.544656][ T8227] syz.1.622: attempt to access beyond end of device [ 93.544656][ T8227] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 93.549215][ T8227] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 93.579371][ T8230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 93.647873][ T8237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.691208][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 94.072794][ T6016] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 94.247921][ T6016] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.250816][ T6016] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.253968][ T6016] usb 10-1: Product: syz [ 94.255357][ T6016] usb 10-1: Manufacturer: syz [ 94.256868][ T6016] usb 10-1: SerialNumber: syz [ 94.261906][ T6016] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 94.265009][ T40] audit: type=1400 audit(1753450017.831:782): avc: denied { bind } for pid=8291 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.277435][ T40] audit: type=1400 audit(1753450017.841:783): avc: denied { firmware_load } for pid=34 comm="kworker/3:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 94.284025][ T34] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.335094][ T40] audit: type=1400 audit(1753450017.901:784): avc: denied { read } for pid=8296 comm="syz.0.642" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.369350][ T40] audit: type=1400 audit(1753450017.931:785): avc: denied { cmd } for pid=8298 comm="syz.0.643" path="socket:[26680]" dev="sockfs" ino=26680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.376737][ T40] audit: type=1400 audit(1753450017.931:786): avc: denied { map } for pid=8293 comm="syz.4.641" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.380901][ T8295] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 94.392588][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.397099][ T8295] bridge_slave_1: left allmulticast mode [ 94.399201][ T8295] bridge_slave_1: left promiscuous mode [ 94.401123][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.408851][ T8295] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 94.433356][ T5963] Bluetooth: hci4: command tx timeout [ 94.516527][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.520138][ T40] audit: type=1400 audit(1753450018.081:787): avc: denied { setopt } for pid=8302 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.521690][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.544138][ T10] usb 10-1: USB disconnect, device number 2 [ 94.603548][ T40] audit: type=1400 audit(1753450018.171:788): avc: denied { call } for pid=8309 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 94.626679][ T40] audit: type=1400 audit(1753450018.191:789): avc: denied { read } for pid=8313 comm="syz.0.648" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.674450][ T8319] netlink: 28 bytes leftover after parsing attributes in process `syz.5.649'. [ 94.738729][ T8323] IPVS: Scheduler module ip_vs_sip not found [ 94.935784][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.658'. [ 94.939589][ T8345] usb usb8: usbfs: process 8345 (syz.0.654) did not claim interface 0 before use [ 94.940649][ T8344] IPv6: sit1: Disabled Multicast RS [ 94.945416][ T8344] sit1: entered allmulticast mode [ 95.061876][ T8351] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 95.061940][ T24] IPVS: starting estimator thread 0... [ 95.068867][ T8351] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 95.182896][ T8352] IPVS: using max 42 ests per chain, 100800 per kthread [ 95.194817][ T8362] program syz.4.666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.312821][ T5963] Bluetooth: hci2: command tx timeout [ 95.326225][ T34] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 95.332960][ T34] ath9k_htc: Failed to initialize the device [ 95.336306][ T10] usb 10-1: ath9k_htc: USB layer deinitialized [ 95.501348][ T8410] 9pnet_virtio: no channels available