last executing test programs: 2m37.973197619s ago: executing program 3 (id=383): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0xfffffffffffffffe], 0x58000, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000003c0)={r2, 0x80000001, {0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x9, 0x14, 0x0, "9fb0e0996b3bb7a4e63cd5d45ba61c692baaee3b7526c65e54b02751d2da6847343280a708ab82e5512df07b533436e9778f0b7fa9346f162307fb3fbf481754", "9735c0d8ccbf74982abea33de741934829234ec2a9006d64c2c78425ad12e4b2e278a4586894e971d39181ad43bc1f3a7528932308f4b091acbd56c8d34741ae", "ef32a3e440de96e9b3406a2d26d85946d5d1192cc8c859d15712d6adb4e09a3d", [0xfffffffffffff772, 0x3]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r9 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.702783154s ago: executing program 3 (id=387): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'load '}, 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000003000000cffd3f00f00a000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008bcbfc55846fded74b1f1fa9bcfa444f4b2cd034bf7bfd803bed89194aa3a96f549b0d19188f1daca42ad2b79c7ea6816adf464c08a4ba4129d9329fadd8c17fa08536304b20b3638ed86a4428319eae0338ad7859aff4e52e22a2c14bf6cf73941ad3b73daf39b0a843f3a79b9f2e3a074fde2ac04c2bc9c76e10afcb6f48e77a9a0c15b63d08e2502e7cf5e896f5c055260afad6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000003c0)="fd0a0d", 0x3, r0) keyctl$invalidate(0x15, r2) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007600110a0040000000000000030000000000000008000100000000006630ee7c40690d8aa51775c7150830adf072cb0ae819b74c976b811575d3330eb3e25e02f76f3cd07ed901f963447ca20a218418881dc023d58afcfcde6f4a0be9bdbfce6ed363758ec6298439965c0ca9aed70abae0bf753e66c972de0dd1fecb8af10e40ceeaff54bcb2b5f0d80eff8a9fe8da94f8"], 0x20}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000080)='./cgroup\x00', 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x4b1, 0x5, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) ioctl$TCFLSH(r3, 0x5608, 0x2) 2m37.612062725s ago: executing program 3 (id=390): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 2m37.373295123s ago: executing program 3 (id=393): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010435bd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async) write$nci(r0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000008c0)=ANY=[]) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x13) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r5, 0x4) (async) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) (async, rerun: 64) r6 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000007c0)=ANY=[], 0x0) (rerun: 64) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2, 0x0, 0x42}) (async, rerun: 64) copy_file_range(r5, 0x0, r4, 0x0, 0xffffffffa003e459, 0x700000000000000) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async, rerun: 32) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, &(0x7f0000000400)}) (rerun: 32) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (rerun: 32) write$binfmt_elf64(r9, 0x0, 0x78) (async) syz_clone3(&(0x7f0000000380)={0x140000100, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x3}, &(0x7f0000000740)=""/127, 0x7f, &(0x7f00000002c0)=""/123, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0xa}, 0x58) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="ed62341b36795f0b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050000000000"], 0x24}}, 0x0) timer_create(0x4, &(0x7f0000000500)={0x0, 0x14, 0x4, @thr={&(0x7f0000000540)="cef97f9aa56e8f6483913c64566ccc8e94db976eec16c9652319abbe50979ffb6c73a5853ece7e43b7f858ecae68b3964a08d3e0f9fd1f5227097856c5e32acc3e2c22bca572ffe641a0ccb8e389c3d889a48e55120a50879bacf568c5f31fdcb2b82596b5a4f90fe77fc92dc681d8eb73c14d39eead1570d725f1bf1a819d2722fd5c3227661f909114739a38432c64d32bc35e72920980575884def8b015959718b4ce9558e0c51a0320e2ed925030afacf8615b874ec63207b43df5604c61f2713ecd058b3e738d", &(0x7f0000000640)="bb7cfa2ea8f85a56ceef7faf0f3a0d3fab57e0b752c12ae88912627c362c32c0a05dffc68b0c75810de6cc5742712496fc0c3b1a3f093e07b37224e2fcf5d2b89d2bbc014361c77f64ada110af41edcea43ed0b907ffb2"}}, &(0x7f0000000440)) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000480)={0x52, 0x0, 0x3, "8baadc000fd6ee1de8a6448400001c001000", 0x59455247}) 2m37.37279556s ago: executing program 3 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xffff8914) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xad1a, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc, 0x0}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) ioctl$COMEDI_CANCEL(r1, 0x6407) 2m37.172896497s ago: executing program 3 (id=395): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async, rerun: 64) r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x1000) 2m21.820979354s ago: executing program 32 (id=395): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async, rerun: 64) r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x1000) 2m9.53511147s ago: executing program 0 (id=697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@setlink={0x4c, 0x13, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14056, 0x8}, [@IFLA_EVENT={0x8, 0x2c, 0x27f}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3702}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xb}, @IFLA_LINKMODE={0x5, 0x11, 0x5}, @IFLA_GROUP={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x140e, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9}) (async) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000140)={0x1, 0x6f7, 0x809d, 0xfff9}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r3, 0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {0x0, 0xf0}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x74, r4, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m9.417957769s ago: executing program 0 (id=699): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) r4 = fsmount(r0, 0x0, 0xc) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x4}]}, {0x0, [0x2e, 0x0, 0x61, 0x61]}}, &(0x7f00000003c0)=""/127, 0x2e, 0x7f, 0x1, 0x7}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xd6, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x7, 0xffffcba9}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r1, r1, r1, r2, r4, r4, r1, r1], &(0x7f0000000500)=[{0x1, 0x2, 0x5, 0x5}, {0x0, 0x5, 0x3, 0x7}], 0x10, 0x7}, 0x94) 2m9.416262521s ago: executing program 0 (id=700): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000980), 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000580)={0x41, 0x6, 0x5, 0x6, 0x91f}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000eeffffff00000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r3, r5, 0x25, 0x4, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r3, 0xffffffffffffffff, 0x37, 0x0, @val=@tracing={0xffffffffffffffff, 0x7}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000590780000"], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x5c, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x8}, {0x4}, {0xe, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0xce, 0x10000, 0x2, 0x0, 0xc, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0xd5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_usb_connect(0x0, 0x34, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8000, 0x8, 0x800}) dup2(r0, r1) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f00000009c0)={{r6}, "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"}) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f4243, 0xfffffffffffffffc, 0x6, 0x0, 0x5, 0x0, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x0, 0x2000000000000, 0x6, 0x5, 0x7, 0x4000000000200, 0x0, 0x3, 0x816, 0xf48, 0x37, 0x5}) dup(r4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r9, 0x8932, &(0x7f0000000180)={'wlan1\x00', @ifru_ivalue=0x50000000}) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000080)={0x7, 0x1, 0x7}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbe", 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x358, 0x358, 0x358, 0x1b8, 0xd0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xffffffff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x80}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) close_range(r0, 0xffffffffffffffff, 0x0) 2m8.780751046s ago: executing program 0 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xffffffffffffffca) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x18) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_dev$swradio(0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 2m8.727535602s ago: executing program 0 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000000)="d6a74f86", 0x0, 0xc30, 0x30, 0x0, 0x8008}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0400000000000000436fe62f33c8f614f5f1fcc8619d7c884314e26a462eae4e4a6150da35b32a057580bedece5ebd00b7c0d1be32e0e2b7dabd3cee1f5d49894007f952637396141d6cc0ec8a330426732fdb8fa350390d0449356efa16342a55c046f2bd42c9cd077e2b65637ad643532dc7f19a9dd74e229bd42a842a246d8b9fa2148402d62ec4ad2bbb0055885100d75b0f1babbb", @ANYRES16=r4, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000094000380040001008c00038088000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded72407"], 0xc0}}, 0x0) 2m6.833053802s ago: executing program 0 (id=718): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @local, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4a23, @empty}}, 0x1000000, 0x31, 0xffff1893, 0x3, 0x45, 0x0, 0x1b}, 0x9c) 2m6.770179253s ago: executing program 33 (id=718): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r0, 0x100) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @local, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4a23, @empty}}, 0x1000000, 0x31, 0xffff1893, 0x3, 0x45, 0x0, 0x1b}, 0x9c) 58.82023627s ago: executing program 2 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmmsg(r1, &(0x7f0000006700)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x4}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000540)=[{0x90, 0x109, 0x3, "fcf936105ddff51c5c6b5a840b11f6b0067e7a3c08f55b736dd951805dbba9f5f2e7f2ded7a18fab42f7c32b7cf24d13ffda2298262fb3540af016a35c4f0f9208d851b8cd734cbd4597bf2dbe8071d455cf31e30563d17a0139a93f808e77a4fb3c99deb6a69bb9e7ff4cf4be39c00a2801e68df4cac37d9fb4cd9a000b6898"}, {0x20, 0x102, 0x9, "77e82b91a7bfa6d2a2"}, {0x100, 0xff, 0x5, "5423ebcd62166837986b19b52b17489006e8495d5fe3aebfb9346a70ce039cdeef5c1f693d64aaf910b9c830945ae8d3ebdc5aa53139675d03d26225b2210a7bb001467c9b2a6891b827cabbd3639f4fbfe631c4b3e54a0ff19f09679c3e58156ffb6ea1636ef4be9f7768042359f71a215a3c11a5aa2129b9fc480ba6ecb3318fcd669d60d3b626643214550016924db67c56ceff7ac638ef629c1f16efdce198e26168d0ba33e75d5c28f1c76d6dbab44810c8eecd61dd6bfcd7c547771df0772b0dace43f1c1b2bd94e19371735b66ceb2f4ecba0a63c89f2cd87ca7fbaa3702107b4bc8d5a3f51e37418"}, {0xa8, 0x107, 0x9, "57d4992c9fd65d3ede20fa2d195e24e7ecd1aca29391475386b7b97a971092b91810d0b2cba8ee92590be3d397a7e497993e58d67a33659864f72224b34ac2c33ec87a3d3237a5ffb003562cbcb7f639bc8401884989818acfba4fc9f122b4b5f23a4ed58b31e0a3136b8309e1c495c6b8642a580a1d96aad2d706fa6722437ce92d70b15ba4fcf92312b99b5092dad954bbae3c"}, {0x28, 0x133, 0x3a0, "172d5a42258a51e2bbf02c805349cc59968d"}, {0x90, 0x11, 0x7f, "2126cdc27e3ad7565bd0596ecef6f5a64ab4d99a9088042bce76f2c02ba953de0e256d30527f81b6f904bdcccda34a43a0dbeb41ae4941f917747851b9d1c9c04d0ee2e1151931eccd94deafb375c95efd6388b967d3e64cd311d5ca2bb2f61375c63954d1f7cffec06728526433e5ba259cae5a17de0da415347001fdc636"}], 0x310}}, {{&(0x7f00000003c0)=@phonet={0x23, 0xff, 0x4, 0xf}, 0x80, &(0x7f0000000900)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000440)="ab4d18353d157726f1bfd6dbb8b5a85c0c9eddae3670da3e4354b7316488c1498c8d8ee30db9a3fdf49d623dea0181fd224ecfbb2f0a182b314dbe3a0908d2436645e8b9937918f2cff55538cc05a5201004e322ff7bfcb17baa84fccd6515d8d743195a471df7ffa54fae7532e3cd104555409d928d7256a3c8522f603a6ae3dc683e2f7285d683d0047575813a6dea3c9a402601ff924dd67b352b12b2f57d0a90e02caae3e954573399a8dec57f238655893b", 0xb4}, {&(0x7f0000000880)="bde86a343d9c5b352241bfa29bc8f74504c9ab0a0fb2ed13b6c9df119f00bc573f30dadc8b88a3975fe85222ff17ced988b7dec674f4f9fb7d1f90c1443e58a205b485a931cb257024601d443cd875c9181edd125d6a760cac8848b18641b11f3541f9", 0x63}, {&(0x7f00000019c0)="27d2fe25eb25b0ff63566dfdf6f2feba19a5b2afe5c03d854b62a25c85b658fe423e20d0670464cbe55e7ea2435ad07b0c85c14e33e94e763d0937f4f8b3aefe0c24ea2e89a40295562ffc1f6b3f8160d0f4017aa9bb126a6d2f5c34afa78c530f67c9d8848421e5d70dec207c049d8f0fbf8501490f12d67d7b53ce7835a4eab4389b4ff023519fbc0a089ffb4b0e1e5731c56dbab744921a8af528f4960fd6d27ae1cc00bf66f31e14dd4ec414342053bc17d4e945052f41b487e9d915769490d683aff27f211118c7e8a4bdcad25448808427704d025bb32f20a9817dea547b862594a8c9bfcde0", 0xe9}, {&(0x7f0000001ac0)="8c6b35b99e53e05343c5e9b74a1c3e11d43f4cb2728f040aa247a870521833276938391f7d6b70147c73300a00d4b31e03b86e069fce1bd86a8e7fa14e264e6c1077679e3eca6d7c256b187ab48f43281532211a3ac0310e67692763ee63faf6cbd36c64a66930890c37db736f957250d69ca3092219808f098cc9cc0e6a24fa97ed918dd50d8a17a840b42bfe023e39dfb60e", 0x93}], 0x5, &(0x7f0000001b80)=[{0x60, 0x103, 0x0, "24b102aa90d4499f321322cc9c6d85b323f71974342f09088615fe6289192f45d669c8f3a3e2bf360d9e51f46575b7a6a1f3746f8a3698801319b88a06c5858c5e4e96b1017a121df0"}, {0x60, 0x113, 0xf4, "c68b15079cf8e544088754422a5cb0d49e0c7b1ee3783b309e4b46c7ca0891efc095a0f6de8de0fc4fe5e91be3f13ac52959e41b414864c892480d03f4c1dcb6dd54c2367c8bffe388"}, {0xc0, 0x0, 0x9, "9aafcdd84453dbd31642428c0e622a8bc062438d43ccad213b739c9826e64979c0edabd88224a4f3de58bc9437a48e1caebd363ecadd936943d557bcafd4c8664f4612142fb0c7aab1efebd4cbf5ddf11c0c0b99897ca58193af321a2b24a25ab43779e095276343fdd3af0fce7a03d24435a879fb998df1f2a558e96836a9b2c4997f6c92e64edfed62bdd85b6cba44bb2e842801529634aa3f83842f0f38e28f26ef35055994fec20338"}, {0xc0, 0x115, 0xca, "e90834b60f3346cc4c2f12703a307bea52002e2ab66b0d3a85d6964f0eed105afcea5b4e07957fe5fb0dcf948438beff9277821048d94c633d53602cb13606d8d6490a5d3b04c41039d73e2e03310d10cfcc28ee27b29675597cad3b1fe7673f4bfce1e0efb66d51aa198eaa82de816188250e282bf1ebc1685efdf0b64b0e2c17783a00a7b90b90dfc737137efb9622b1dcf78bcaad33f4cfe8603b7d1dd821188d2a9e3972025c3486bf28cda5bb"}], 0x240}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001dc0)="3209c3db9b67448f1d2f166a385578ff040f091fa9180e6eea648e96ae7b02e9c5b23f8d658dd7b6e0e5cc7ef092e5e68462846f5a822b408b75eab9e6e6d755da22e532b2dfa450a3b9afc4adc820333cfd17630d54abb15f2891c85d", 0x5d}, {&(0x7f0000001e40)="17ba5bcbaeb82ca07f06e5b346a311eaed79ab8c793c0c07b58e04cf6c7492e787a9989e8513941a10970d964479fc2366c965e55ef7c6cb1411efb55b93d0e9500c61091f1c46b55873376d7fa0c7fba3d17aed94ad4c8666af3147ddeba2768fad4bde8a16dd8f6cfa6553c2ea3881100d2d09cd269039c34e02edf42e17546aef871bdeaabf9f10df0ecf1ade147a7647e2c1a72cb41651331a64a59c8cc9c53364a0c2ca8bd6eee12e504ef15324d6f3f66eb31d8be983fc88d2ff6ffa07", 0xc0}, {&(0x7f0000001f00)="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", 0x1000}], 0x3, &(0x7f0000002f00)=[{0x108, 0xff, 0x5, "e71098ae3d48eae56067a1b62c5fc24888ceb78b79e5eeb225b7489c34885d3bbeafca34496fc8aaadfbdc6baaf742f45fb6a0e81347cec127c5c1920d84a8e8343768afef78b8d329e6d2773006f10b0501d1ed11f98350a8cb90b7d9921fd9968e09c62ab943de6c3db5bcb683f01d6f61be15834b718be78a5627179f6274e7698d01a294ddadba3afdcb0bf6b8c1ebd18608dc6d0798c1a544feecb206cadd47fea278c05f540851971100f566f30f4be729ee6213c97d7dab9df49e978e54f46e0930315fd1b2675f4cf09f236bde54039e21512a666cb403351402e7a24737f21f4fd1d62eb3ee08a5c0abaea69520bceda87776"}, {0x110, 0x109, 0x80000001, "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"}, {0x98, 0x89ffdb41c10f8e8d, 0xfffff394, "9112a094522bb85879dfd65709885aa96ce0962e9041b6e97db81aef314c1424ce94c4381d2f5100e1f178c0873ffe434a16425be6124aacbf9d395128b6dd16b5d309df832fd0d0d198e7caa20f799b30593c47c62f7b3e41ffa08e7671a15959067e0cf8508d3f21000cbc9dde7db9337176980f9a3c226b534102b39525bac57d2e47"}], 0x2b0}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000031c0)="d8972e2acd20947d789771c2a08ef5c38104d8bd1268625f3a092d66b11c09436a211b20f0d42f709ffc187323e561f89e47583c1fe087063f9e0f43032d656fa47563688a9e6a01a3ca04fbb646", 0x4e}, {&(0x7f0000003240)="eb4dcc6b0fca8b71ae6db43f172f48fbede9e96dd6f99179b9973eb4ecb81503a03b3da8c9b63538cc848d7efadebeafe7136228fd792faa2ee9469ac188ab3fa80a70e8a7990b03020de44554", 0x4d}, {&(0x7f00000032c0)="805ce5504a38d17b677f5422714fb2c8a7737548a304f6c4e8f107cf38553613ef64427f47dec63d55384a2bdad74d5b58b1d136437a7a2bb8a2f7f2fafd41f0b0aa962eac6d0166d0793baf43dd0b8d4c138318d6308578a80941a566709375db009e913dfebf9fa6ae8f50668ff5efe685181280bde45b987b02c658449dd98c057ceab92427d0bcdfe10ecc3a13bb9156381fd8ed8cc18a6f0695065eb9fe3890a758a4cbdaee2a871ed30a363a760981f1ef826e193e2e02e3010110a3f2242c3efec458c8b3d68e9cad89ff00bb504d053f4b561c135ed3b675f3472101030a5f", 0xe3}, {&(0x7f00000033c0)="38d61a119c6fa32dc93a8d1b8ab58a3ed04c3c562d164832c7", 0x19}, {&(0x7f0000003400)="4e2e7d60878de7bb1d37204860f627a934f22ebd278b72", 0x17}], 0x5, &(0x7f00000034c0)=[{0x88, 0x118, 0x2, "dd6a067fc1f72ad373ccf86bc4c7105a7f5b8f80f1a2a5b9aea464e00c7ba32311a8bbfa58e16fb3173122fcbebafd40323983ffcb3c903556cb158c11c763ec72e15fbb54ee6503aae59e92ddb44711079f22d57e6021ff76bf91f6feb342d9fa2c21c8f6400857e52b50fea6d543c0a234c80c6d"}, {0x78, 0x102, 0x40, "25d125ab290059a0bbb2cdb6621e21f92234cb0f1676590fd2a4334f128400e7b1b0f1a272f6c491a8cbe13ea6612492d1e03d3fb8b7cc6a22d7713dd96fbcf5192bd2f69bd6ebe66859402a3f953158d6e55d15cad413d13e9df5a529208be29a5037"}, {0x1010, 0xd6, 0x5, "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"}], 0x1110}}, {{&(0x7f0000004600)=@caif=@rfm={0x25, 0x8, "dfad4bfe4bd2e50124c6dc9d00ee1307"}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004680)="537fd8fe9ce200fb8a0734cc2be34321281fb23dbbcbeedc73fddf44f2b23738f4b970f2d941cead485a8e0c0154c3aa7b0df7c0ef17397f22dd09183c1cc5b7e1fd2531b52ec42cce899435b739bed35f", 0x51}, {&(0x7f0000004700)="0e9b62a56f10435b37d46bc5817b1fcd3fc290bae1bf79358d0748ccfc538f", 0x1f}], 0x2}}, {{&(0x7f0000004780)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004800)="f8bcdda23c489474f657b9c465dfd23abe0c0ed709999c7156585b1adf20ab0f9f2b6d983980969fc3081c46d7b609f9d2a6de5887bafdd3ed895a0ef91a3f935e282c6c157c1d8d7855773dd1188f52336f6c9a2b8f9e3030e3916bf8f25c6406239a0ed5b3cb1655a49b4578af39c5a05860b5e52157b70b7f7d04e14f2732157f08f620722bb741d4b0c7c6980cc545d3c96c64c7055b13f9d8ee88a712d1b6bdd0fd2aeaffa8b108100a9e23ec5cac7277cacc6ed4d48c9f6400ee0a5afaf4a754f0986f0fce5830e4ad2c66e7b5440eef83694282c1604765725e7b739d370e6afa7a", 0xe5}], 0x1, &(0x7f0000004940)=[{0x50, 0x29, 0xb7aa, "31247c21b33d53dece4e09654b1f23be2a4c42fec244815eb2eee6f53c0510ef29e03eb769fbfe11ee12c4ce6b31bb1fff380776eb4bba32a9e7e2"}], 0x50}}, {{&(0x7f00000049c0)=@caif, 0x80, &(0x7f0000005080)=[{&(0x7f0000004a40)="a56aaccec1c846960f9d9f9bcd9c0950d6438e80daae25b76e451e09fb710558e05a26fe21c4878516aa2caad85729184646ad38082a5998a90f73c42ededcf4ea8dbdad2443fb3887129a333404a1303f8270a109c13933ca995b844e3bbbf2fcde2a6f508cb33f88ddef43cb4a50c52c02554e28463ea2dacef1406f90130dcf8e3f355654dec41f8ce07c5fb381d89eafd2d40b7fc0d14555dfab76c082bbab3601ab3ee652260eea0e70774eed448a869b7e2eb15802fc476e778339418bb967ae02bb5c32f352d3", 0xca}, {&(0x7f0000004b40)="3e26d0e45eb860d68f3d219fcb4101c842885fc47a257f84e4a415b969d399835f9878763c5b87aa0d21603010a1cb635a6fdbe2b0cd35517727a5c7d5bca736054e50137167ff5d300afeba0c35050ab0552ecab92f8666d26a0259ab8db27df2c9be1c4639f838dfd0955c2043c81c2eb0843226665948a856c731e38f0963f1e6f83bc244c7a7f6eada900ecd9706218efb3e389caf3568e965a0e0167811c7903330cdf7b9c183fb1fd9b36d8e73fb2de23024f5b1b32f6ad8b0af81bc57c534ae53473e79faf6", 0xc9}, {&(0x7f0000004c40)="05ae38346b33fedd7ffef90621fec8c866c80b62b895338372ce0e7084b91c9373b213cc8a47c532132eae50e46e28ff26316d2035415195588b9b5e68ceaabe1e41c33056de8ad0d368135bcb369212373b51cf21736d0df0e00d35c8f2939822ac555be4a6fdebd5b7cf24e21b8c5aabb5961a3ddc9e962a", 0x79}, {&(0x7f0000004cc0)="03fa4d4bc910edccb227018e664f354d6795561dddcb5f524caf18734c18e2754cc8a7076a9ab793bcaa33ba1b58270bfdad3bc7183f420023a59cd0ec5810402bde70a218a060c9adbc8b63e791058fed8dfa7730aa9a331072653fcdb8765e5a1f58abbee912ea161f718d56cc187e490911c9055e45e69d137428dd5dfddc0cc813e82473af9b34b91f3b10f5", 0x8e}, {&(0x7f0000004d80)="2f34511438e23cd59b72814d2108ba4055c96223eb16471eaa9111ade21e9a24c441f983b67d5d1c4f74c8876256f48e8649f6f167a1fd334311e0d58de1ef3d2cee369e9ba176b22e7c39a3a774921b9c7ce8f1e3b21252dc1fa30e9c1ff387ef017ea69323a3482831848753e5807de418d3c82339cf5cc89606452cb692c1f74d203926d92cf2830b6047c726c48b8934225fde93a2dbac749298cb9cc61a618210db031e162b34206f16a303352d5dde4c68e4a39d70ff874c9d22aa8867d0a5455ec0d66617fdcffccbe7ef359aeb4706ac36b54b893e3d1f6f531f49c85d790338716704b4d53bb7c74f04f84fde65310cce", 0xf5}, {&(0x7f0000004e80)="22469b8e36a6a632d3f9f7782dd6a1812cf5e27fd79c58a7cfc0431eab3f04cbd1daab1efd5671a4a6f5aa789cfcddd752da5f0967a3a296439ef566122a798bfe8099bd3915855e6737f878aebf6632e196591e4f87d89c7ba6f4e5d7d00ca9b00bfc389dae9591e464e2b0fd466aa7855f91721d0da3ada3827431ba60aeeb0e5a45b235a3caefa5e43e0535436f11ae5eef91e08b1e", 