for device syz [ 95.659790][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 95.663187][ T8420] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 95.683384][ T74] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.845435][ T74] usb 9-1: config 0 has no interfaces? [ 95.858136][ T74] usb 9-1: New USB device found, idVendor=14aa, idProduct=2101, bcdDevice= f.79 [ 95.861733][ T74] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.866284][ T74] usb 9-1: Product: syz [ 95.867800][ T74] usb 9-1: Manufacturer: syz [ 95.869369][ T74] usb 9-1: SerialNumber: syz [ 95.872383][ T74] usb 9-1: config 0 descriptor?? [ 96.080952][ T74] usb 9-1: USB disconnect, device number 2 [ 96.491275][ T8428] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.529858][ T8423] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 96.558084][ T8432] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.681'. [ 96.563497][ T8432] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 96.568414][ T8432] VFS: Can't find a romfs filesystem on dev nullb0. [ 96.568414][ T8432] [ 96.629399][ T8439] omfs: Invalid superblock (0) [ 96.679823][ T8446] blktrace: Concurrent blktraces are not allowed on sg0 [ 96.911293][ T8458] 9pnet_fd: Insufficient options for proto=fd [ 96.982828][ T839] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 97.142899][ T839] usb 9-1: Using ep0 maxpacket: 16 [ 97.148380][ T839] usb 9-1: config 251 has an invalid interface number: 117 but max is 0 [ 97.152579][ T839] usb 9-1: config 251 has no interface number 0 [ 97.156909][ T839] usb 9-1: config 251 interface 117 has no altsetting 0 [ 97.161728][ T839] usb 9-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= d.3e [ 97.168501][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.171092][ T839] usb 9-1: Product: syz [ 97.172428][ T839] usb 9-1: Manufacturer: syz [ 97.174093][ T839] usb 9-1: SerialNumber: syz [ 97.206433][ T8479] binder: 8478:8479 ioctl 4b66 2000000024c0 returned -22 [ 97.267553][ T8486] syz.0.697: attempt to access beyond end of device [ 97.267553][ T8486] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 97.272560][ T8486] syz.0.697: attempt to access beyond end of device [ 97.272560][ T8486] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 97.277363][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 97.281544][ T8486] syz.0.697: attempt to access beyond end of device [ 97.281544][ T8486] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 97.286181][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 97.290153][ T8486] syz.0.697: attempt to access beyond end of device [ 97.290153][ T8486] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 97.295646][ T8486] syz.0.697: attempt to access beyond end of device [ 97.295646][ T8486] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 97.299963][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 97.305056][ T8486] syz.0.697: attempt to access beyond end of device [ 97.305056][ T8486] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 97.308929][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 97.312212][ T8486] syz.0.697: attempt to access beyond end of device [ 97.312212][ T8486] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 97.317845][ T8486] syz.0.697: attempt to access beyond end of device [ 97.317845][ T8486] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 97.321889][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 97.325205][ T8486] syz.0.697: attempt to access beyond end of device [ 97.325205][ T8486] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 97.329287][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 97.332562][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 97.337715][ T8486] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 97.340721][ T8486] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 97.404964][ T8484] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 