0x97}, {&(0x7f0000004f40)="6b62fc57300b7d53dfc95a22f1fb1e9b6c5db1aeb41648b96473a60065b9adfaa5bc315f02bd2920f527e5c8e551bab78901fffee0790f95b248d4b0ae82b41b6f554b8c888d198c364c003557cbf00925d20c8802faa1b1893751c96b126f65e39def0423aee78f5710ef5b01a58ba57e714ecf9f1933f232f49f77d184a2751197d8f7835d0c90dd74856789e6a147f0eeb9df4f763111a764945bb191fc51b3938a8613fc49e0312b21e5edaba80da454acf8c88c", 0xb6}, {&(0x7f0000005000)="f6bb15224d724f5b6b2849f320511da64e800b7d07d1ccba2dc714a5a81c32581e4057efea5a4688cdc644651439970c7391b83167ef9d062baf177dfe60d7e1a708293150389bd6a6a63376b2238e337c73d0c84b50a255070373095e87", 0x5e}], 0x8, &(0x7f0000005100)=[{0x18, 0x7, 0x3, "92"}, {0xe0, 0x11f, 0x1, "5ba91016dbdffe6672a5d0d555952f787f0c997ad3fe72c5c0e00012690366ae63ae6e344a54d317e3cd948040e7bc063058cf57a5fa1324885f84d70e6215eb409ea18090549e27dfa129e8d3d16e3f0f812d095bc464bb01742da8f426a304698eb45080fb83de230e0aff8a24fa8f3be83801a781301935cb11da1972d0208fead39bb5959d6147f5466ac78842cacb2016349c7eead9b24dc715eb666cccdf7782c7505675b2fc95df04bf24caa41cb7ef99a07417334e7505e404185628a37c7ff9951abd8d88998831148565"}, {0x80, 0x101, 0x6, "43f144872cd7101dba6a84ee9435d27e22f25ab78a96796c86f0c75ee50e36472cd72f5d5b998fc1b685345fddebd656eaafa893b6f0aae1090700a8bb6a1dc8dd5c3c3852ec6083fc5f78432e2163c0df7b6c701ab21ac4ac67d3a7f15538d091c7393d7147bec45978c47e"}, {0x78, 0x10f, 0x1, "f5654f3454c864054daa94bd993e1f5ef7cc280d64565cf9bb87f27e527a00aea6ff0a403d87d1c4eef09374ee9d7a291d3e23788f1196dd32bfc0718f4b68426f3ac3dd058f550c6ee6ea6b5802a07fc628d8b0f3a821e574c05495b704a445bb"}], 0x1f0}}, {{&(0x7f0000005300)=@isdn={0x22, 0x7f, 0x8, 0x80, 0xe}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005380)="111eb5a3a3ddf05030dfdbfae8e49c3cce582db774efcb2e8e82523e10ac714f407db83aecc3a22fec24bcd8697b287ecefb8ea51dfd3bef9d3f9d36c9de5a0c73168e218e67dc68071d278f86854e3ae9665c04983b7d1b8b33691880b1433cc5f6bf0bb357ff801b5ff138e608bc80deb3acfa982fd53a8bdd8d8bbe69721d47efe9b306200d8af108c3e0d097ba14dcbc9e76660f33c6cb77f37a69122e6e98dd0366a3e162c921ba9b8705e756e0", 0xb0}, {&(0x7f0000005440)="6e3f8a925be9a8bc8514b4d65a8059760d7a1e8a24bb669143987ff16154820edc436d5a2e7cec1010d23f2970df8f4855e10cb70ddde7e9edfc89dda7a8ae49f7600925afc3d5354ef871b893dae7c6da663fa3", 0x54}], 0x2, &(0x7f0000005500)=[{0x98, 0x111, 0x3, "3f59738db277d52165b06cdf07997943ec116db60841d01a53fb12dd1b1ff53b013c1917e2e8b99cdd299ff322eab37e3ebd725323ecb4a31bcdf6b13516920d1b238299f58fb6b0c09b0ab3474ebea58045be8167f8765b5c07dd1b4ce3b0298fa2eb34529982e4939d9352f94a399dc2f614e370d30965ba1bc40bad08a66fe866fdf96148f372"}, {0x20, 0x10f, 0x9, "cb9de493554fb6a2651bce1bda63"}, {0x20, 0x29, 0x1, "fb73bebc42e67ce894"}, {0xe8, 0x3a, 0x71, "f8a94d1d32a9a851728d5256bad243300bd15f7c2680cea9115f8868acb855ba3868b1c864d9674076898c4ea8b98934e8dbea9db468a93d96ebe1b1190a3e6978d680279b4f41801c045e790b64e68ecfae7ffc986241796751eca62f7129379533532ac89565d1579f58985e307e652d21ca3e25e0a12f75744bd0c4504b9f0380cc5802e2374d557e08d0eab936eb0b74b279d18a9f945dd8d90c750633944c744c04ba368707ce571d99051d9ced32d2d7590f72eb5fbc1b614e88f0569afde6b2230d0ad343142837213b2934d6c4ce"}, {0x28, 0x107, 0x3, "1bc25ee1f32956d04eacd500fade2b118d"}, {0x1010, 0x119, 0x2, "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"}], 0x11f8}}], 0x8, 0x40050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x2004a840}, 0x8d0) 58.819543466s ago: executing program 2 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbefe, 0x8031, r1, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) 57.365311125s ago: executing program 2 (id=1144): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in6={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x7, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}}, 0x0, 0x2c, 0x0, 0x1}, 0x28) 56.950643843s ago: executing program 2 (id=1152): r0 = memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RWRITE(r2, &(0x7f0000000280)={0xfffffcec, 0x77, 0x1, 0xc155}, 0xb) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES16=r8, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) sendmsg$can_j1939(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000004c0)={r10, 0x1}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000300)={r10, 0x2}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) (async) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) shutdown(r9, 0x0) fchmod(r0, 0x184) 56.837837703s ago: executing program 2 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000f75b981a330d6f0000200000008000300ea341e35a14dac1414170800"], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0xfffffffc, 0x25dfdc01, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000010", @ANYRES16=r7, @ANYBLOB="08002dbd7000fddbdf25270000000c009900008000007600000078002a008c10260a923722c99965871256cba67ffd1a831f000e030802110000010400000000000000db020000080211000000000000002634127f022cecbd4ed151dc362740e560d5c02be6a5341a5f9939253f4cc80809e715e6cd94423381bc49d5b5c61a69b48755824ac63e01017606ffff210000fc04005f0014003400ff7df703f41d2b7cfff09a05fe32d43904005f0004005f000a000600080211000000000004005f000a0034000101010101010000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c010) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f00000005c0), 0x4, 0x2) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r9, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) 55.968336352s ago: executing program 2 (id=1172): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500600bd3fe39558128bbad0099cebdc25f59060c9e6d680050000000000000062e0000000de0eaae3f904ab1f", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 34.525585626s ago: executing program 34 (id=1172): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500600bd3fe39558128bbad0099cebdc25f59060c9e6d680050000000000000062e0000000de0eaae3f904ab1f", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) 6.720525248s ago: executing program 6 (id=1605): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000100)=0xfffffffffffffe30) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read$FUSE(r3, &(0x7f00000003c0)={0x2020}, 0x2020) 6.720030182s ago: executing program 6 (id=1606): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) (async) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x8000) (rerun: 32) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x90088}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r2, 0x804, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9b4f0d8c012ebc617854efb53b"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x20024000}, 0x8000) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x84f, 0x40000) ioctl$SNDRV_PCM_IOCTL_INFO(r8, 0x81204101, &(0x7f0000000500)) (async) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r9, 0xc040563d, &(0x7f0000000680)={0x0, 0x0, 0x101, 0x2, {0xc0000000, 0x80000001, 0xa7bf, 0x859f}}) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r10, &(0x7f0000000700)={0x28, 0x2, 0x0, {0x4, 0x8000000000000001, 0x100}}, 0x28) r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000740), 0x101082, 0x0) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) (rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r12, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) r14 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x10010, r11, 0x10000000) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r14, &(0x7f0000000a40)=@IORING_OP_STATX={0x15, 0x45, 0x0, 0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000a00)='./file0\x00', 0x40, 0x6000, 0x0, {0x0, r15}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl2\x00', r13, 0x29, 0x0, 0xf8, 0x9, 0x1f, @loopback, @local, 0x700, 0x7803, 0x3ff, 0x6}}) (async) sendmsg$nl_generic(r5, &(0x7f0000001ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000b80)={0x1300, 0x37, 0x100, 0x70bd2a, 0x25dfdbfd, {0xf}, [@typed={0x8, 0x103, 0x0, 0x0, @uid=r16}, @nested={0x7c, 0xc7, 0x0, 0x1, [@nested={0x4, 0x51}, @nested={0x4, 0x13a}, @nested={0x4, 0xb0}, @typed={0xd, 0xdd, 0x0, 0x0, @str=',,(#!$$-\x00'}, @typed={0x59, 0x96, 0x0, 0x0, @binary="cf9f2b8510435db4a115d6183de32e5d0bfeee448151a898106ac15da7827b5a789722fb9aa012d1562aa655b4c91cba930d58ef50e916e7e9383ec7676ddca57acd047346778fa54534d2ddaa103dcdff25de9a5d"}]}, @nested={0xe5, 0xa5, 0x0, 0x1, [@generic="cc9137dd6faa444315190329f40cf96fbb9c5fa2af68189345b280b0be1a543859a71801987b44eaa7ecba2287bed950a949c7a37df7fd9753249580df94420fe9faa4979b7eadb3bb709ba4317be336a1785cf21cd14bd373960b6ee6cad7db7c8d", @generic="998732806f80238aa8f0a786306f6e0b4a06f6fd41d5c90465b857842d1b6ec148e698fa4516aa35764b3d6daead2d9def44846fdf4cdb10d2f4f19a024d8211fb8c6cbc86faeb7af16292a3e59fadc5827088250f37", @generic="aff415393cb6e6d42b25b39602a469db5ec87e883cc4db3c15446f8478eaa8105cb4dbdb9e74308c4b"]}, @generic="e0c41b3b520c934cbbf0aebd6040053305a667782575834791e47babae2aa28847606639abf6fb9080", @generic="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", @generic="8e39d9c9960d3cdf466727106da612c548c511c66cb10a7461192ae38be711077d1af094f6490d3fe4", @nested={0x10b, 0xa2, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @uid=r16}, @typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x18}, @generic="c801a476612afa98a6701f31673266c1", @generic="03a7646d7316f95a2bbd480c29135a6811b4d7b718c25fff932e59d40b3698a95cec9001733e6693716771de9bd89a61faa7bb70af9a4d073f0c195868efb2d6b5df349bdc6b54b57253ef24c0c9c1f21f74cd012d1470559e01f73c84ae2ea82133123a771ffcc1659c63d314b152ed3458ad9e85ee0b4d38fee8a5aa72f52b15a7ac482ca7974cafd6c70c1ea48dcf4f79cd66a80c", @generic="af1d18ad3a6b6276b47009a73acafca7b18818e90036580dbc157d28638f49de1086ea622baa84388d9a17bfc7cc781aa7bae017713e60be078c8ac0ce7a3a6acda4c00651", @nested={0x4, 0x66}, @nested={0x4, 0x1a}]}, @typed={0x1e, 0x7b, 0x0, 0x0, @binary="d9a1ddfc2a8498b9e3ac9eedca8336163174c992be1b050bb4c0"}]}, 0x1300}}, 0x20000000) clock_gettime(0x5, &(0x7f0000001f00)) (async) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x40048c0) 6.600288383s ago: executing program 6 (id=1607): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x34, 0x3, r1, 0x0, 0x0, 0x0, 0xf63b1630397b5840, 0x1, {0x2}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = syz_open_procfs(r0, &(0x7f0000000040)='net/ipv6_route\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000d6", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) clock_gettime(0xfffffff2, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@empty, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @local, @loopback, @multicast, @private1={0xfc, 0x1, '\x00', 0x1}}}}}, 0x0) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x202d) 4.860947645s ago: executing program 6 (id=1651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0xffffffff}, {0x81}, {0x3, 0x0, 0x80}, {0x16, 0x0, 0xff}]}) 4.721367716s ago: executing program 4 (id=1653): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeef57000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r3], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf25060000ec07000400640101000800050064010102240007"], 0x48}, 0x1, 0x0, 0x0, 0x60008000}, 0x44) 4.720184717s ago: executing program 6 (id=1654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x42) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00') (async) exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.431591984s ago: executing program 6 (id=1655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff03000a00f2f3f31f000a0004000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x8040) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) r4 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "380b59da", {0x1, 0x9d0, 0x9, 0x2, 0xf9}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setreuid(0x0, 0xffffffffffffffff) pwrite64(r5, &(0x7f0000000800)="5b8529ae2468f4df9c", 0x9, 0x7) r6 = socket(0x2, 0x80805, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) sendmmsg$inet_sctp(r6, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000a80)={0xb, @pix={0x8, 0x40, 0x36314d4e, 0x6, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x2}}) 3.770584176s ago: executing program 4 (id=1669): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x20a280, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x4}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0xfffffffd, @mcast2, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x58b142, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$nci(r4, &(0x7f0000000140)=""/164, 0xa4) writev(r3, &(0x7f0000006380)=[{&(0x7f0000007480)="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", 0x63b}], 0x1) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r5 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000002a40)={0x2020}, 0x2020) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000640)=""/4096, 0x370}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setpriority(0x2, 0x0, 0xd2f4) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r7) 3.691898823s ago: executing program 1 (id=1671): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x50, r0, 0xee0bd000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x541b, &(0x7f0000000100)) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000000)={0xff, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x2020000, &(0x7f0000000140)='grpquota') 2.161410514s ago: executing program 5 (id=1680): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000140)="5e92ff55174d07d2eb56f2865f87dee056759e41b6ffbc0309c594f671b5b419ab441f49a1ca24d154c71830f00e8d8fcb1e7e7340d6488031efd2eb20a499f7df292ed637a0cb5dff3b46facca710d63e72c7516487cc18019acfe5e79662f1d6b03fab281787c3ce633099dac3158f48901556b3fdc450700a247f85bc8d23bc46c791cbd352c34bebc791728dca4751efaa3e119f249dd587c46a15a8d8760b30ee0bc9c749acf103d1b82bedcafb0a0d1ed0ec3218a2929dd7248d29359b47f73dd27a330a46809cb10396eb1e2c83399197bc020c56ef37b19a", 0x3f) 2.031589342s ago: executing program 5 (id=1681): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x83fb, 0x789b1c25, 0x29, 0x92, 0x1, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x8006, 0x81, 0x6, 0x1a449, 0x3, 0x4000000b, 0x87, 0x400caa7, 0x0, 0x20001e5c, 0xb, 0xffc00006, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 2.022947041s ago: executing program 5 (id=1682): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') read$FUSE(r0, &(0x7f0000006180)={0x2020}, 0x2020) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) 1.951949779s ago: executing program 5 (id=1683): r0 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x20, 0x3, 0x117}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/145, 0x91}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/12, 0xc}], 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x94200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r2], 0x1) listen(r1, 0x100) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000100)) 1.103284876s ago: executing program 5 (id=1684): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x9, 0x10000, 0x3e12, 0x1}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}, 0x400, 0x1, 0x1}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 953.509746ms ago: executing program 5 (id=1685): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x13) r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000022c0)='nilfs2\x00', 0x10003, &(0x7f0000000000)='norecovery') syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0xfffc, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, {0x14, 0x0, 0x0, @remote, "53f683785c5b987df5ff06000000007ee410f074"}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x88200, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1a) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x104) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) writev(r3, &(0x7f00000003c0), 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x16, 0x2, 0x70bd25, 0x25dfdbfe, {0x16}, [@generic="8d24cc85d2adcf90bd2a272d6c37775667c29876c9bda9d223922061ac48daec18f333ba2bdc0cda68cc2f8b4430a509ae526db6c1bdffb4c36b46ef0d0d998cc5e824c6591d0601a17ae5edd03129e8724813368986e42ee7e330202bc539734ba472694589a20b35944b711c37e5a9b5bddf0ee555abcf0936d7cd3ed3950a21a07bf689e86a9a2572b509b0b4202b", @nested={0x10, 0x53, 0x0, 0x1, [@typed={0xc, 0x146, 0x0, 0x0, @u64=0x3}]}, @typed={0x14, 0x102, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20040000}, 0xc010) 702.927133ms ago: executing program 4 (id=1686): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000008"], 0xf0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0xfffffe19, 0x0, &(0x7f0000000a00)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="28040000130001000000000000000000000000000000000000000000000000017f0000010000000000000000000000000000000000000000020020202b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000f60003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700500007442cbb642a39a6a8560bdc3f85c5a6073026d03e7544b998fbaa78ad39feb6576a02176e09f0bb6196d4a3573df76df94771d06619be28305346a0b8f8f202c3afa28d73a5adbc882338ec7ab88ba9c5c5b055749515bf3b3ef66485400c7705eac2b62f164e9056a5514083841b94a8785c0c7e4201f3ec117cac4dae80d29a7a0053344b8ba0d2969bc02230cfd122fbfb7532fc45df768aef314ad779c48f56d2e79c4ca6ceb899daf62167b000004010500ac141420000000000000000000000000000004d43c0000000b000000ff0100000000000000000000000000010735000000040200ff0000000900000006000000ac1e0101000000000000000000000000000004d4330000000a000000fc0200000000000000000000000000010635000003010000030000000100000040000000e0000001000000000000000000000000000004d32b000000020000000a010100000000000000000000000000000000000200a400050000001100000053a4000064010101000000000000000000000000000004d66c0000000a000000640101010000000000000000deffffff043500000402a4009f0a0000f8ffffffc5710000080016000700000008001e00f6ffffff0c000800"], 0x428}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05002abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xa0c0) 698.621327ms ago: executing program 1 (id=1687): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$binfmt_misc(r0, &(0x7f0000000380)="f2e8aefa46d51540fcfd3acb558cee54d33b778f63dbb52d36789e7246d511f4cfbe1a20ad0bd17806", 0x29) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000002502ca471b01b57b55ee54f1ccd74f2e8aac31f7f3baa0818ed1ea1dc1b2db", @ANYRES16=r3, @ANYBLOB="11002bbd7000bddbdf2507000000080001007a08000008000300", @ANYRES32=r2, @ANYBLOB="0c009900fbfffffffcffffff1400040070696d7265670000000000000000000005005300010000000800050002000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r4, 0x409, 0xb) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x36}}}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40101}, 0x4080) unshare(0x42000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9", 0x68}], 0x3, 0x0, 0x0, 0x8000}], 0x1, 0x40800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) recvmsg$qrtr(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000540)=""/235, 0xeb}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x40010000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0xfffe, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3fa034d1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6eb}], @NL80211_ATTR_SSID={0x10, 0x34, @random="7f6c34d425bf323115bb78ed"}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4094) 638.19053ms ago: executing program 4 (id=1688): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0x80000001, 0x1}, 0xc) 637.087305ms ago: executing program 4 (id=1689): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x4000010, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x3, 0x0, [{0x25000, 0x4d, &(0x7f0000000380)=""/77}, {0x54000, 0xeb, &(0x7f0000000200)=""/235}, {0xc000, 0xf9, &(0x7f0000000400)=""/249}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x8000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x5) bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x0, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4028010}, 0x0) r6 = dup3(r1, r5, 0x80000) sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x40400d1}, 0x2400c0c1) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) unshare(0x22020600) accept4(r1, 0x0, 0x0, 0x80000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x120) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 552.304827ms ago: executing program 4 (id=1690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000740)="2703022b590241c90000002f1eafbcf706e1050000008847000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed11530b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e3635a638cfeb9f79c930a4d18260e503866005a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xff4a}, {&(0x7f0000000a00)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cdaed13001359ba467bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f81e368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed73b5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7dcbe70f3260816bc376bcdc5352771fad9733e27730ec7103520e8359c78edd21ee6c68feb1905cfd622f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad71de09d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8f1e267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3ef687a4dab5c9fd6ad59b440c00a0dd054b2ee6237b89446d15c1598eca7086c702104266e593389962643d03094b6925958eefe1f6798e85010ec6d5a7572ff5feffab7fc04da8f866f68ad4bb3ad45db69072a1ef83ddc4a7f2489fcc778b057c2ea4a58eb7fa71af0c8511deb65a6307f6084cbf63b446", 