97.409316][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.413334][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.438293][ T8493] nfs4: Unknown parameter 'rdma/btrfs-control' [ 97.481502][ T8496] bridge_slave_0: left allmulticast mode [ 97.484238][ T8496] bridge_slave_0: left promiscuous mode [ 97.486196][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.493439][ T8496] bridge_slave_1: left allmulticast mode [ 97.495370][ T8496] bridge_slave_1: left promiscuous mode [ 97.497941][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.504405][ T8496] bond0: (slave bond_slave_0): Releasing backup interface [ 97.509208][ T8496] bond0: (slave bond_slave_1): Releasing backup interface [ 97.515424][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.522601][ T8496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.529870][ T8496] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 97.554671][ T5959] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 97.558142][ T5959] Bluetooth: hci3: Injecting HCI hardware error event [ 97.561768][ T5959] Bluetooth: hci3: hardware error 0x00 [ 97.608029][ T8499] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 97.620228][ T8499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.625986][ T8499] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.635210][ T8499] input: syz0 as /devices/virtual/input/input15 [ 98.410354][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 98.410367][ T40] audit: type=1400 audit(1753450021.971:823): avc: denied { name_connect } for pid=8559 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 98.501520][ T8513] ================================================================== [ 98.504070][ T8513] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 98.506636][ T8513] Read of size 1 at addr ffff888025284ab0 by task syz.0.704/8513 [ 98.509965][ T8513] [ 98.510974][ T8513] CPU: 1 UID: 0 PID: 8513 Comm: syz.0.704 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 98.510991][ T8513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.510999][ T8513] Call Trace: [ 98.511004][ T8513] [ 98.511008][ T8513] dump_stack_lvl+0x116/0x1f0 [ 98.511029][ T8513] print_report+0xcd/0x610 [ 98.511040][ T8513] ? __virt_addr_valid+0x81/0x610 [ 98.511054][ T8513] ? __phys_addr+0xe8/0x180 [ 98.511067][ T8513] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.511083][ T8513] kasan_report+0xe0/0x110 [ 98.511093][ T8513] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.511109][ T8513] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.511124][ T8513] __kasan_check_byte+0x36/0x50 [ 98.511135][ T8513] lock_acquire+0xfc/0x350 [ 98.511146][ T8513] ? __pfx_autoremove_wake_function+0x10/0x10 [ 98.511163][ T8513] ? p9_fd_poll+0x1db/0x2c0 [ 98.511183][ T8513] _raw_spin_lock_irqsave+0x3a/0x60 [ 98.511198][ T8513] ? remove_wait_queue+0x25/0x180 [ 98.511212][ T8513] remove_wait_queue+0x25/0x180 [ 98.511227][ T8513] p9_fd_close+0xcb/0x590 [ 98.511241][ T8513] p9_client_create+0x9a7/0x11c0 [ 98.511254][ T8513] ? __pfx_p9_client_create+0x10/0x10 [ 98.511268][ T8513] ? rcu_is_watching+0x12/0xc0 [ 98.511284][ T8513] ? lockdep_init_map_type+0x5c/0x280 [ 98.511295][ T8513] ? __raw_spin_lock_init+0x3a/0x110 [ 98.511308][ T8513] v9fs_session_init+0x1f7/0x1a80 [ 98.511330][ T8513] ? __pfx_v9fs_session_init+0x10/0x10 [ 98.511346][ T8513] v9fs_mount+0xc5/0xa30 [ 98.511361][ T8513] ? __pfx_v9fs_mount+0x10/0x10 [ 98.511377][ T8513] ? cap_capable+0xb3/0x250 [ 98.511393][ T8513] ? __pfx_v9fs_mount+0x10/0x10 [ 98.511409][ T8513] legacy_get_tree+0x10c/0x220 [ 98.511421][ T8513] vfs_get_tree+0x8b/0x340 [ 98.511437][ T8513] path_mount+0x1414/0x2020 [ 98.511449][ T8513] ? kmem_cache_free+0x2d1/0x4d0 [ 98.511464][ T8513] ? __pfx_path_mount+0x10/0x10 [ 98.511476][ T8513] ? putname+0x154/0x1a0 [ 98.511488][ T8513] __x64_sys_mount+0x28d/0x310 [ 98.511500][ T8513] ? __pfx___x64_sys_mount+0x10/0x10 [ 98.511513][ T8513] do_syscall_64+0xcd/0x4c0 [ 98.511524][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.511536][ T8513] RIP: 0033:0x7f549598e9a9 [ 98.511545][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.511557][ T8513] RSP: 002b:00007f54968cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.511568][ T8513] RAX: ffffffffffffffda RBX: 00007f5495bb5fa0 RCX: 00007f549598e9a9 [ 98.511575][ T8513] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 98.511582][ T8513] RBP: 00007f5495a10d69 R08: 0000200000000500 R09: 0000000000000000 [ 98.511588][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.511595][ T8513] R13: 0000000000000000 R14: 00007f5495bb5fa0 R15: 00007ffd45748648 [ 98.511605][ T8513] [ 98.511609][ T8513] [ 98.602195][ T8513] Allocated by task 8499: [ 98.603551][ T8513] kasan_save_stack+0x33/0x60 [ 98.605037][ T8513] kasan_save_track+0x14/0x30 [ 98.606500][ T8513] __kasan_kmalloc+0xaa/0xb0 [ 98.607959][ T8513] comedi_device_postconfig+0x2cb/0xc80 [ 98.609736][ T8513] comedi_device_attach+0x3cf/0x900 [ 98.611370][ T8513] do_devconfig_ioctl+0x1a7/0x580 [ 98.612980][ T8513] comedi_unlocked_ioctl+0x165d/0x2f00 [ 98.614697][ T8513] __x64_sys_ioctl+0x18e/0x210 [ 98.616223][ T8513] do_syscall_64+0xcd/0x4c0 [ 98.617816][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.620205][ T8513] [ 98.621183][ T8513] Freed by task 8514: [ 98.622748][ T8513] kasan_save_stack+0x33/0x60 [ 98.624625][ T8513] kasan_save_track+0x14/0x30 [ 98.626472][ T8513] kasan_save_free_info+0x3b/0x60 [ 98.628450][ T8513] __kasan_slab_free+0x51/0x70 [ 98.630343][ T8513] kfree+0x2b4/0x4d0 [ 98.631891][ T8513] comedi_device_detach+0x2a4/0x9e0 [ 98.633975][ T8513] do_devconfig_ioctl+0x46c/0x580 [ 98.635947][ T8513] comedi_unlocked_ioctl+0x165d/0x2f00 [ 98.638132][ T8513] __x64_sys_ioctl+0x18e/0x210 [ 98.640025][ T8513] do_syscall_64+0xcd/0x4c0 [ 98.641903][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.644271][ T8513] [ 98.645232][ T8513] The buggy address belongs to the object at ffff888025284a00 [ 98.645232][ T8513] which belongs to the cache kmalloc-256 of size 256 [ 98.650612][ T8513] The buggy address is located 176 bytes inside of [ 98.650612][ T8513] freed 256-byte region [ffff888025284a00, ffff888025284b00) [ 98.655866][ T8513] [ 98.656850][ T8513] The buggy address belongs to the physical page: [ 98.659372][ T8513] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25284 [ 98.662270][ T8513] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 98.664692][ T8513] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 98.667185][ T8513] page_type: f5(slab) [ 98.668905][ T8513] raw: 00fff00000000040 ffff88801b842b40 ffffea0000ee7d80 dead000000000005 [ 98.672190][ T8513] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 98.675584][ T8513] head: 00fff00000000040 ffff88801b842b40 ffffea0000ee7d80 dead000000000005 [ 98.679068][ T8513] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 98.682510][ T8513] head: 00fff00000000001 ffffea000094a101 00000000ffffffff 00000000ffffffff [ 98.686007][ T8513] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 98.689408][ T8513] page dumped because: kasan: bad access detected [ 98.691944][ T8513] page_owner tracks the page as allocated [ 98.694199][ T8513] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7913, tgid 7913 (syz-executor), ts 87066746068, free_ts 86524320490 [ 98.701756][ T8513] post_alloc_hook+0x1c0/0x230 [ 98.703275][ T8513] get_page_from_freelist+0x1321/0x3890 [ 98.705021][ T8513] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 98.706850][ T8513] alloc_pages_mpol+0x1fb/0x550 [ 98.708397][ T8513] new_slab+0x23b/0x330 [ 98.709748][ T8513] ___slab_alloc+0xd9c/0x1940 [ 98.711240][ T8513] __slab_alloc.constprop.0+0x56/0xb0 [ 98.712935][ T8513] __kmalloc_noprof+0x2f2/0x510 [ 98.714476][ T8513] security_inode_init_security+0x13f/0x390 [ 98.716346][ T8513] shmem_symlink+0x135/0x9f0 [ 98.717824][ T8513] vfs_symlink+0x400/0x680 [ 98.719245][ T8513] do_symlinkat+0x261/0x310 [ 