0x1a1}, {&(0x7f0000000340)="6ffddd9e02846d6dc4d197e968071da0a1dac0150c922f88fff8c7a74eaa1cb3607e38cfb32cad5e11a973000000caaf8316d40bb602ffa80000000000000049d74c", 0xfe69}], 0x4, 0x0, 0x4d}, 0x24000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x1214040, 0x0) r2 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="91dc240a0a4884dbaef2e73e1ab294af08fe0e012c5cde3cda567a238d6f22edaba257f2a131ac7778aa53687accac4bbd34928a5df3e5486e59d1382881b589e8ba3d69e6", 0x45}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x30}, 0x20000800) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16=r4, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x1e, 0x5, 0x0) listen(r6, 0x2000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x70bd26, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000680)=ANY=[], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000700)={0x4, 0x8}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) 399.643248ms ago: executing program 1 (id=1691): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x7}, {0x1, "cf521e122983747531924c0f37cce1ec3013066553cdcb6810ca727aba701a82040d1b1b4f069645ad25b0c3d8a04d415d32a40e643fe35b701c3cd675dbf136"}}}}, 0x47) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_getevents(r3, 0x50c, 0x9, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={0x0, 0x989680}) io_destroy(r3) r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r3, 0x4, &(0x7f0000000840)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xac, r7, &(0x7f0000000200)="72d008890740fc59c7083d46edf6b2ffd53e2d7b89c26061734c109bda259c7028d0271c8a31410a291f0b05ccc39374ec0762b579c9869a9d6b1debf7d209dd5d7b0aae1ad15fc9c04c2a5db6522bf6bca52773f0ae7e8c0c8727f5a9a23fc8391d2dacf8785adacdf569b0992b0c587423de7576433f9f3c00e889afa7aff04b5408f29ace416cc60fe341e6d6e136ae46d48c70964ef708a55f5f207f213cdeb915ac786b7cb339f248ce65f890b8", 0xb0, 0x8, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x85af, 0xffffffffffffffff, &(0x7f0000000540)="fd19b153fe769bb97431e0c1e31ac7e9d360fac207ab040a6d7be9596d72fb4f290c09415c54acc727b3e758ab44965954efce43ffc29d92ef2c49d4160525e585eaaa6043e56cdfcbcb33f82c58c25ac5ab5ba7ce23a9b1dd9b73e165bf5ca7e6f9078a5433cea519a70c81baa6bab6c98477f7f4ec8f21179ed3b948ad5179befb70af9a02ce0aa9efad71fc45ca37f9fa6ccafd52898a77d78f7a03a1982ed9c3e503713e56150fc49e9525798febe4cd430967357c", 0xb7, 0xfffffffffffffffc, 0x0, 0x3, r1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x5, r4, &(0x7f0000000600)="a1d83792518323993d760af1fb312210c4b52ec2073b434b2abff9a0869748ab384765b0699e614dc7cd4d95a1e703957eee23c70c2562024a7d9e28191546a5a68b990a19c05e2ad6308321c626f7a8bcfb04fb53e0e9574eb876a04187cae76207cd691e5d983f3e2dc25cf55c20159a2cf6ba0ff58e9e70824ad7cecaba08d5fbf22a669b224eca19dc8a44aefbb2234c80343ada85d4167411e6c33614d9206fbcc036dcf3a719187d9819d0fc7904238bd5021f4d1eecc397ddb91b61b5746150205c35", 0xc6, 0x6, 0x0, 0x1, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x6, 0x3, r0, &(0x7f0000000740)="2dd61d8efde7a71b3e0a886918b6d9f3c6c4bd42f94174b61083d9d298a8fbfc604b3367e71ad3385904d0ecbddf7e6cc87108cc5a8d2227ba658709780f4dfe03c45e7239ad7fce96f20662c803a7fa3fb96caaa1902b8425ee649e606505b8f13cb8c598576058f3ad13f52bc3d644b5527f41a05c0a076b579e315b7e65f884e499b6054305d7d1ca1f0010dc24df2f810f5c34a1be19", 0x98, 0xfe6, 0x0, 0x3}]) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f0000000480)=0xffff8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000100)=0x1000) 93.831092ms ago: executing program 1 (id=1692): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x10000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0x100000001, r0, 'id1\x00'}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 615.784µs ago: executing program 1 (id=1693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000001c001a80080200080000003e120000080002"], 0x44}}, 0x80) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x3d, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xb1a1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e24, 0x7, @private0, 0x5}}, 0x1000, 0x4, 0x0, 0x3, 0x7}, &(0x7f0000000200)=0x98) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 1 (id=1694): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0x900, 0x2}) getsockopt(r2, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @private, 0x0}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0xcb, 0x0, 0xa0, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x8, 0x8, 0x5, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x10, 0x40, 0x25f5, 0x3, {{0xd, 0x4, 0x3, 0x26, 0x34, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x3, 0x20}, @timestamp={0x44, 0x8, 0x7c, 0x0, 0x2, [0x1]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x3, [{@broadcast, 0x1}, {@private=0xa010101, 0x7}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)={0x1a4, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x43c8d5566230b106}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40001}, 0x20000804) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000240)=0x21, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r14 = socket$inet_sctp(0x2, 0x1, 0x84) r15 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r15, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x26, 0x2, 0x42474752, [0x680, 0xe4], [0x7ff, 0xfeedcafe], 0x13a}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f00000000c0)={r16, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r16, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x3}}, 0x2, 0x8}, &(0x7f00000000c0)=0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) kernel console output (not intermixed with test programs): 52547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 469.580269][ T9181] veth1_to_bond: entered allmulticast mode [ 469.623225][ T9229] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 469.702040][ T9233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=9233 comm=syz.2.911 [ 469.710803][ T9233] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 469.713375][ T9233] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 469.717120][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.911'. [ 469.769184][ T5992] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 469.899470][ T5926] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 469.990772][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 470.083571][ T5926] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 470.087235][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 470.090295][ T5926] usb 10-1: Product: syz [ 470.091700][ T5926] usb 10-1: Manufacturer: syz [ 470.093270][ T5926] usb 10-1: SerialNumber: syz [ 470.101225][ T5926] usb 10-1: config 0 descriptor?? [ 470.108734][ T5926] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 470.111691][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 470.120289][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 470.125258][ T5926] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 470.127883][ T5926] usb 10-1: media controller created [ 470.138654][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.310153][ T9231] cxusb: i2c rd: len=4096 is too big! [ 470.310153][ T9231] [ 470.424413][ T9254] netlink: 64 bytes leftover after parsing attributes in process `syz.5.910'. [ 470.465873][ T5926] cxusb: set interface failed [ 470.467577][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 470.478946][ T9256] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.482772][ T9256] loop6: detected capacity change from 0 to 524279808 [ 470.485089][ T5926] DVB: Unable to find symbol mt352_attach() [ 470.487198][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 470.489204][ T5926] zl10353_read_register: readreg error (reg=127, ret==-121) [ 470.492362][ T5926] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 470.551442][ T5926] rc_core: IR keymap rc-dvico-mce not found [ 470.551911][ T9256] loop6: detected capacity change from 524279808 to 1 [ 470.553901][ T5926] Registered IR keymap rc-empty [ 470.560904][ T5926] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 470.564928][ T9256] Dev loop6: unable to read RDB block 1 [ 470.566926][ T5926] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input27 [ 470.569611][ T9256] loop6: unable to read partition table [ 470.573119][ T5926] dvb-usb: schedule remote query interval to 100 msecs. [ 470.574112][ T9256] loop6: partition table beyond EOD, truncated [ 470.576690][ T5926] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 470.585247][ T5926] usb 10-1: USB disconnect, device number 4 [ 470.585457][ T9256] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 470.615536][ T5926] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 471.523618][ T5993] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 471.543629][ T5992] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 471.647994][ T9270] lo speed is unknown, defaulting to 1000 [ 471.697770][ T5992] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 471.701017][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.703851][ T5992] usb 7-1: Product: syz [ 471.705590][ T5992] usb 7-1: Manufacturer: syz [ 471.707249][ T5992] usb 7-1: SerialNumber: syz [ 471.729497][ T9270] lo speed is unknown, defaulting to 1000 [ 471.862357][ T9289] F2FS-fs: Conflicting test_dummy_encryption options [ 471.925653][ T9176] veth1_to_bond: left allmulticast mode [ 471.933036][ T5926] usb 9-1: USB disconnect, device number 5 [ 471.966405][ T5992] rtl8150 7-1:1.0: couldn't reset the device [ 471.968806][ T5992] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 471.980856][ T9301] loop4: detected capacity change from 0 to 2560 [ 471.987555][ T5992] usb 7-1: USB disconnect, device number 16 [ 471.990713][ T9301] buffer_io_error: 11 callbacks suppressed [ 471.990723][ T9301] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 471.998026][ T9301] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 472.001444][ T9301] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 472.005274][ T9301] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 472.009013][ T9301] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 472.012548][ T9301] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 472.017092][ T9301] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 472.020225][ T9301] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 472.023640][ T9301] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 472.027429][ T9301] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 472.077886][ T9301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4 sclass=netlink_xfrm_socket pid=9301 comm=syz.1.929 [ 472.083261][ T9301] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.367554][ T9318] lo speed is unknown, defaulting to 1000 [ 472.425747][ T5926] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 472.433273][ T9319] netlink: 'syz.5.935': attribute type 16 has an invalid length. [ 472.442048][ T9319] netlink: 'syz.5.935': attribute type 17 has an invalid length. [ 472.455838][ T9319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.460943][ T9318] lo speed is unknown, defaulting to 1000 [ 472.524426][ T9325] sctp: [Deprecated]: syz.2.937 (pid 9325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.524426][ T9325] Use struct sctp_sack_info instead [ 472.524578][ T9326] Invalid source name [ 472.532333][ T9326] UBIFS error (pid: 9326): cannot open "/dev/sg0", error -22 [ 472.573600][ T9328] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 472.577705][ T5926] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 472.582354][ T9328] SELinux: failed to load policy [ 472.582881][ T5926] usb 6-1: config 0 has no interface number 0 [ 472.586956][ T5926] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 472.590632][ T5926] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 472.594130][ T5926] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 472.598819][ T5926] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 472.602609][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 472.605210][ T5926] usb 6-1: Product: syz [ 472.606916][ T5926] usb 6-1: SerialNumber: syz [ 472.610061][ T5926] usb 6-1: config 0 descriptor?? [ 472.613684][ T5926] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 472.616990][ T5926] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input28 [ 472.750535][ T9339] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 472.752709][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 472.755355][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 472.760702][ T9347] vhci_hcd: connection closed [ 472.760854][ T9043] vhci_hcd vhci_hcd.5: stop threads [ 472.765201][ T9043] vhci_hcd vhci_hcd.5: release socket [ 472.777310][ T9043] vhci_hcd vhci_hcd.5: disconnect device [ 472.923341][ T9349] lo speed is unknown, defaulting to 1000 [ 473.037258][ T9334] input: syz0 as /devices/virtual/input/input29 [ 473.216679][ T9349] lo speed is unknown, defaulting to 1000 [ 473.347060][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.350429][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.366564][ T9360] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 473.368937][ T9360] dvmrp1: linktype set to 519 [ 473.435111][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 473.435709][ T5993] usb 6-1: USB disconnect, device number 17 [ 473.438241][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 473.450507][ T5993] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 473.555592][ T9368] IPv6: Can't replace route, no match found [ 473.578507][ T6003] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 473.726700][ T9372] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=9315 sclass=netlink_xfrm_socket pid=9372 comm=syz.5.950 [ 473.737279][ T6003] usb 9-1: Using ep0 maxpacket: 32 [ 473.742446][ T6003] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 473.745710][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.750062][ T9375] netlink: 'syz.2.951': attribute type 2 has an invalid length. [ 473.754356][ T9375] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 473.760040][ T6003] usb 9-1: config 0 descriptor?? [ 473.772939][ T6003] as10x_usb: device has been detected [ 473.775553][ T6003] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 473.790399][ T6003] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 473.815622][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 473.815640][ T40] audit: type=1400 audit(1767045232.285:727): avc: denied { firmware_load } for pid=6003 comm="kworker/0:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 473.816279][ T6003] as10x_usb: error during firmware upload part1 [ 473.830758][ T6003] Registered device nBox DVB-T Dongle [ 473.965300][ T9358] __nla_validate_parse: 9 callbacks suppressed [ 473.965317][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 473.975484][ T9357] random: crng reseeded on system resumption [ 473.985895][ T9358] binder: 9356:9358 ioctl c0306201 200000000440 returned -22 [ 473.989331][ T9357] binder: 9356:9357 ioctl c0306201 200000000440 returned -22 [ 473.996274][ T6711] usb 9-1: USB disconnect, device number 6 [ 474.013567][ T6711] Unregistered device nBox DVB-T Dongle [ 474.014921][ T6711] as10x_usb: device has been disconnected [ 474.605230][ T9391] bond2: ARP target 4.0.0.0 is already present [ 474.607867][ T9391] bond2: option arp_ip_target: invalid value (4) [ 474.612601][ T9391] bond2 (unregistering): Released all slaves [ 474.766362][ T9399] bond2: option downdelay: invalid value (18446744073709551615) [ 474.769213][ T9399] bond2: option downdelay: allowed values 0 - 2147483647 [ 474.792307][ T9399] bond2 (unregistering): Released all slaves [ 474.983226][ T9409] delete_channel: no stack [ 475.109582][ T9422] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.964'. [ 475.156121][ T9424] /dev/nullb0: Can't open blockdev [ 475.324757][ T40] audit: type=1400 audit(1767045233.792:728): avc: denied { read write } for pid=9433 comm="syz.4.968" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.335007][ T40] audit: type=1400 audit(1767045233.792:729): avc: denied { open } for pid=9433 comm="syz.4.968" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.345963][ T40] audit: type=1400 audit(1767045233.792:730): avc: denied { ioctl } for pid=9433 comm="syz.4.968" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.799922][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 475.845340][ T40] audit: type=1400 audit(1767045234.311:731): avc: denied { append } for pid=9456 comm="syz.4.975" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 475.922765][ T40] audit: type=1400 audit(1767045234.381:732): avc: denied { relabelfrom } for pid=9456 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 475.930436][ T40] audit: type=1400 audit(1767045234.381:733): avc: denied { relabelto } for pid=9456 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 475.947194][ T9463] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.976'. [ 475.948322][ T40] audit: type=1400 audit(1767045234.391:734): avc: denied { attach_queue } for pid=9456 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 475.951273][ T9463] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 475.963523][ T9471] 9pnet_virtio: no channels available for device syz [ 476.158466][ T40] audit: type=1326 audit(1767045234.621:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.1.982" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94c318f7c9 code=0x0 [ 476.232356][ T40] audit: type=1400 audit(1767045234.690:736): avc: denied { bind } for pid=9480 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 476.259087][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 476.387216][ T9492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9492 comm=syz.5.987 [ 476.390756][ T9490] /dev/nullb0: Can't open blockdev [ 476.393551][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.987'. [ 476.399298][ T9492] chnl_net:caif_netlink_parms(): no params data found [ 476.399866][ T9490] /dev/nullb0: Can't open blockdev [ 476.417443][ T9490] bridge0: entered promiscuous mode [ 476.419265][ T9490] bridge0: entered allmulticast mode [ 476.422874][ T9490] team0: Port device bridge0 added [ 476.623815][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 476.630558][ T9509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9509 comm=syz.5.993 [ 476.707988][ T9522] lo speed is unknown, defaulting to 1000 [ 476.749480][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 476.833380][ T9522] lo speed is unknown, defaulting to 1000 [ 476.920128][ T9532] IPVS: length: 24 != 6168 [ 476.953808][ T9534] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.019758][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'. [ 477.049511][ T9550] bridge_slave_0: left allmulticast mode [ 477.051460][ T9550] bridge_slave_0: left promiscuous mode [ 477.053338][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.059783][ T9550] bridge_slave_1: left allmulticast mode [ 477.061614][ T9550] bridge_slave_1: left promiscuous mode [ 477.063552][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.070138][ T9550] bond0: (slave bond_slave_0): Releasing backup interface [ 477.073641][ T9550] bond0: (slave bond_slave_1): Releasing backup interface [ 477.093271][ T9550] team0: Port device team_slave_0 removed [ 477.108748][ T9550] team0: Port device team_slave_1 removed [ 477.113250][ T9550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.123271][ T9550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.129276][ T9550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 477.246313][ T5992] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 477.259884][ T9557] team0: Mode changed to "loadbalance" [ 477.417540][ T9574] lo speed is unknown, defaulting to 1000 [ 477.499516][ T9582] NILFS (loop1): device size too small [ 477.629515][ T9574] lo speed is unknown, defaulting to 1000 [ 478.250800][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1018'. [ 478.257711][ T9593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9593 comm=syz.1.1016 [ 478.266120][ T9596] ntfs3(loop2): try to read out of volume at offset 0x0 [ 478.331301][ T9593] macvlan3: entered promiscuous mode [ 478.333601][ T9593] macvlan3: entered allmulticast mode [ 478.347209][ T9593] bond4: entered promiscuous mode [ 478.350095][ T9593] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 478.359222][ T9593] bond4: left promiscuous mode [ 478.599892][ T9631] sctp: [Deprecated]: syz.1.1029 (pid 9631) Use of int in maxseg socket option. [ 478.599892][ T9631] Use struct sctp_assoc_value instead [ 478.787169][ T9643] 9p: Could not find request transport: v [ 478.858960][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 478.858977][ T40] audit: type=1400 audit(1767045237.328:746): avc: denied { relabelto } for pid=9655 comm="syz.4.1037" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 479.093217][ T9669] new mount options do not match the existing superblock, will be ignored [ 479.115665][ T40] audit: type=1400 audit(1767045237.589:747): avc: denied { unmount } for pid=8528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 479.157754][ T9671] bond2: option xmit_hash_policy: invalid value (6) [ 479.161827][ T9671] bond2 (unregistering): Released all slaves [ 479.183713][ T9679] __nla_validate_parse: 6 callbacks suppressed [ 479.183731][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 479.193285][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 479.202702][ T9681] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 479.206324][ T9681] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 479.335395][ T40] audit: type=1400 audit(1767045237.800:748): avc: denied { ioctl } for pid=9694 comm="syz.2.1051" path="socket:[35073]" dev="sockfs" ino=35073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.386992][ T9699] 9p: Bad value for 'rfdno' [ 479.422571][ T9701] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 479.472987][ T6003] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 479.613554][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1056'. [ 479.614447][ T9712] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1056'. [ 479.638092][ T9709] kvm: pic: non byte read [ 479.641224][ T6003] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 479.641498][ T9709] kvm: pic: non byte read [ 479.645073][ T6003] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 479.648442][ T9709] kvm: pic: non byte read [ 479.651551][ T6003] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 479.651596][ T6003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 479.656147][ T9709] kvm: pic: non byte read [ 479.657861][ T6003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 479.664054][ T9709] kvm: pic: non byte read [ 479.667515][ T6003] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 479.672664][ T9709] kvm: pic: single mode not supported [ 479.673288][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 479.677718][ T9709] kvm: pic: non byte read [ 479.679740][ T6003] usb 9-1: Product: syz [ 479.679757][ T6003] usb 9-1: Manufacturer: syz [ 479.685072][ T9709] kvm: pic: non byte read [ 479.690815][ T6003] cdc_wdm 9-1:1.0: skipping garbage [ 479.692847][ T9709] kvm: pic: level sensitive irq not supported [ 479.693983][ T6003] cdc_wdm 9-1:1.0: skipping garbage [ 479.694277][ T9709] kvm: pic: non byte read [ 479.698368][ T6003] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 479.703563][ T6003] cdc_wdm 9-1:1.0: Unknown control protocol [ 479.799755][ T9716] team0: Port device bridge3 added [ 479.805576][ T9719] bond0: entered promiscuous mode [ 479.807961][ T9719] bond_slave_0: entered promiscuous mode [ 479.810616][ T9719] bond_slave_1: entered promiscuous mode [ 479.815221][ T9716] bridge0: port 1(team0) entered blocking state [ 479.817452][ T9716] bridge0: port 1(team0) entered disabled state [ 479.819875][ T9716] team0: entered allmulticast mode [ 479.822881][ T9716] bridge3: entered allmulticast mode [ 479.826692][ T9716] team0: entered promiscuous mode [ 479.828424][ T9716] bridge3: entered promiscuous mode [ 479.898687][ T40] audit: type=1400 audit(1767045238.363:749): avc: denied { create } for pid=9729 comm="syz.5.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.906621][ T40] audit: type=1400 audit(1767045238.383:750): avc: denied { connect } for pid=9729 comm="syz.5.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.920396][ T40] audit: type=1400 audit(1767045238.383:751): avc: denied { write } for pid=9729 comm="syz.5.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 480.061802][ T40] audit: type=1400 audit(1767045238.533:752): avc: denied { append } for pid=9734 comm="syz.5.1063" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 480.159935][ T6711] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 480.232566][ T9739] erspan1: entered promiscuous mode [ 480.331420][ T6711] usb 7-1: config index 0 descriptor too short (expected 72, got 66) [ 480.334778][ T6711] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 480.339846][ T6711] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 480.347211][ T6711] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.351122][ T6711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.354356][ T6711] usb 7-1: Product: syz [ 480.356065][ T6711] usb 7-1: Manufacturer: syz [ 480.358081][ T6711] usb 7-1: SerialNumber: syz [ 480.365324][ T6711] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 480.390853][ T1025] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 480.429580][ T9742] 9p: Bad value for 'rfdno' [ 480.587589][ T40] audit: type=1401 audit(1767045239.056:753): op=fscreate invalid_context=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 480.609737][ T6711] usb 7-1: USB disconnect, device number 17 [ 480.685467][ T40] audit: type=1400 audit(1767045239.156:754): avc: denied { append } for pid=9755 comm="syz.1.1070" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 480.790729][ T9761] batman_adv: batadv0: Interface deactivated: gretap1 [ 480.932492][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1075'. [ 481.127704][ T9776] binder: 9775:9776 ioctl c018aa3f 200000000080 returned -22 [ 481.131529][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'. [ 481.180732][ T9776] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9776 comm=syz.1.1078 [ 481.204699][ T5992] usb 9-1: USB disconnect, device number 7 [ 481.218683][ T40] audit: type=1400 audit(1767045239.698:755): avc: denied { read } for pid=9782 comm="syz.2.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.474454][ T1025] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 481.479124][ T1025] ath9k_htc: Failed to initialize the device [ 481.494389][ T6711] usb 7-1: ath9k_htc: USB layer deinitialized [ 481.573750][ T9805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.577063][ T9805] IPv6: NLM_F_CREATE should be set when creating new route [ 481.580376][ T9805] IPv6: NLM_F_CREATE should be set when creating new route [ 481.583631][ T9805] IPv6: NLM_F_CREATE should be set when creating new route [ 498.743182][ T40] audit: type=1400 audit(1767045257.264:756): avc: denied { accept } for pid=9813 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 498.894678][ T9835] /dev/nullb0: Can't open blockdev [ 498.898909][ T9835] /dev/nullb0: Can't open blockdev [ 498.905188][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 498.946941][ T9837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 499.025883][ T9848] mkiss: ax0: crc mode is auto. [ 499.186366][ T9852] trusted_key: syz.4.1100 sent an empty control message without MSG_MORE. [ 499.195843][ T40] audit: type=1400 audit(1767045257.715:757): avc: denied { map } for pid=9851 comm="syz.4.1100" path="/proc/400/net/pfkey" dev="proc" ino=4026533933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 499.231838][ T40] audit: type=1400 audit(1767045257.755:758): avc: denied { watch_mount } for pid=9853 comm="syz.1.1101" path="/291" dev="tmpfs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 499.426690][ T9864] netlink: 'syz.4.1104': attribute type 2 has an invalid length. [ 499.490194][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 499.502709][ T9867] veth1_to_hsr: entered promiscuous mode [ 499.505373][ T9867] macvlan2: entered allmulticast mode [ 499.507926][ T9867] veth1_to_hsr: entered allmulticast mode [ 499.538226][ T6003] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 499.578151][ T40] audit: type=1400 audit(1767045258.096:759): avc: denied { unmount } for pid=7904 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 499.676699][ T9874] smc: net device wlan1 applied user defined pnetid SYZ1 [ 499.710836][ T6003] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 499.714249][ T6003] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 499.717221][ T6003] usb 6-1: config 220 interface 0 has no altsetting 0 [ 499.720190][ T40] audit: type=1400 audit(1767045258.246:760): avc: denied { execute } for pid=9877 comm="syz.4.1109" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 499.721574][ T6003] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 499.730208][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1110'. [ 499.733203][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.736822][ T6003] usb 6-1: Product: syz [ 499.738567][ T6003] usb 6-1: Manufacturer: syz [ 499.740101][ T6003] usb 6-1: SerialNumber: syz [ 499.856728][ T9887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.860066][ T9887] IPv6: NLM_F_CREATE should be set when creating new route [ 499.951448][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.955073][ T9887] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.966899][ T40] audit: type=1400 audit(1767045258.486:761): avc: denied { read } for pid=9888 comm="syz.4.1113" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 499.967894][ T9889] sd 0:0:0:0: PR command failed: 1026 [ 499.977081][ T40] audit: type=1400 audit(1767045258.486:762): avc: denied { open } for pid=9888 comm="syz.4.1113" path="/131/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 499.979073][ T9889] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 499.989937][ T40] audit: type=1400 audit(1767045258.496:763): avc: denied { ioctl } for pid=9888 comm="syz.4.1113" path="/131/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 499.991938][ T9889] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 500.056735][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.077014][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.219548][ T6035] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.226613][ T6035] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.230584][ T6035] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.234120][ T6035] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.243421][ T6035] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.250418][ T6035] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.257317][ T6035] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.261226][ T6035] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 500.270581][ T6003] uvcvideo 6-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 500.273001][ T6003] uvcvideo 6-1:220.0: No valid video chain found. [ 500.281921][ T6003] usb 6-1: USB disconnect, device number 18 [ 500.475345][ T40] audit: type=1400 audit(1767045258.997:764): avc: denied { ioctl } for pid=9898 comm="syz.2.1116" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 500.549608][ T9907] ntfs3: Unknown parameter 'discardm' [ 500.552058][ T9908] ntfs3: Unknown parameter 'discardm' [ 500.608956][ T9915] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 500.686669][ T9918] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 500.759277][ T9923] tipc: Started in network mode [ 500.766292][ T9923] tipc: Node identity de0e1bc6aa52, cluster identity 4711 [ 500.769591][ T9923] tipc: Enabled bearer , priority 0 [ 500.779410][ T9923] tipc: Resetting bearer [ 500.808749][ T9929] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.840933][ T9924] tipc: Disabling bearer [ 501.094433][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1131'. [ 501.099815][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 501.106483][ T1025] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 501.157772][ T9951] bond1: option downdelay: invalid value (18446744073709551615) [ 501.160488][ T9951] bond1: option downdelay: allowed values 0 - 2147483647 [ 501.164360][ T9951] bond1 (unregistering): Released all slaves [ 501.266733][ T1025] usb 6-1: Using ep0 maxpacket: 8 [ 501.275889][ T1025] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 501.279932][ T1025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.300902][ T1025] pvrusb2: Hardware description: Terratec Grabster AV400 [ 501.310459][ T1025] pvrusb2: ********** [ 501.312261][ T1025] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 501.316787][ T1025] pvrusb2: Important functionality might not be entirely working. [ 501.320191][ T1025] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 501.325009][ T1025] pvrusb2: ********** [ 501.380507][ T9967] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 501.425866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 501.597931][ T2491] pvrusb2: Invalid write control endpoint [ 501.665558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 501.673806][ T9971] Invalid option length (1048180) for dns_resolver key [ 501.999705][ T9973] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.234292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 502.264272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 502.267883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 502.325283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 502.328525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 502.435974][ T6003] usb 6-1: USB disconnect, device number 19 [ 502.442780][ T2491] pvrusb2: Invalid write control endpoint [ 502.457244][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 502.459349][ T9978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 502.461659][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 502.468937][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 502.472905][ T2491] pvrusb2: Device being rendered inoperable [ 502.479999][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 502.483163][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 502.492384][ T2491] pvrusb2: Attached sub-driver cx25840 [ 502.495124][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 502.500290][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 502.970732][T10011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1146'. [ 502.975048][T10011] gre0: Master is either lo or non-ether device [ 503.145354][T10023] input: syz1 as /devices/virtual/input/input30 [ 503.374715][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 503.388256][T10035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=10035 comm=syz.1.1153 [ 503.433741][T10039] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 503.448446][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'. [ 503.462570][ T6003] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 503.609381][T10051] 9pnet_virtio: no channels available for device syz [ 503.609525][T10052] 9pnet_virtio: no channels available for device syz [ 503.623672][ T6003] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.630444][ T6003] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 503.635754][ T6003] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.639827][ T6003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 503.644765][ T6003] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 503.651206][ T6003] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.655721][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.659285][ T6003] usb 9-1: Product: syz [ 503.661277][ T6003] usb 9-1: Manufacturer: syz [ 503.673946][ T6003] cdc_wdm 9-1:1.0: skipping garbage [ 503.676271][ T6003] cdc_wdm 9-1:1.0: skipping garbage [ 503.683948][ T6003] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 503.686659][ T6003] cdc_wdm 9-1:1.0: Unknown control protocol [ 503.966387][T10080] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1164'. [ 503.985785][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 504.250413][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.501170][ T6003] IPVS: starting estimator thread 0... [ 504.559201][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1176'. [ 504.593732][T10147] IPVS: using max 45 ests per chain, 108000 per kthread [ 504.638367][ T6711] usb 9-1: USB disconnect, device number 8 [ 505.303915][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 505.415088][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 505.703438][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 505.855353][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 505.909992][ T40] audit: type=1400 audit(1767045264.445:765): avc: denied { block_suspend } for pid=10199 comm="syz.4.1190" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.939468][ T40] audit: type=1400 audit(1767045264.465:766): avc: denied { connect } for pid=10196 comm="syz.5.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 506.092208][ T40] audit: type=1400 audit(1767045264.625:767): avc: denied { bind } for pid=10210 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 506.131774][T10207] xt_hashlimit: invalid rate [ 506.724078][T10223] 9pnet_virtio: no channels available for device syz [ 506.745273][T10219] bond2: entered promiscuous mode [ 506.773413][T10227] netlink: 'syz.5.1199': attribute type 1 has an invalid length. [ 506.780514][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.783847][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.815982][T10227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.862265][T10226] bond1: (slave veth3): Enslaving as an active interface with a down link [ 506.889295][T10227] bond1: (slave dummy0): making interface the new active one [ 506.893549][T10227] dummy0: entered promiscuous mode [ 506.896182][T10227] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 506.916311][T10235] 9pnet_virtio: no channels available for device syz [ 506.929717][T10098] bond1: (slave dummy0): link status definitely down, disabling slave [ 506.933987][T10098] dummy0: left promiscuous mode [ 506.940098][T10098] bond1: now running without any active interface! [ 506.949453][T10226] netlink: 'syz.5.1199': attribute type 10 has an invalid length. [ 506.952786][T10226] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1199'. [ 506.956754][T10226] dummy0: entered promiscuous mode [ 506.962733][T10226] bond1: (slave dummy0): Releasing active interface [ 506.973585][ T40] audit: type=1400 audit(1767045265.506:768): avc: denied { write } for pid=10233 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 507.128450][T10247] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 507.128476][T10247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.132195][T10247] vhci_hcd vhci_hcd.0: Device attached [ 507.367633][ T1025] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 507.929287][T10252] vhci_hcd: connection reset by peer [ 507.933600][T10097] vhci_hcd vhci_hcd.4: stop threads [ 507.935897][T10097] vhci_hcd vhci_hcd.4: release socket [ 507.947364][T10097] vhci_hcd vhci_hcd.4: disconnect device [ 508.333238][T10247] syz.4.1207 (10247): drop_caches: 1 [ 508.455239][T10247] syz.4.1207 (10247): drop_caches: 1 [ 512.452493][ T1025] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 519.963254][ T9033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.968293][ T9033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 519.972774][ T9033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.057424][ T9033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.061945][ T9033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 520.066533][ T9033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.186686][ T9033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.190053][ T9033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 520.193385][ T9033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.283153][ T9033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.286782][ T9033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 520.290110][ T9033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.399894][ T9033] team0: left allmulticast mode [ 520.401566][ T9033] team_slave_0: left allmulticast mode [ 520.403419][ T9033] team0: left promiscuous mode [ 520.404997][ T9033] team_slave_0: left promiscuous mode [ 520.407263][ T9033] bridge0: port 3(team0) entered disabled state [ 520.415276][ T9033] bridge_slave_1: left allmulticast mode [ 520.417226][ T9033] bridge_slave_1: left promiscuous mode [ 520.419263][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.423153][ T9033] bridge_slave_0: left allmulticast mode [ 520.425266][ T9033] bridge_slave_0: left promiscuous mode [ 520.427212][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.989284][ T9033] smc: removing net device bond0 with user defined pnetid SYZ2 [ 520.993172][ T9033] bond0 (unregistering): Released all slaves [ 521.078696][ T9033] bond1 (unregistering): Released all slaves [ 521.468367][ T9033] hsr_slave_0: left promiscuous mode [ 521.470591][ T9033] hsr_slave_1: left promiscuous mode [ 521.472776][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.475369][ T9033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.478464][ T9033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.481002][ T9033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.489967][ T9033] veth1_macvtap: left promiscuous mode [ 521.491836][ T9033] veth0_macvtap: left promiscuous mode [ 521.493790][ T9033] veth1_vlan: left promiscuous mode [ 521.495719][ T9033] veth0_vlan: left promiscuous mode [ 521.905364][ T9033] team0 (unregistering): Port device team_slave_0 removed [ 522.190030][ T9053] smc: removing ib device syf1 [ 522.195834][ T1025] lo speed is unknown, defaulting to 1000 [ 522.199054][ T1025] syf1: Port: 1 Link DOWN [ 525.783188][T10267] loop2: detected capacity change from 0 to 7 [ 525.795165][ T5926] libceph: connect (1)[b::]:6789 error -101 [ 525.795209][T10267] Dev loop2: unable to read RDB block 7 [ 525.798513][ T5926] libceph: mon0 (1)[b::]:6789 connect error [ 525.800338][T10267] loop2: unable to read partition table [ 525.805760][T10267] loop2: partition table beyond EOD, truncated [ 525.808464][T10267] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 525.813857][ T5999] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 525.820620][ T5999] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 525.826204][ T5999] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 525.826959][ T5999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 525.835979][ T5999] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 525.841934][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 525.842216][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 525.842597][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 525.843423][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 525.844024][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 525.872267][T10271] lo speed is unknown, defaulting to 1000 [ 526.061435][ T1025] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 526.063544][ T5926] libceph: connect (1)[b::]:6789 error -101 [ 526.063707][ T5926] libceph: mon0 (1)[b::]:6789 connect error [ 526.068385][T10271] chnl_net:caif_netlink_parms(): no params data found [ 526.074164][ T40] audit: type=1400 audit(1767045284.623:769): avc: denied { map } for pid=10287 comm="syz.5.1216" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 526.166496][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.166630][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.166732][T10271] bridge_slave_0: entered allmulticast mode [ 526.168044][T10271] bridge_slave_0: entered promiscuous mode [ 526.170487][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.170605][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.170869][T10271] bridge_slave_1: entered allmulticast mode [ 526.172877][T10271] bridge_slave_1: entered promiscuous mode [ 526.198293][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.201763][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.221000][ T1025] usb 6-1: Using ep0 maxpacket: 8 [ 526.222848][ T1025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.222875][ T1025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.222900][ T1025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.222924][ T1025] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.222960][ T1025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.222983][ T1025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.226444][T10271] team0: Port device team_slave_0 added [ 526.252134][ T40] audit: type=1400 audit(1767045284.803:770): avc: denied { shutdown } for pid=10289 comm="syz.5.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 526.258786][T10271] team0: Port device team_slave_1 added [ 526.262006][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1217'. [ 526.288565][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.296291][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.296318][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.314835][T10290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.315617][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.315627][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.315642][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.335667][T10290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.335961][T10290] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 526.336862][T10290] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 526.376061][T10271] hsr_slave_0: entered promiscuous mode [ 526.405550][T10271] hsr_slave_1: entered promiscuous mode [ 526.405937][T10271] debugfs: 'hsr0' already exists in 'hsr' [ 526.405950][T10271] Cannot create hsr debugfs directory [ 526.455554][ T1025] usb 6-1: GET_CAPABILITIES returned 0 [ 526.455579][ T1025] usbtmc 6-1:16.0: can't read capabilities [ 526.502079][T10271] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.505397][T10271] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 526.508199][T10271] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 526.520408][T10271] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 526.544121][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.544169][T10271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.544274][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.544319][T10271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.575582][ T6692] libceph: connect (1)[b::]:6789 error -101 [ 526.575728][ T6692] libceph: mon0 (1)[b::]:6789 connect error [ 526.584411][T10271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.591710][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.594189][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.609115][T10266] ceph: No mds server is up or the cluster is laggy [ 526.613103][T10271] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.621931][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.621976][T10097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.624912][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.624955][T10101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.789503][ T6707] usb 6-1: USB disconnect, device number 20 [ 526.799918][T10322] dns_resolver: Unsupported content type (234) [ 526.800228][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.887789][ T40] audit: type=1400 audit(1767045285.433:771): avc: denied { read } for pid=10328 comm="syz.5.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 526.915946][T10271] veth0_vlan: entered promiscuous mode [ 526.919211][T10271] veth1_vlan: entered promiscuous mode [ 526.939281][T10271] veth0_macvtap: entered promiscuous mode [ 526.945168][T10271] veth1_macvtap: entered promiscuous mode [ 526.953913][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.962758][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.966082][T10098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.966121][T10098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.966150][T10098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.966179][T10098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.021843][ T9053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.021856][ T9053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.033880][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.033893][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.364063][T10369] Bluetooth: MGMT ver 1.23 [ 527.365613][T10369] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 527.403760][T10380] netlink: 'syz.5.1232': attribute type 1 has an invalid length. [ 527.404843][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 527.424650][T10380] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.454067][T10389] binder: 10388:10389 ioctl c018620c 2000000001c0 returned -1 [ 527.463367][T10380] bond3: entered allmulticast mode [ 527.465966][T10380] cgroup: none used incorrectly [ 527.553901][T10399] smc: net device bond0 applied user defined pnetid SYZ2 [ 527.556970][T10399] IPv6: NLM_F_CREATE should be specified when creating new route [ 527.630394][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1244'. [ 527.634036][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1244'. [ 527.637193][T10411] netlink: 'syz.6.1244': attribute type 12 has an invalid length. [ 527.676272][T10418] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1248'. [ 527.705935][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1245'. [ 527.709573][T10413] openvswitch: netlink: Flow actions attr not present in new flow. [ 527.711686][T10423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1249'. [ 527.776879][T10425] lo speed is unknown, defaulting to 1000 [ 527.860293][ T5926] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 527.880066][ T5999] Bluetooth: hci0: command tx timeout [ 527.924901][ T40] audit: type=1800 audit(1767045286.474:772): pid=10425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.1248" name="/newroot/7/file0" dev="tmpfs" ino=55 res=0 errno=0 [ 528.006347][ T5993] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 528.017888][T10437] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1253'. [ 528.021119][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.025645][ T5926] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.029208][ T5926] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.043450][ T5926] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.047041][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.053032][ T5926] usb 9-1: config 0 descriptor?? [ 528.122910][T10443] 9pnet_virtio: no channels available for device syz [ 528.156455][T10443] overlay: ./file1 is not a directory [ 528.187887][ T5993] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 528.191220][ T5993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.193894][ T5993] usb 10-1: Product: syz [ 528.195282][ T5993] usb 10-1: Manufacturer: syz [ 528.196882][ T5993] usb 10-1: SerialNumber: syz [ 528.215283][T10445] fuse: Bad value for 'rootmode' [ 528.222311][ T5993] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 528.241246][ T8510] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 528.476877][ T5926] hid_parser_main: 5 callbacks suppressed [ 528.476895][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.482409][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.485697][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.488863][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.493170][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.496484][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.500528][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.503799][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.506507][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.510393][ T5926] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 528.527497][ T5926] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 528.558404][T10459] 9pnet_fd: Insufficient options for proto=fd [ 528.683152][T10462] 9pnet_fd: Insufficient options for proto=fd [ 528.741338][ T40] audit: type=1326 audit(1767045287.295:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.4.1239" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x0 [ 528.779642][ T1025] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 528.871553][T10471] ptrace attach of "/syz-executor exec"[10271] was attempted by "/syz-executor exec"[10471] [ 528.941196][ T1025] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.941242][ T1025] usb 6-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.941268][ T1025] usb 6-1: config 1 interface 0 has no altsetting 0 [ 528.943407][ T1025] usb 6-1: New USB device found, idVendor=0525, idProduct=aca8, bcdDevice= 0.6f [ 528.958469][ T1025] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.962029][ T1025] usb 6-1: Product: syz [ 528.962046][ T1025] usb 6-1: Manufacturer: syz [ 528.962061][ T1025] usb 6-1: SerialNumber: syz [ 529.167450][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.167742][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.171158][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.178539][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.197215][ T5993] usb 6-1: USB disconnect, device number 21 [ 529.320270][ T8510] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 529.320500][ T8510] ath9k_htc: Failed to initialize the device [ 529.341698][ T8510] usb 10-1: ath9k_htc: USB layer deinitialized [ 529.348548][ T5926] usb 10-1: USB disconnect, device number 6 [ 529.692252][T10409] usb 9-1: string descriptor 0 read error: -71 [ 529.821405][ T5993] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 529.958891][ T5999] Bluetooth: hci0: command tx timeout [ 529.988641][ T5993] usb 9-1: device descriptor read/64, error -32 [ 530.055440][T10501] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 530.058433][T10501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.062137][T10501] vhci_hcd vhci_hcd.0: Device attached [ 530.065784][T10502] vhci_hcd: cannot find the pending unlink 1023 [ 530.115294][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 530.155445][ T40] audit: type=1400 audit(1767045288.705:774): avc: denied { watch } for pid=10508 comm="syz.6.1273" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 530.165535][T10505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10505 comm=syz.5.1272 [ 530.171049][ T40] audit: type=1400 audit(1767045288.705:775): avc: denied { watch_sb watch_reads } for pid=10508 comm="syz.6.1273" path="/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 530.181078][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 530.248346][ T5993] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 530.290585][T10517] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 530.290999][T10516] 9pnet_virtio: no channels available for device syz [ 530.308279][ T1025] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 530.329337][T10519] netlink: 'syz.6.1277': attribute type 39 has an invalid length. [ 530.386354][ T40] audit: type=1400 audit(1767045288.936:776): avc: denied { map } for pid=10522 comm="syz.5.1279" path="socket:[44546]" dev="sockfs" ino=44546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 530.397125][ T40] audit: type=1400 audit(1767045288.936:777): avc: denied { read } for pid=10522 comm="syz.5.1279" path="socket:[44546]" dev="sockfs" ino=44546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 530.398321][ T5993] usb 9-1: device descriptor read/64, error -32 [ 530.603766][ T40] audit: type=1400 audit(1767045289.156:778): avc: denied { bind } for pid=10534 comm="syz.5.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.659902][ T5993] usb 9-1: reset high-speed USB device number 9 using dummy_hcd [ 530.679205][ T5993] usb 9-1: device descriptor read/8, error -32 [ 530.831042][T10502] vhci_hcd: connection reset by peer [ 530.836301][T10097] vhci_hcd vhci_hcd.1: stop threads [ 530.838976][T10097] vhci_hcd vhci_hcd.1: release socket [ 530.841624][T10097] vhci_hcd vhci_hcd.1: disconnect device [ 531.410752][T10565] [U] zÍ»´iœùÊý®Ò[27| [ 531.411610][T10566] __nla_validate_parse: 1 callbacks suppressed [ 531.411624][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1289'. [ 531.412967][T10565] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 531.425511][T10565] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 531.428901][T10565] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 531.440823][T10565] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 531.443034][T10565] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 531.444903][T10565] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 531.446847][T10565] [U] ‰ϼcEv‹û @ý [ 531.448159][T10565] [U] aÆ„% [ 531.449611][T10565] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 531.456973][T10565] [U] éf1Ïp±3 [ 531.458881][T10565] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 531.461006][T10565] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 531.463625][T10565] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n»<–ˆ³^wñË;,àt‰ŽøXÏhEGá”~ìo+É­+vx‘ãÔ¹Ùšä„¢‰ ¦{Ã/+0¢µs3aX}Ùú u'ðÑàQɈRl¸$Ñ$Ê%ô~µI·^§|‘0o[tg«È‹¿Ôœ®Ä$Ÿ“g#Tv@Ö2R?”0M#ä²›»²Ë@sz퓊}¯ÚU_C[³P?½¢‰6u³V§=ªÿ“­¨R˲ú´Ô³<ÜükÀ¤zUg‚µÛ•v¡¨jÇã(Âa¥É¸žÊP º#œ/z%9üÔˆ”Ží ¨.k2ñƒ³£NÒ-w›+ñIGáÚKHŠdGf {e‰á¤ññá·\ [ 531.478839][T10565] [U] ¤9ÙŠ8òaøÒ1oËOt9u«Ãj™Ÿ­Ä!û7-Võ± •šgMã³D’DÆÖÃ[9# [ 531.481237][T10565] [U] >NV£<|¹}Va½Q€"Ÿ½ç”õw¶C±xùº†þ͈å2"Q÷4*ÍÉrº¨ŠäGúð횸¦å3?d§ªE°L»ÃÞ&C§põ3(+w8•DÅ_(ˆ¢Y, [ 531.500986][T10565] [U] ”ÙUisç[$&Áü‹Bx÷ýeRÍLÄÄ {³£Xö [ 531.531527][T10582] 9pnet_virtio: no channels available for device syz [ 531.572664][ T8510] usb 9-1: USB disconnect, device number 9 [ 531.619152][T10589] tc_dump_action: action bad kind [ 531.631953][T10589] xt_cluster: you have exceeded the maximum number of cluster nodes (205 > 32) [ 531.936955][T10611] all: renamed from lo [ 532.037512][ T5999] Bluetooth: hci0: command tx timeout [ 532.333582][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1306'. [ 532.423806][T10663] lo speed is unknown, defaulting to 1000 [ 532.430660][T10665] __vm_enough_memory: pid: 10665, comm: syz.5.1309, bytes: 4503599627366400 not enough memory for the allocation [ 532.499904][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 532.499919][ T40] audit: type=1400 audit(1767045291.057:780): avc: denied { read open } for pid=10672 comm="syz.5.1311" path="/" dev="configfs" ino=2208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 532.642103][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1313'. [ 532.728424][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1315'. [ 532.790547][T10687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10687 comm=syz.6.1317 [ 532.791440][T10685] binder: 10684:10685 unknown command 0 [ 532.796170][T10687] netlink: 'syz.6.1317': attribute type 1 has an invalid length. [ 532.798071][ T6692] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 532.802552][T10685] binder: 10684:10685 ioctl c0306201 2000000004c0 returned -22 [ 532.823838][T10687] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1317'. [ 532.863675][T10691] random: crng reseeded on system resumption [ 532.946930][ T6692] usb 10-1: Using ep0 maxpacket: 8 [ 532.950537][ T6692] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 532.953523][ T6692] usb 10-1: config 0 has no interface number 0 [ 532.956327][ T6692] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 532.962989][ T6692] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 532.968415][ T6692] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 532.973296][ T6692] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.983974][ T6692] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 532.989575][ T6692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.993296][ T6692] usb 10-1: Product: syz [ 532.995349][ T6692] usb 10-1: Manufacturer: syz [ 532.998213][ T6692] usb 10-1: SerialNumber: syz [ 533.003905][ T6692] usb 10-1: config 0 descriptor?? [ 533.106546][ T6711] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 533.215484][ T6692] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 533.276391][ T6711] usb 9-1: Using ep0 maxpacket: 32 [ 533.280751][ T6711] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 533.284345][ T6711] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 533.289790][ T6711] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 533.294555][ T6711] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 533.300507][ T6711] usb 9-1: config 0 interface 0 has no altsetting 0 [ 533.305349][ T6711] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 533.309491][ T6711] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 533.313080][ T6711] usb 9-1: Product: syz [ 533.314911][ T6711] usb 9-1: Manufacturer: syz [ 533.317158][ T6711] usb 9-1: SerialNumber: syz [ 533.328024][ T6711] usb 9-1: config 0 descriptor?? [ 533.341487][ T6711] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 533.356178][ T6711] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 533.363173][T10707] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 533.415759][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1312'. [ 533.423037][T10703] netlink: 'syz.5.1312': attribute type 7 has an invalid length. [ 533.435996][ T9043] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.436331][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1312'. [ 533.441045][ T9043] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.443742][T10703] netlink: 'syz.5.1312': attribute type 7 has an invalid length. [ 533.452729][ T9043] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.457769][ T9043] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.458302][ C1] iowarrior 10-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1 [ 533.468521][ T5993] usb 10-1: USB disconnect, device number 7 [ 533.495268][T10713] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1325'. [ 533.502546][T10713] binder: 10712:10713 ioctl c04064a0 200000000300 returned -22 [ 533.600505][T10720] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 533.604636][T10720] overlayfs: overlapping lowerdir path [ 533.610843][ T40] audit: type=1400 audit(1767045292.168:781): avc: denied { accept } for pid=10719 comm="syz.6.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 534.077584][T10746] Falling back ldisc for ttynull. [ 534.100505][ T40] audit: type=1400 audit(1767045292.658:782): avc: denied { getopt } for pid=10747 comm="syz.5.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 534.117973][ T5999] Bluetooth: hci0: command tx timeout [ 534.173978][T10755] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 534.206738][ T6706] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 534.346853][ T6706] usb 11-1: device descriptor read/64, error -71 [ 534.585615][ T6706] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 534.713624][ T40] audit: type=1400 audit(1767045293.268:783): avc: denied { ioctl } for pid=10758 comm="syz.5.1339" path="socket:[44860]" dev="sockfs" ino=44860 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 534.724416][ T6706] usb 11-1: device descriptor read/64, error -71 [ 534.820608][T10764] 9pnet_fd: p9_fd_create_unix (10764): problem connecting socket: ./file0: -111 [ 534.845901][ T6706] usb usb11-port1: attempt power cycle [ 534.849716][T10769] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1342'. [ 534.853568][T10769] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 534.889080][T10772] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 534.894149][T10772] cramfs: wrong magic [ 534.948388][T10774] lo speed is unknown, defaulting to 1000 [ 535.138027][T10780] dlm: non-version read from control device 8224 [ 535.185354][ T6706] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 535.217621][ T6706] usb 11-1: device descriptor read/8, error -71 [ 535.388032][T10788] lo speed is unknown, defaulting to 1000 [ 535.405277][ T1025] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 535.475094][ T6706] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 535.497534][ T6706] usb 11-1: device descriptor read/8, error -71 [ 535.605187][ T6706] usb usb11-port1: unable to enumerate USB device [ 535.662170][ T40] audit: type=1400 audit(1767045294.219:784): avc: denied { shutdown } for pid=10795 comm="syz.5.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.754887][T10800] syz_tun: entered allmulticast mode [ 535.761231][T10800] dvmrp6: entered allmulticast mode [ 535.796489][ T6692] usb 9-1: USB disconnect, device number 10 [ 535.812309][ T6692] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 535.844701][T10803] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 535.849416][T10803] random: crng reseeded on system resumption [ 535.863432][ T40] audit: type=1400 audit(1767045294.419:785): avc: denied { override_creds } for pid=10801 comm="iou-sqp-10803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 535.884681][T10803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.908882][ T40] audit: type=1400 audit(1767045294.469:786): avc: denied { connect } for pid=10807 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 535.917295][ T6706] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 535.927140][ T40] audit: type=1400 audit(1767045294.489:787): avc: denied { create } for pid=10809 comm="syz.1.1355" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 535.936849][ T40] audit: type=1400 audit(1767045294.489:788): avc: denied { unlink } for pid=10809 comm="syz.1.1355" name="file0" dev="tmpfs" ino=1850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 535.996788][ T40] audit: type=1400 audit(1767045294.559:789): avc: denied { remove_name } for pid=10807 comm="syz.4.1354" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.084690][ T6706] usb 10-1: Using ep0 maxpacket: 8 [ 536.089178][ T6706] usb 10-1: config 0 interface 0 has no altsetting 0 [ 536.092237][ T6706] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 536.096515][ T6706] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.102488][ T6706] usb 10-1: config 0 descriptor?? [ 536.311949][ T6706] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 536.343701][T10825] Cannot find del_set index 4 as target [ 536.378441][T10827] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.380745][T10831] EXT4-fs (nbd5): unable to read superblock [ 536.427064][ T6706] usb 10-1: USB disconnect, device number 8 [ 536.480552][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1361'. [ 536.882201][T10856] 9pnet_virtio: no channels available for device syz [ 536.930214][T10859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1370'. [ 536.946447][T10859] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1370'. [ 536.950537][T10859] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1370'. [ 536.958001][T10859] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1370'. [ 536.962325][T10859] vlan0: entered promiscuous mode [ 536.966698][T10859] tipc: Started in network mode [ 536.968385][T10859] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 536.970823][T10859] tipc: Enabled bearer , priority 0 [ 537.081333][T10840] infiniband syz0: set down [ 537.083033][T10840] infiniband syz0: added bond_slave_0 [ 537.123872][T10840] RDS/IB: syz0: added [ 537.126367][T10840] smc: adding ib device syz0 with port count 1 [ 537.129226][T10840] smc: ib device syz0 port 1 has no pnetid [ 537.129401][T10868] PKCS8: Unsupported PKCS#8 version [ 537.183996][ T6706] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 537.278033][T10875] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1376'. [ 537.314009][ T5993] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 537.334275][T10877] netlink: 'syz.6.1377': attribute type 13 has an invalid length. [ 537.336957][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1377'. [ 537.344645][ T6706] usb 9-1: Using ep0 maxpacket: 8 [ 537.348658][ T6706] usb 9-1: config 0 interface 0 has no altsetting 0 [ 537.351737][ T6706] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 537.355998][ T6706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.363035][ T6706] usb 9-1: config 0 descriptor?? [ 537.489969][ T5993] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 537.495090][ T5993] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 537.498431][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.503240][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.508152][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.512761][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.519382][ T5993] usb 10-1: config index 1 descriptor too short (expected 45, got 36) [ 537.522857][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.542806][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.547904][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.552752][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.559866][ T5993] usb 10-1: config index 2 descriptor too short (expected 45, got 36) [ 537.562940][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.567699][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.572681][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.578232][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.584786][T10861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 537.588506][ T5993] usb 10-1: config index 3 descriptor too short (expected 45, got 36) [ 537.592118][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.596574][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.601308][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.606031][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.612208][ T5993] usb 10-1: config index 4 descriptor too short (expected 45, got 36) [ 537.615398][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.619742][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.624611][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.628697][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.635063][ T5993] usb 10-1: config index 5 descriptor too short (expected 45, got 36) [ 537.639304][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.644613][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.649572][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.654873][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.660999][ T5993] usb 10-1: config index 6 descriptor too short (expected 45, got 36) [ 537.664102][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.668005][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.671751][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.675586][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.680635][ T5993] usb 10-1: config index 7 descriptor too short (expected 45, got 36) [ 537.683419][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 537.687688][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 537.692557][ T5993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 537.697711][ T5993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.703436][ T5993] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 537.707731][ T5993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.713700][ T5993] usb 10-1: config 0 descriptor?? [ 537.717468][T10863] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 537.775837][ T6706] usbhid 9-1:0.0: can't add hid device: -71 [ 537.778720][ T6706] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 537.788075][ T6706] usb 9-1: USB disconnect, device number 11 [ 537.886167][T10897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.893126][T10896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.942264][ T5993] usbhid 10-1:0.0: can't add hid device: -71 [ 537.947008][ T5993] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 537.952162][ T5993] usb 10-1: USB disconnect, device number 9 [ 537.998745][T10904] netlink: 'syz.5.1383': attribute type 10 has an invalid length. [ 538.001766][T10904] team0: Cannot enslave team device to itself [ 538.006349][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 538.086029][ T8510] tipc: Node number set to 11578026 [ 538.310125][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 538.310136][ T40] audit: type=1400 audit(1767045296.860:794): avc: denied { getopt } for pid=10914 comm="syz.5.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 538.323741][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1387'. [ 538.453850][T10941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10941 comm=syz.5.1392 [ 538.618432][T10953] fuse: Bad value for 'fd' [ 538.625261][ T40] audit: type=1400 audit(1767045297.181:795): avc: denied { connect } for pid=10954 comm="syz.6.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 538.631879][ T5999] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 538.694460][ T40] audit: type=1400 audit(1767045297.251:796): avc: denied { read } for pid=10966 comm="syz.5.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 538.707067][T10969] fuse: Unknown parameter '00000000000000000008' [ 538.709712][T10970] fuse: Unknown parameter '00000000000000000008' [ 538.749953][ T40] audit: type=1400 audit(1767045297.301:797): avc: denied { mounton } for pid=10968 comm="syz.4.1403" path="/184/file0" dev="autofs" ino=46938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 538.786560][T10967] team0: Device gtp0 is up. Set it down before adding it as a team port [ 538.994352][ T40] audit: type=1400 audit(1767045297.551:798): avc: denied { checkpoint_restore } for pid=10987 comm="syz.6.1408" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.049600][ T40] audit: type=1400 audit(1767045297.601:799): avc: denied { listen } for pid=11000 comm="syz.6.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 539.099646][T11005] team0: Device xfrm1 is of different type [ 539.112840][ T5993] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 539.219395][T11014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.284528][ T5993] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 539.289467][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 539.293665][ T5993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 539.296923][ T5993] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 539.301277][ T5993] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 539.304677][ T5993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.308636][ T5993] usb 9-1: config 0 descriptor?? [ 539.342909][ T6706] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 539.502856][ T6706] usb 11-1: Using ep0 maxpacket: 16 [ 539.506883][ T6706] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.511620][ T6706] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.516390][ T6706] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 539.521925][ T6706] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 539.526796][ T6706] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.533823][ T6706] usb 11-1: config 0 descriptor?? [ 539.557636][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.561661][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.763875][T11024] 9pnet_virtio: no channels available for device syz [ 539.911067][ T40] audit: type=1400 audit(1767045298.461:800): avc: denied { listen } for pid=11028 comm="syz.1.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 539.961034][ T6706] hid_parser_main: 5 callbacks suppressed [ 539.961052][ T6706] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 539.972429][ T6706] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 539.973202][ T5993] usbhid 9-1:0.0: can't add hid device: -71 [ 539.977662][ T5993] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 539.981565][ T5993] usb 9-1: USB disconnect, device number 12 [ 539.983607][ T6706] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 539.983630][ T6706] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 539.983652][ T6706] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 539.987868][ T6706] input: HID 0955:7214 Haptics as /devices/virtual/input/input33 [ 540.044399][ T6706] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 540.047598][ T6706] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 540.244922][ T6707] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 540.245099][ T6692] usb 11-1: USB disconnect, device number 6 [ 540.249427][ T6707] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.272183][ T6707] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.275804][ T6707] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.509905][ T40] audit: type=1326 audit(1767045299.062:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.1428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x7ffc0000 [ 540.520397][ T40] audit: type=1326 audit(1767045299.062:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.1428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x7ffc0000 [ 540.531283][ T40] audit: type=1326 audit(1767045299.072:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.4.1428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x7ffc0000 [ 540.594798][T11049] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 540.598001][T11049] overlayfs: failed to set xattr on upper [ 540.600502][T11049] overlayfs: ...falling back to redirect_dir=nofollow. [ 540.605608][T11049] overlayfs: ...falling back to index=off. [ 540.608252][T11049] overlayfs: ...falling back to uuid=null. [ 540.610860][T11049] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 540.800292][T11057] kvm: user requested TSC rate below hardware speed [ 540.806200][T11057] kvm: user requested TSC rate below hardware speed [ 540.965570][T10097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.968272][T10097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.003392][T11070] netlink: 'syz.4.1439': attribute type 1 has an invalid length. [ 541.266482][T11081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.270410][T11081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.350907][T11084] program syz.1.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.423344][T11086] pim6reg: entered allmulticast mode [ 541.511585][ T6707] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 541.641464][ T6707] usb 9-1: device descriptor read/64, error -71 [ 541.881429][ T6707] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 541.906596][T11097] fuse: Unknown parameter 'us' [ 542.023227][T11106] bond0: entered promiscuous mode [ 542.025622][T11106] bond_slave_0: entered promiscuous mode [ 542.028345][T11106] bond_slave_1: entered promiscuous mode [ 542.030196][T11108] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 542.031213][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.031266][ T6707] usb 9-1: device descriptor read/64, error -71 [ 542.032693][T11106] batadv0: entered promiscuous mode [ 542.033722][T11108] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.034181][T11106] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 542.047977][ T5999] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 542.048025][T11106] bond0: left promiscuous mode [ 542.052005][T11108] vhci_hcd vhci_hcd.0: Device attached [ 542.052883][T11106] bond_slave_0: left promiscuous mode [ 542.057075][T11106] bond_slave_1: left promiscuous mode [ 542.058439][T11109] vhci_hcd: unknown pdu 1 [ 542.061579][T10097] vhci_hcd vhci_hcd.5: stop threads [ 542.061942][T11106] batadv0: left promiscuous mode [ 542.063749][T10097] vhci_hcd vhci_hcd.5: release socket [ 542.068373][T10097] vhci_hcd vhci_hcd.5: disconnect device [ 542.112587][T11108] __nla_validate_parse: 5 callbacks suppressed [ 542.112609][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1451'. [ 542.151341][ T6707] usb usb9-port1: attempt power cycle [ 542.276212][T11117] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 542.490961][ T6707] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 542.511628][ T6707] usb 9-1: device descriptor read/8, error -71 [ 542.652456][T11120] program syz.5.1454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.687015][T11127] netlink: 'syz.6.1455': attribute type 39 has an invalid length. [ 542.780991][ T6707] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 542.801439][ T6707] usb 9-1: device descriptor read/8, error -71 [ 542.920946][ T6707] usb usb9-port1: unable to enumerate USB device [ 542.927935][T11138] lo speed is unknown, defaulting to 1000 [ 543.186618][T11157] mkiss: ax0: crc mode is auto. [ 543.339683][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 543.339695][ T40] audit: type=1326 audit(1767045301.893:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11161 comm="syz.6.1467" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57c0f8f7c9 code=0x0 [ 543.422793][ T40] audit: type=1400 audit(1767045301.983:874): avc: denied { unmount } for pid=8528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 543.840253][ T6707] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 543.879747][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.901433][T11182] bond0 (unregistering): Released all slaves [ 543.941567][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.944795][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.948050][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.951467][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.954693][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.957862][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.961094][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.964281][T11182] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1473'. [ 543.990175][ T6707] usb 10-1: Using ep0 maxpacket: 16 [ 543.994222][ T6707] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 544.000684][ T6707] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 544.004716][ T6707] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.008280][ T6707] usb 10-1: Product: syz [ 544.011864][ T6707] usb 10-1: Manufacturer: syz [ 544.014021][ T6707] usb 10-1: SerialNumber: syz [ 544.018310][ T6707] usb 10-1: config 0 descriptor?? [ 544.024816][ T6707] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 544.028953][ T6707] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 544.300233][ T6707] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 544.348577][ T40] audit: type=1400 audit(1767045302.904:875): avc: denied { create } for pid=11188 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 544.355685][ T40] audit: type=1400 audit(1767045302.904:876): avc: denied { setopt } for pid=11188 comm="syz.4.