98.720720][ T8513] __x64_sys_symlinkat+0x93/0xc0 [ 98.722289][ T8513] do_syscall_64+0xcd/0x4c0 [ 98.723736][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.725606][ T8513] page last free pid 6009 tgid 6009 stack trace: [ 98.727598][ T8513] __free_frozen_pages+0x7fe/0x1180 [ 98.729249][ T8513] rcu_core+0x799/0x14e0 [ 98.730618][ T8513] handle_softirqs+0x219/0x8e0 [ 98.732139][ T8513] do_softirq+0xb2/0xf0 [ 98.733462][ T8513] __local_bh_enable_ip+0x100/0x120 [ 98.735099][ T8513] update_defense_level+0x5d5/0xf70 [ 98.736731][ T8513] defense_work_handler+0x26/0xd0 [ 98.738321][ T8513] process_one_work+0x9cf/0x1b70 [ 98.739885][ T8513] worker_thread+0x6c8/0xf10 [ 98.741354][ T8513] kthread+0x3c5/0x780 [ 98.742638][ T8513] ret_from_fork+0x5d4/0x6f0 [ 98.744103][ T8513] ret_from_fork_asm+0x1a/0x30 [ 98.745605][ T8513] [ 98.746372][ T8513] Memory state around the buggy address: [ 98.748101][ T8513] ffff888025284980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.750588][ T8513] ffff888025284a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.753078][ T8513] >ffff888025284a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.755749][ T8513] ^ [ 98.757537][ T8513] ffff888025284b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.760014][ T8513] ffff888025284b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 98.762501][ T8513] ================================================================== [ 98.764997][ T8513] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.767233][ T8513] CPU: 1 UID: 0 PID: 8513 Comm: syz.0.704 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(full) [ 98.770879][ T8513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.774193][ T8513] Call Trace: [ 98.775250][ T8513] [ 98.776203][ T8513] dump_stack_lvl+0x3d/0x1f0 [ 98.777678][ T8513] panic+0x71c/0x800 [ 98.778949][ T8513] ? __pfx_panic+0x10/0x10 [ 98.780405][ T8513] ? __pfx__printk+0x10/0x10 [ 98.781869][ T8513] ? end_report+0x4c/0x170 [ 98.783313][ T8513] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.785012][ T8513] check_panic_on_warn+0xab/0xb0 [ 98.786583][ T8513] end_report+0x107/0x170 [ 98.787953][ T8513] kasan_report+0xee/0x110 [ 98.789394][ T8513] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.791104][ T8513] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 98.792805][ T8513] __kasan_check_byte+0x36/0x50 [ 98.794333][ T8513] lock_acquire+0xfc/0x350 [ 98.795738][ T8513] ? __pfx_autoremove_wake_function+0x10/0x10 [ 98.797697][ T8513] ? p9_fd_poll+0x1db/0x2c0 [ 98.799135][ T8513] _raw_spin_lock_irqsave+0x3a/0x60 [ 98.800805][ T8513] ? remove_wait_queue+0x25/0x180 [ 98.802394][ T8513] remove_wait_queue+0x25/0x180 [ 98.803928][ T8513] p9_fd_close+0xcb/0x590 [ 98.805313][ T8513] p9_client_create+0x9a7/0x11c0 [ 98.806893][ T8513] ? __pfx_p9_client_create+0x10/0x10 [ 98.808578][ T8513] ? rcu_is_watching+0x12/0xc0 [ 98.810103][ T8513] ? lockdep_init_map_type+0x5c/0x280 [ 98.811857][ T8513] ? __raw_spin_lock_init+0x3a/0x110 [ 98.813546][ T8513] v9fs_session_init+0x1f7/0x1a80 [ 98.815136][ T8513] ? __pfx_v9fs_session_init+0x10/0x10 [ 98.816852][ T8513] v9fs_mount+0xc5/0xa30 [ 98.818215][ T8513] ? __pfx_v9fs_mount+0x10/0x10 [ 98.819781][ T8513] ? cap_capable+0xb3/0x250 [ 98.821220][ T8513] ? __pfx_v9fs_mount+0x10/0x10 [ 98.822763][ T8513] legacy_get_tree+0x10c/0x220 [ 98.824286][ T8513] vfs_get_tree+0x8b/0x340 [ 98.825680][ T8513] path_mount+0x1414/0x2020 [ 98.827126][ T8513] ? kmem_cache_free+0x2d1/0x4d0 [ 98.828702][ T8513] ? __pfx_path_mount+0x10/0x10 [ 98.830271][ T8513] ? putname+0x154/0x1a0 [ 98.831613][ T8513] __x64_sys_mount+0x28d/0x310 [ 98.833137][ T8513] ? __pfx___x64_sys_mount+0x10/0x10 [ 98.834796][ T8513] do_syscall_64+0xcd/0x4c0 [ 98.836243][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.838101][ T8513] RIP: 0033:0x7f549598e9a9 [ 98.839511][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.845463][ T8513] RSP: 002b:00007f54968cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.848065][ T8513] RAX: ffffffffffffffda RBX: 00007f5495bb5fa0 RCX: 00007f549598e9a9 [ 98.850522][ T8513] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 98.852993][ T8513] RBP: 00007f5495a10d69 R08: 0000200000000500 R09: 0000000000000000 [ 98.855451][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.857932][ T8513] R13: 0000000000000000 R14: 00007f5495bb5fa0 R15: 00007ffd45748648 [ 98.860432][ T8513] [ 98.862012][ T8513] Kernel Offset: disabled [ 98.863376][ T8513] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:27:02 Registers: info registers vcpu 0 CPU#0 RAX=ffff88805744ccb0 RBX=0000000000000001 RCX=ffffffff8198d3ec RDX=1ffff1100ae89996 RSI=0000000000000000 RDI=ffff88805744ccc8 RBP=ffffc900007cf410 RSP=ffffc900007cf2e0 R8 =0000000000000001 R9 =fffff520000f9e4a R10=0000000000000003 R11=0000000000000001 R12=dffffc0000000000 R13=ffff8880390cc000 R14=ffff88805744cce8 R15=ffff8880390cd000 RIP=ffffffff84e0a550 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdfc299df98 CR3=00000000622a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdfc1d86488 00007fdfc1d86480 00007fdfc1d86478 00007fdfc1d86450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdfc28ed100 00007fdfc1d86440 00007fdfc1d86458 00007fdfc1d864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdfc1d86498 00007fdfc1d86490 00007fdfc1d86488 00007fdfc1d86480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a5585 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc90003eaf290 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b0b9e20 R15=ffffffff855a5520 RIP=ffffffff855a55af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f54968cc6c0 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c368f07 CR3=0000000060724000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ffff00 1000778aa1a245aa 63722c21190c0000 0001000500050000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098 000f000c00000002 0007000500000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8aa1a245aa63722c 21190c0000000100 0500050000204e00 1a00060000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffea00012a4d80 RCX=ffffffff820e1bcb RDX=ffff8880589da440 RSI=0000000000000004 RDI=ffffea00012a4db0 RBP=0000000000000001 RSP=ffffc9000cebf5b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea00012a4d80 R13=ffff88803bc997c0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff82214420 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000000c0 CR3=00000000622a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffff Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b0dc744afa9ba9b 6f34413c6d71b0aa ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a64cc0ca9b25b189 5663688a7d8af8bd ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 262d736160a8f6bb 4dc269dce0f560c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cdb2fc7deb07f4f fb589f7c49f49f2d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000900 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000003c d47fc05600000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003c0000003c 000000000000003c ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003cd479d5ce d46afaeed45cbed0 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d480cad200000000 00000000000e7ce0 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 04cab488b4365144 d44b12ec7a4034dc ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4610307ccde6b2b8 17f3507305626a4c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000011dcd7 RBX=0000000000000003 RCX=ffffffff8b868c99 RDX=0000000000000000 RSI=ffffffff8de30026 RDI=ffffffff8c157460 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a94150 R15=0000000000000000 RIP=ffffffff8b8677ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000622a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd457489d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5495a11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000