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 544.374873][ T6707] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 544.378084][ T6707] em28xx 10-1:0.0: board has no eeprom [ 544.386202][ T40] audit: type=1400 audit(1767045302.944:877): avc: denied { write } for pid=11190 comm="syz.4.1477" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 544.436355][T11173] em28xx 10-1:0.0: writing to i2c device at 0x202 failed (error=-5) [ 544.442735][T11196] 9pnet: Found fid 0 not clunked [ 544.451025][ T6707] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 544.455144][ T6707] em28xx 10-1:0.0: dvb set to bulk mode. [ 544.455734][T11198] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 544.455734][T11198] program syz.6.1478 not setting count and/or reply_len properly [ 544.461209][ T6707] usb 10-1: USB disconnect, device number 10 [ 544.466074][ T6707] em28xx 10-1:0.0: Disconnecting em28xx [ 544.467989][ T6003] em28xx 10-1:0.0: Binding DVB extension [ 544.494388][ T6003] em28xx 10-1:0.0: Registering input extension [ 544.497611][ T6707] em28xx 10-1:0.0: Closing input extension [ 544.508078][T11198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.513904][T11198] bond0: (slave bond2): Enslaving as an active interface with an up link [ 544.524560][T11203] syz.1.1480: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 544.529969][T11203] CPU: 3 UID: 0 PID: 11203 Comm: syz.1.1480 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.529999][T11203] Tainted: [L]=SOFTLOCKUP [ 544.530005][T11203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 544.530015][T11203] Call Trace: [ 544.530021][T11203] [ 544.530028][T11203] dump_stack_lvl+0x16c/0x1f0 [ 544.530082][T11203] warn_alloc+0x248/0x3a0 [ 544.530095][T11203] ? __pfx_warn_alloc+0x10/0x10 [ 544.530110][T11203] ? __lock_acquire+0x436/0x2890 [ 544.530125][T11203] ? kasan_save_stack+0x42/0x60 [ 544.530143][T11203] ? kasan_save_stack+0x33/0x60 [ 544.530155][T11203] ? kasan_save_track+0x14/0x30 [ 544.530168][T11203] ? xskq_create+0xfb/0x1d0 [ 544.530179][T11203] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 544.530201][T11203] ? xskq_create+0xfb/0x1d0 [ 544.530214][T11203] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 544.530238][T11203] ? xskq_create+0xfb/0x1d0 [ 544.530248][T11203] vmalloc_user_noprof+0x9e/0xe0 [ 544.530265][T11203] ? xskq_create+0xfb/0x1d0 [ 544.530276][T11203] xskq_create+0xfb/0x1d0 [ 544.530288][T11203] xsk_setsockopt+0x932/0xc00 [ 544.530307][T11203] ? __pfx_xsk_setsockopt+0x10/0x10 [ 544.530335][T11203] ? selinux_socket_setsockopt+0x6a/0x80 [ 544.530349][T11203] ? __pfx_xsk_setsockopt+0x10/0x10 [ 544.530369][T11203] do_sock_setsockopt+0xf3/0x1d0 [ 544.530385][T11203] __sys_setsockopt+0x1a0/0x230 [ 544.530399][T11203] __x64_sys_setsockopt+0xbd/0x160 [ 544.530410][T11203] ? do_syscall_64+0x91/0xf80 [ 544.530424][T11203] ? lockdep_hardirqs_on+0x7c/0x110 [ 544.530437][T11203] do_syscall_64+0xcd/0xf80 [ 544.530452][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.530464][T11203] RIP: 0033:0x7f94c318f7c9 [ 544.530473][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.530484][T11203] RSP: 002b:00007f94c40d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.530495][T11203] RAX: ffffffffffffffda RBX: 00007f94c33e5fa0 RCX: 00007f94c318f7c9 [ 544.530502][T11203] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 544.530508][T11203] RBP: 00007f94c3213f91 R08: 0000000000000004 R09: 0000000000000000 [ 544.530514][T11203] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.530520][T11203] R13: 00007f94c33e6038 R14: 00007f94c33e5fa0 R15: 00007ffd82c5c5a8 [ 544.530535][T11203] [ 544.530596][T11203] Mem-Info: [ 544.617835][T11203] active_anon:20615 inactive_anon:100 isolated_anon:0 [ 544.617835][T11203] active_file:11304 inactive_file:4966 isolated_file:0 [ 544.617835][T11203] unevictable:1768 dirty:46 writeback:0 [ 544.617835][T11203] slab_reclaimable:10351 slab_unreclaimable:74403 [ 544.617835][T11203] mapped:25992 shmem:12647 pagetables:1260 [ 544.617835][T11203] sec_pagetables:316 bounce:0 [ 544.617835][T11203] kernel_misc_reclaimable:0 [ 544.617835][T11203] free:470516 free_pcp:19892 free_cma:0 [ 544.632837][T11203] Node 0 active_anon:82336kB inactive_anon:400kB active_file:45176kB inactive_file:19728kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103928kB dirty:144kB writeback:0kB shmem:47052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15232kB pagetables:4632kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB [ 544.645077][T11203] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:40kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 544.655579][T11203] Node 0 DMA free:10980kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:8kB free_cma:0kB [ 544.658520][T11219] 9pnet_virtio: no channels available for device syz [ 544.666645][T11203] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 544.666724][T11203] Node 0 DMA32 free:276252kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82336kB inactive_anon:400kB active_file:45176kB inactive_file:19728kB unevictable:3536kB writepending:144kB zspages:0kB present:2080628kB managed:1265192kB mlocked:0kB bounce:0kB free_pcp:59948kB local_pcp:16336kB free_cma:0kB [ 544.683645][T11203] lowmem_reserve[]: 0 0 0 0 0 [ 544.685364][T11203] Node 1 Normal free:1594704kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:136kB unevictable:3536kB writepending:40kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:21096kB local_pcp:5704kB free_cma:0kB [ 544.696528][T11203] lowmem_reserve[]: 0 0 0 0 0 [ 544.698197][T11203] Node 0 DMA: 5*4kB (U) 6*8kB (U) 8*16kB (U) 9*32kB (U) 8*64kB (U) 6*128kB (U) 4*256kB (U) 2*512kB (U) 1*1024kB (U) 3*2048kB (UM) 0*4096kB = 10980kB [ 544.703647][T11203] Node 0 DMA32: 2551*4kB (UME) 992*8kB (UME) 1375*16kB (UME) 506*32kB (UME) 333*64kB (UME) 97*128kB (UME) 68*256kB (UME) 69*512kB (UM) 34*1024kB (UM) 16*2048kB (UM) 17*4096kB (U) = 280012kB [ 544.710655][T11203] Node 1 Normal: 78*4kB (UME) 61*8kB (UME) 55*16kB (UME) 202*32kB (UME) 64*64kB (UME) 17*128kB (UME) 9*256kB (UME) 18*512kB (UM) 14*1024kB (UME) 9*2048kB (UM) 375*4096kB (UM) = 1594704kB [ 544.713818][ T40] audit: type=1400 audit(1767045303.274:878): avc: denied { setattr } for pid=11220 comm="syz.6.1485" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 544.716653][T11203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.716666][T11203] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 544.716676][T11203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.716685][T11203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 544.716694][T11203] 28914 total pagecache pages [ 544.740299][T11203] 0 pages in swap cache [ 544.742371][T11203] Free swap = 124996kB [ 544.744421][T11203] Total swap = 124996kB [ 544.746119][T11203] 1048443 pages RAM [ 544.747513][T11203] 0 pages HighMem/MovableOnly [ 544.749804][T11203] 282834 pages reserved [ 544.751287][T11203] 0 pages cma reserved [ 544.887870][T11237] syz.4.1487 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 544.955567][ C2] Unknown status report in ack skb [ 544.993491][T11247] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 544.996905][T11247] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 545.170949][T11249] netlink: 'syz.4.1493': attribute type 3 has an invalid length. [ 546.461257][ T6707] em28xx 10-1:0.0: Freeing device [ 546.894125][ T40] audit: type=1326 audit(1767045305.455:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11293 comm="syz.6.1508" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57c0f8f7c9 code=0x0 [ 546.942522][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 546.948828][T11301] geneve0: entered promiscuous mode [ 546.950865][T11301] geneve0: entered allmulticast mode [ 546.953441][T11301] team0: Port device geneve0 added [ 546.955473][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 546.958302][T10097] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.961203][T10097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.964436][T10097] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.968014][T10097] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.985502][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 547.002500][T10097] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.006438][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 547.010555][T10098] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.014214][T10098] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.014778][ T40] audit: type=1400 audit(1767045305.575:880): avc: denied { bind } for pid=11304 comm="syz.5.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 547.018387][T10098] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.030636][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 547.033440][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 547.036602][T11301] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 547.192136][ T40] audit: type=1400 audit(1767045305.756:881): avc: denied { setopt } for pid=11317 comm="syz.5.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 547.209960][T11320] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 547.212827][T11320] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 547.243054][T11324] __nla_validate_parse: 95 callbacks suppressed [ 547.243072][T11324] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1515'. [ 547.287683][ T40] audit: type=1400 audit(1767045305.846:882): avc: denied { read } for pid=11326 comm="syz.4.1516" lport=47314 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 547.657511][T11364] pim6reg: entered allmulticast mode [ 547.860654][T11386] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 547.926845][T11394] bond4: entered promiscuous mode [ 547.929102][T11394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 547.936392][T11394] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 547.943197][T11394] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 547.947700][T11394] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 547.996503][T11399] ipvlan2: entered allmulticast mode [ 547.999219][T11399] team0: entered allmulticast mode [ 548.001616][T11399] team_slave_0: entered allmulticast mode [ 548.004106][T11399] team_slave_1: entered allmulticast mode [ 548.007029][T11399] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 548.544893][T11422] lo speed is unknown, defaulting to 1000 [ 548.648937][T11426] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1540'. [ 548.820003][T11436] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1542'. [ 548.939721][T11451] syzkaller1: entered promiscuous mode [ 548.942224][T11451] syzkaller1: entered allmulticast mode [ 548.989205][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 548.989223][ T40] audit: type=1400 audit(1767045307.547:887): avc: denied { ioctl } for pid=11456 comm="syz.4.1551" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 549.094241][ T40] audit: type=1400 audit(1767045307.657:888): avc: denied { write } for pid=11465 comm="syz.6.1553" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 549.094342][T11466] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.110288][ T40] audit: type=1326 audit(1767045307.677:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.123811][ T40] audit: type=1326 audit(1767045307.677:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.137315][ T40] audit: type=1326 audit(1767045307.677:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.144729][ T40] audit: type=1326 audit(1767045307.677:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.152146][ T40] audit: type=1326 audit(1767045307.677:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.161507][ T40] audit: type=1326 audit(1767045307.677:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.171023][ T40] audit: type=1326 audit(1767045307.677:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.181012][ T40] audit: type=1326 audit(1767045307.677:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.4.1554" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ec918f7c9 code=0x50000 [ 549.837138][T11489] futex_wake_op: syz.6.1559 tries to shift op by 32; fix this program [ 550.779361][T11540] 9pnet_virtio: no channels available for device syz [ 550.785371][T11540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1572'. [ 551.041088][T11552] overlay: Bad value for 'xino' [ 551.118856][T11554] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 551.230456][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 551.339544][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'. [ 551.599183][T11568] nft_compat: unsupported protocol 0 [ 551.649115][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1583'. [ 551.741024][T11575] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1584'. [ 551.918587][T11576] Invalid option length (1048180) for dns_resolver key [ 552.182789][T11581] validate_nla: 61 callbacks suppressed [ 552.182863][T11581] netlink: 'syz.6.1586': attribute type 1 has an invalid length. [ 552.235561][T11581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 552.240002][T11584] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 552.254794][ T6707] IPVS: starting estimator thread 0... [ 552.295099][T11585] cgroup: Need name or subsystem set [ 552.355624][T11586] IPVS: using max 45 ests per chain, 108000 per kthread [ 552.544495][T11599] hfsplus: unable to find HFS+ superblock [ 553.053731][T11613] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1594'. [ 553.131149][T11617] [U] [ 553.132157][T11617] [U] [ 553.133108][T11617] [U] [ 553.134090][T11617] [U] [ 553.135287][T11617] [U] [ 553.136258][T11617] [U] [ 553.137218][T11617] [U] [ 553.138166][T11617] [U] [ 553.139240][T11617] [U] [ 553.140186][T11617] [U] [ 553.141111][T11617] [U] [ 553.142045][T11617] [U] [ 553.143091][T11617] [U] [ 553.144026][T11617] [U] [ 553.144987][T11617] [U] [ 553.145963][T11617] [U] [ 553.183285][T11616] [U] [ 553.332928][T11632] sctp: [Deprecated]: syz.4.1600 (pid 11632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 553.332928][T11632] Use struct sctp_sack_info instead [ 553.415422][T11640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11640 comm=syz.6.1603 [ 553.435325][T11640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57616 sclass=netlink_route_socket pid=11640 comm=syz.6.1603 [ 553.448105][T11642] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1604'. [ 553.454707][T11642] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1604'. [ 553.516667][T11615] syz.5.1595 (11615): drop_caches: 1 [ 553.683684][T11615] syz.5.1595 (11615): drop_caches: 1 [ 553.732511][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1608'. [ 553.735657][T11657] netlink: 'syz.4.1609': attribute type 10 has an invalid length. [ 553.736201][T11655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.742366][T11655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.774254][T11657] team0: Device veth1_macvtap failed to register rx_handler [ 553.934729][ T8510] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 553.974893][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1614'. [ 554.001965][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'. [ 554.008520][T11673] openvswitch: netlink: Missing key (keys=40, expected=80) [ 554.105195][ T8510] usb 11-1: Using ep0 maxpacket: 16 [ 554.109820][ T8510] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.136566][ T8510] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.140415][ T8510] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 554.152751][ T8510] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 554.155865][ T8510] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.166258][ T8510] usb 11-1: config 0 descriptor?? [ 554.399288][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 554.411175][T11702] team_slave_1 (unregistering): left allmulticast mode [ 554.416418][T11702] team0: Port device team_slave_1 removed [ 554.456127][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 554.460103][T11705] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 554.557689][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1624'. [ 554.562330][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 554.565770][T11709] openvswitch: netlink: Flow actions attr not present in new flow. [ 554.597279][ T8510] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 554.599541][ T8510] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 554.601774][ T8510] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 554.606945][ T8510] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 554.609285][ T8510] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 554.614024][ T8510] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 554.628997][ T8510] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 554.632541][ T8510] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 554.657419][ T40] kauditd_printk_skb: 39282 callbacks suppressed [ 554.657435][ T40] audit: type=1400 audit(1767045313.230:40179): avc: denied { execute } for pid=11715 comm="syz.1.1627" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=49792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 554.773925][T11737] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 554.803919][T11651] netlink: 'syz.6.1607': attribute type 2 has an invalid length. [ 554.808476][ T54] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 554.808635][ T6707] usb 11-1: USB disconnect, device number 7 [ 554.813834][ T54] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 554.830149][ T54] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 554.833669][ T54] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 555.145631][T11764] delete_channel: no stack [ 555.172019][ T40] audit: type=1400 audit(1767045313.740:40180): avc: denied { accept } for pid=11776 comm="syz.4.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 555.220670][ T40] audit: type=1400 audit(1767045313.790:40181): avc: denied { map } for pid=11780 comm="syz.1.1646" path="socket:[49960]" dev="sockfs" ino=49960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 555.266297][T11787] netlink: 'syz.5.1647': attribute type 10 has an invalid length. [ 555.268935][T11787] dummy0: left promiscuous mode [ 555.272273][T11787] dummy0: entered allmulticast mode [ 555.276797][T11787] team0: Port device dummy0 added [ 555.283977][T11793] netlink: 'syz.5.1647': attribute type 10 has an invalid length. [ 555.304750][T11789] lo speed is unknown, defaulting to 1000 [ 555.422253][ T9043] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.427269][ T9043] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.433005][ T40] audit: type=1326 audit(1767045314.000:40182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11802 comm="syz.6.1651" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57c0f8f7c9 code=0x0 [ 555.443335][ T9043] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.447169][ T9043] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.044987][T11833] netlink: 'syz.1.1659': attribute type 7 has an invalid length. [ 556.054936][ T5926] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 556.208014][ T5926] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 556.214989][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 556.219780][ T5926] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.225365][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.230360][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 556.245599][ T5926] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 556.248978][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 556.253861][ T5926] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.258602][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.262939][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 556.271772][ T5926] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 556.275749][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 556.280399][ T5926] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 556.280793][T10086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.286024][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 556.289869][T10086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.294635][ T5926] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 556.307286][ T5926] usb 11-1: string descriptor 0 read error: -22 [ 556.310291][ T5926] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 556.314732][ T5926] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.346884][ T5926] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 556.379517][T11857] overlayfs: failed to clone upperpath [ 556.425498][T11859] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 557.081248][T11872] syzkaller0: entered promiscuous mode [ 557.083231][T11872] syzkaller0: entered allmulticast mode [ 557.380993][T11881] 9pnet_virtio: no channels available for device syz [ 557.386832][T11881] 9p: Bad value for 'rfdno' [ 557.389793][T11882] netlink: 'syz.5.1674': attribute type 10 has an invalid length. [ 557.395769][T11882] geneve0: entered allmulticast mode [ 557.398318][T11882] team0: Port device geneve0 added [ 557.400355][T10085] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.405217][T10085] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.408598][T10085] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.411940][T10085] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.438249][ T40] audit: type=1400 audit(1767045316.001:40183): avc: denied { accept } for pid=11883 comm="syz.5.1675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 557.658487][T11893] overlayfs: failed lookup in lower (newroot/271, name='bus', err=-40): overlapping layers [ 557.709256][T11896] fuse: Bad value for 'group_id' [ 557.711598][T11896] fuse: Bad value for 'group_id' [ 559.260159][T11915] syzkaller1: entered promiscuous mode [ 559.263491][T11915] syzkaller1: entered allmulticast mode [ 559.509893][T11918] __nla_validate_parse: 19 callbacks suppressed [ 559.509911][T11918] netlink: 344 bytes leftover after parsing attributes in process `syz.4.1686'. [ 559.541951][ T8510] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 559.638856][T11920] lo speed is unknown, defaulting to 1000 [ 559.644271][ T40] audit: type=1400 audit(1767045318.212:40184): avc: denied { listen } for pid=11927 comm="syz.4.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 559.701982][ T8510] usb 10-1: Using ep0 maxpacket: 32 [ 559.706301][ T8510] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 559.710966][ T8510] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 559.717536][ T8510] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.722782][ T8510] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 559.730975][ T8510] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 559.735461][ T8510] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.739144][ T8510] usb 10-1: Product: syz [ 559.741199][ T8510] usb 10-1: Manufacturer: syz [ 559.743850][ T8510] usb 10-1: SerialNumber: syz [ 559.754758][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 559.764021][ T8510] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input36 [ 559.891536][ T1025] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 559.968089][ T40] audit: type=1800 audit(1767045318.532:40185): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1691" name="nullb0" dev="tmpfs" ino=2234 res=0 errno=0 [ 559.977867][ T8510] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 559.981644][ T8510] (id 0x00) [ 560.051605][ T8510] rc_core: IR keymap rc-imon-pad not found [ 560.054277][ T8510] Registered IR keymap rc-empty [ 560.057853][ T8510] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 560.062767][ T8510] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 560.065929][ T1025] usb 9-1: config 0 interface 0 has no altsetting 0 [ 560.071777][ T1025] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 560.075486][ T1025] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 560.078998][ T1025] usb 9-1: Product: syz [ 560.080494][ T1025] usb 9-1: Manufacturer: syz [ 560.082696][ T1025] usb 9-1: SerialNumber: syz [ 560.086365][ T1025] usb 9-1: config 0 descriptor?? [ 560.094590][ T1025] usb 9-1: selecting invalid altsetting 0 [ 560.115508][T11937] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 560.119177][T11937] veth0_vlan: left promiscuous mode [ 560.122109][T11937] veth0_vlan: entered promiscuous mode [ 560.125096][T11937] team0: Device veth0_vlan failed to register rx_handler [ 560.153641][T11915] NILFS (nbd5): device size too small [ 560.182267][ T8510] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 560.187414][ T8510] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input37 [ 560.194356][ T8510] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:11> initialized [ 560.292069][T11928] ================================================================== [ 560.294719][T11928] BUG: KASAN: slab-out-of-bounds in copy_to_urb.constprop.0+0x30f/0x440 [ 560.297470][T11928] Write of size 264 at addr ffff888024fd5e00 by task syz.4.1690/11928 [ 560.302099][T11928] [ 560.303255][T11928] CPU: 2 UID: 0 PID: 11928 Comm: syz.4.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.303274][T11928] Tainted: [L]=SOFTLOCKUP [ 560.303278][T11928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.303286][T11928] Call Trace: [ 560.303291][T11928] [ 560.303296][T11928] dump_stack_lvl+0x116/0x1f0 [ 560.303314][T11928] print_report+0xcd/0x630 [ 560.303331][T11928] ? __virt_addr_valid+0x81/0x610 [ 560.303343][T11928] ? __phys_addr+0xe8/0x180 [ 560.303354][T11928] ? copy_to_urb.constprop.0+0x30f/0x440 [ 560.303366][T11928] kasan_report+0xe0/0x110 [ 560.303380][T11928] ? copy_to_urb.constprop.0+0x30f/0x440 [ 560.303392][T11928] kasan_check_range+0x100/0x1b0 [ 560.303409][T11928] __asan_memcpy+0x3c/0x60 [ 560.303420][T11928] copy_to_urb.constprop.0+0x30f/0x440 [ 560.303437][T11928] prepare_playback_urb+0xc3b/0x1e70 [ 560.303453][T11928] ? __pfx_prepare_playback_urb+0x10/0x10 [ 560.303464][T11928] ? sched_balance_rq+0x7e4/0x3220 [ 560.303482][T11928] ? sched_clock_cpu+0x6c/0x530 [ 560.303496][T11928] prepare_outbound_urb+0x419/0xdd0 [ 560.303512][T11928] ? __pfx_prepare_playback_urb+0x10/0x10 [ 560.303524][T11928] ? _copy_from_iter+0x161/0x16c0 [ 560.303542][T11928] ? __pfx_prepare_outbound_urb+0x10/0x10 [ 560.303556][T11928] ? __pfx__copy_from_iter+0x10/0x10 [ 560.303572][T11928] ? lock_acquire+0x179/0x330 [ 560.303586][T11928] snd_usb_endpoint_start+0x42c/0x1040 [ 560.303602][T11928] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 560.303618][T11928] ? do_transfer+0x17a/0x210 [ 560.303631][T11928] start_endpoints+0xfb/0x1d0 [ 560.303648][T11928] snd_usb_substream_playback_trigger+0x6a0/0x870 [ 560.303668][T11928] snd_pcm_do_start+0xd4/0x1f0 [ 560.303681][T11928] snd_pcm_action_single+0x80/0x150 [ 560.303692][T11928] snd_pcm_action+0x70/0x90 [ 560.303707][T11928] __snd_pcm_lib_xfer+0x1403/0x1ef0 [ 560.303722][T11928] ? __pfx_default_write_copy+0x10/0x10 [ 560.303737][T11928] ? __pfx_interleaved_copy+0x10/0x10 [ 560.303751][T11928] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 560.303770][T11928] snd_pcm_oss_write3+0xcf/0x1e0 [ 560.303786][T11928] io_playback_transfer+0x26e/0x2f0 [ 560.303804][T11928] snd_pcm_plug_write_transfer+0x2cf/0x400 [ 560.303822][T11928] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 560.303840][T11928] ? snd_pcm_format_physical_width+0x76/0xa0 [ 560.303857][T11928] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 560.303875][T11928] snd_pcm_oss_write2+0x24a/0x410 [ 560.303890][T11928] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 560.303905][T11928] ? mark_held_locks+0x49/0x80 [ 560.303917][T11928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.303931][T11928] snd_pcm_oss_sync1+0x1c3/0x560 [ 560.303946][T11928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.303960][T11928] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 560.303975][T11928] ? __fsnotify_parent+0x24b/0xcc0 [ 560.303995][T11928] ? __pfx_default_wake_function+0x10/0x10 [ 560.304014][T11928] ? __asan_memset+0x23/0x50 [ 560.304024][T11928] ? snd_pcm_format_set_silence+0x1b7/0x340 [ 560.304042][T11928] snd_pcm_oss_sync+0x5ef/0x840 [ 560.304058][T11928] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.304073][T11928] snd_pcm_oss_release+0x28b/0x310 [ 560.304088][T11928] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.304103][T11928] __fput+0x402/0xb70 [ 560.304115][T11928] task_work_run+0x150/0x240 [ 560.304130][T11928] ? __pfx_task_work_run+0x10/0x10 [ 560.304143][T11928] ? __do_sys_close_range+0x278/0x730 [ 560.304162][T11928] exit_to_user_mode_loop+0xfb/0x540 [ 560.304179][T11928] do_syscall_64+0x4ee/0xf80 [ 560.304194][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.304205][T11928] RIP: 0033:0x7f5ec918f7c9 [ 560.304215][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.304226][T11928] RSP: 002b:00007f5ec9f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 560.304237][T11928] RAX: 0000000000000000 RBX: 00007f5ec93e5fa0 RCX: 00007f5ec918f7c9 [ 560.304244][T11928] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 560.304251][T11928] RBP: 00007f5ec9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.304257][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.304264][T11928] R13: 00007f5ec93e6038 R14: 00007f5ec93e5fa0 R15: 00007ffcd626f548 [ 560.304274][T11928] [ 560.304278][T11928] [ 560.447648][T11928] Allocated by task 11928: [ 560.449249][T11928] kasan_save_stack+0x33/0x60 [ 560.450942][T11928] kasan_save_track+0x14/0x30 [ 560.452687][T11928] __kasan_kmalloc+0xaa/0xb0 [ 560.454206][T11928] __kmalloc_noprof+0x33d/0x910 [ 560.456123][T11928] hcd_buffer_alloc+0x1f5/0x290 [ 560.457793][T11928] usb_alloc_coherent+0x5f/0xa0 [ 560.459390][T11928] snd_usb_endpoint_set_params+0x18c8/0x2980 [ 560.461397][T11928] snd_usb_hw_params+0x715/0x1070 [ 560.463169][T11928] snd_pcm_hw_params+0xafc/0x1ba0 [ 560.464871][T11928] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 560.466593][T11928] snd_pcm_oss_change_params_locked+0x15ab/0x3ab0 [ 560.468730][T11928] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 560.470755][T11928] snd_pcm_oss_write+0x4c2/0xa10 [ 560.472428][T11928] vfs_write+0x2a0/0x11d0 [ 560.473863][T11928] ksys_write+0x12a/0x250 [ 560.475297][T11928] do_syscall_64+0xcd/0xf80 [ 560.477131][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.479132][T11928] [ 560.479958][T11928] The buggy address belongs to the object at ffff888024fd5e00 [ 560.479958][T11928] which belongs to the cache kmalloc-192 of size 192 [ 560.484590][T11928] The buggy address is located 0 bytes inside of [ 560.484590][T11928] allocated 192-byte region [ffff888024fd5e00, ffff888024fd5ec0) [ 560.489358][T11928] [ 560.490213][T11928] The buggy address belongs to the physical page: [ 560.492500][T11928] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24fd5 [ 560.495640][T11928] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 560.498053][T11928] page_type: f5(slab) [ 560.499403][T11928] raw: 00fff00000000000 ffff88801b4423c0 ffffea0000e39640 dead000000000004 [ 560.502331][T11928] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 560.505463][T11928] page dumped because: kasan: bad access detected [ 560.507669][T11928] page_owner tracks the page as allocated [ 560.509844][T11928] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 8222785660, free_ts 7855303555 [ 560.516446][T11928] post_alloc_hook+0x1af/0x220 [ 560.518246][T11928] get_page_from_freelist+0xd0b/0x31a0 [ 560.520302][T11928] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 560.522258][T11928] alloc_pages_mpol+0x1fb/0x550 [ 560.524082][T11928] new_slab+0x2c3/0x430 [ 560.525701][T11928] ___slab_alloc+0xe18/0x1c90 [ 560.527530][T11928] __slab_alloc.constprop.0+0x63/0x110 [ 560.529750][T11928] __kmalloc_cache_noprof+0x485/0x800 [ 560.531687][T11928] call_usermodehelper_setup+0xaf/0x360 [ 560.533770][T11928] kobject_uevent_env+0x179c/0x1920 [ 560.535932][T11928] tty_register_device_attr+0x4ba/0x7c0 [ 560.538247][T11928] tty_register_driver+0x50c/0x860 [ 560.540368][T11928] pty_init+0x668/0x10f0 [ 560.542213][T11928] do_one_initcall+0x123/0x680 [ 560.544000][T11928] kernel_init_freeable+0x5c8/0x920 [ 560.545876][T11928] kernel_init+0x1c/0x2b0 [ 560.547484][T11928] page last free pid 34 tgid 34 stack trace: [ 560.549925][T11928] __free_frozen_pages+0x7df/0x1170 [ 560.552068][T11928] vfree+0x1fd/0xb50 [ 560.553510][T11928] delayed_vfree_work+0x56/0x70 [ 560.555162][T11928] process_one_work+0x9ba/0x1b20 [ 560.557179][T11928] worker_thread+0x6c8/0xf10 [ 560.558860][T11928] kthread+0x3c5/0x780 [ 560.560352][T11928] ret_from_fork+0x983/0xb10 [ 560.562151][T11928] ret_from_fork_asm+0x1a/0x30 [ 560.564200][T11928] [ 560.565056][T11928] Memory state around the buggy address: [ 560.567085][T11928] ffff888024fd5d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 560.570154][T11928] ffff888024fd5e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.573550][T11928] >ffff888024fd5e80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 560.577046][T11928] ^ [ 560.579709][T11928] ffff888024fd5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 560.583219][T11928] ffff888024fd5f80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 560.586299][T11928] ================================================================== [ 560.589030][T11928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 560.592178][T11928] CPU: 2 UID: 0 PID: 11928 Comm: syz.4.1690 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.596808][T11928] Tainted: [L]=SOFTLOCKUP [ 560.598757][T11928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.603456][T11928] Call Trace: [ 560.604949][T11928] [ 560.606309][T11928] dump_stack_lvl+0x3d/0x1f0 [ 560.608368][T11928] vpanic+0x640/0x6f0 [ 560.610095][T11928] panic+0xca/0xd0 [ 560.611566][T11928] ? __pfx_panic+0x10/0x10 [ 560.613051][T11928] ? end_report+0x4c/0x160 [ 560.614559][T11928] ? rcu_is_watching+0x12/0xc0 [ 560.616105][T11928] ? lock_release+0x201/0x2d0 [ 560.617643][T11928] check_panic_on_warn+0xab/0xb0 [ 560.619397][T11928] end_report+0x107/0x160 [ 560.620817][T11928] kasan_report+0xee/0x110 [ 560.622333][T11928] ? copy_to_urb.constprop.0+0x30f/0x440 [ 560.624223][T11928] kasan_check_range+0x100/0x1b0 [ 560.625877][T11928] __asan_memcpy+0x3c/0x60 [ 560.627387][T11928] copy_to_urb.constprop.0+0x30f/0x440 [ 560.629496][T11928] prepare_playback_urb+0xc3b/0x1e70 [ 560.631804][T11928] ? __pfx_prepare_playback_urb+0x10/0x10 [ 560.634275][T11928] ? sched_balance_rq+0x7e4/0x3220 [ 560.636543][T11928] ? sched_clock_cpu+0x6c/0x530 [ 560.638699][T11928] prepare_outbound_urb+0x419/0xdd0 [ 560.640944][T11928] ? __pfx_prepare_playback_urb+0x10/0x10 [ 560.643413][T11928] ? _copy_from_iter+0x161/0x16c0 [ 560.645676][T11928] ? __pfx_prepare_outbound_urb+0x10/0x10 [ 560.648166][T11928] ? __pfx__copy_from_iter+0x10/0x10 [ 560.650083][T11928] ? lock_acquire+0x179/0x330 [ 560.651684][T11928] snd_usb_endpoint_start+0x42c/0x1040 [ 560.653704][T11928] ? __pfx_snd_usb_endpoint_start+0x10/0x10 [ 560.655815][T11928] ? do_transfer+0x17a/0x210 [ 560.657343][T11928] start_endpoints+0xfb/0x1d0 [ 560.658995][T11928] snd_usb_substream_playback_trigger+0x6a0/0x870 [ 560.661598][T11928] snd_pcm_do_start+0xd4/0x1f0 [ 560.663516][T11928] snd_pcm_action_single+0x80/0x150 [ 560.665648][T11928] snd_pcm_action+0x70/0x90 [ 560.667504][T11928] __snd_pcm_lib_xfer+0x1403/0x1ef0 [ 560.669679][T11928] ? __pfx_default_write_copy+0x10/0x10 [ 560.672029][T11928] ? __pfx_interleaved_copy+0x10/0x10 [ 560.674274][T11928] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 560.676564][T11928] snd_pcm_oss_write3+0xcf/0x1e0 [ 560.678630][T11928] io_playback_transfer+0x26e/0x2f0 [ 560.680758][T11928] snd_pcm_plug_write_transfer+0x2cf/0x400 [ 560.683204][T11928] ? __pfx_snd_pcm_plug_write_transfer+0x10/0x10 [ 560.685887][T11928] ? snd_pcm_format_physical_width+0x76/0xa0 [ 560.688590][T11928] ? snd_pcm_plug_client_channels_buf+0x212/0x450 [ 560.691386][T11928] snd_pcm_oss_write2+0x24a/0x410 [ 560.693665][T11928] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 560.696138][T11928] ? mark_held_locks+0x49/0x80 [ 560.698346][T11928] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 560.700828][T11928] snd_pcm_oss_sync1+0x1c3/0x560 [ 560.703079][T11928] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 560.705682][T11928] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 560.708095][T11928] ? __fsnotify_parent+0x24b/0xcc0 [ 560.710363][T11928] ? __pfx_default_wake_function+0x10/0x10 [ 560.712916][T11928] ? __asan_memset+0x23/0x50 [ 560.714885][T11928] ? snd_pcm_format_set_silence+0x1b7/0x340 [ 560.717507][T11928] snd_pcm_oss_sync+0x5ef/0x840 [ 560.719679][T11928] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.721757][T11928] snd_pcm_oss_release+0x28b/0x310 [ 560.723465][T11928] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 560.725386][T11928] __fput+0x402/0xb70 [ 560.726746][T11928] task_work_run+0x150/0x240 [ 560.728736][T11928] ? __pfx_task_work_run+0x10/0x10 [ 560.731061][T11928] ? __do_sys_close_range+0x278/0x730 [ 560.733395][T11928] exit_to_user_mode_loop+0xfb/0x540 [ 560.735724][T11928] do_syscall_64+0x4ee/0xf80 [ 560.737379][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.739472][T11928] RIP: 0033:0x7f5ec918f7c9 [ 560.740971][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.747967][T11928] RSP: 002b:00007f5ec9f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 560.750904][T11928] RAX: 0000000000000000 RBX: 00007f5ec93e5fa0 RCX: 00007f5ec918f7c9 [ 560.753568][T11928] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 560.756529][T11928] RBP: 00007f5ec9213f91 R08: 0000000000000000 R09: 0000000000000000 [ 560.759837][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.763300][T11928] R13: 00007f5ec93e6038 R14: 00007f5ec93e5fa0 R15: 00007ffcd626f548 [ 560.766523][T11928] [ 560.768643][T11928] Kernel Offset: disabled [ 560.770548][T11928] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:17:11 Registers: info registers vcpu 0 CPU#0 RAX=000000000022145f RBX=0000000000000000 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb41d1909c0 CR3=000000002a103000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcf1fc00 Opmask01=0000000000004211 Opmask02=00000000013f0017 Opmask03=0000000000400200 Opmask04=00000000ffff7fff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffff9165970 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb41d1f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb41d1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000ff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a559e37200a48 2a2a7fcca52c0bb6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a15d5 2a2a2a2a2a415943 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d30312f303162 73752f352e646368 5f796d6d75642f6d 726f6674616c702f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffff9165970 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66666f3d73657469 72775f776f6c6c61 0072736d00313d63 0034333a3331632f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e68f034f40 000055e68f0318f0 000055e68f031870 000055e68f0317f0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e68f0447e0 000055e68f044760 000055e68f049ac0 000055e68f044660 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055e68f0445e0 000055e68f044560 000055e68f044500 000055e68f037dc0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d4d0030430034 00363600303d4544 4b3d450030000039 3500320038350036 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000236137 RBX=0000000000000001 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=ffffed1003bd2498 RSP=ffffc90000177de8 R8 =0000000000000001 R9 =ffffed100d4a673d R10=ffff88806a5339eb R11=ffff88801de92ff0 R12=0000000000000001 R13=ffff88801de924c0 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69f5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f94c40aef98 CR3=000000002c302000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557fa098ae 000055557fa09370 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f30eedbad20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f9d85f3 000055557f9d8380 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557f9cf678 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa0030656c69662f 2e01ffffffffffff ffffef0800030190 10000c8004328080 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0808000790034080 08000788030a0800 05b80300020005b6 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a08060a010bee02 b008000880030e08 0007a80306080007 a003000800079803 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014840312020014 8203080200148003 0880040580041e08 0002880800010000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100008808080 80808087e4100000 0401000016080608 0159860008000610 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00201000061670cc 0c10001480040401 72de039204001488 0300020014860306 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0200148403120200 1482030802001480 030880040580041e 0800028808000100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a08060a010bee 02b008000880030e 080007a803060800 07a0030008000798 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85326325 RDI=ffffffff9aeedc00 RBP=ffffffff9aeedbc0 RSP=ffffc9000cec6e30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838667257 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9aeedbc0 R15=ffffffff853262c0 RIP=ffffffff8532634f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5ec9f776c0 ffffffff 00c00000 GS =0000 ffff8880d6af5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2f7655 CR3=0000000026661000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec9f74f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec9215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec921505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec9215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec921506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec92150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ec92151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000336f69 6475612f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000104c4a 4756420c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001c7683 RBX=0000000000000003 RCX=ffffffff8b7816d9 RDX=0000000000000000 RSI=ffffffff8dacdf23 RDI=ffffffff8bf2b400 RBP=ffffed1003bd7000 RSP=ffffc90000197de8 R8 =0000000000000001 R9 =ffffed100d4e673d R10=ffff88806a7339eb R11=ffff88801deb8b30 R12=0000000000000003 R13=ffff88801deb8000 R14=ffffffff9088b4d0 R15=0000000000000000 RIP=ffffffff8b77fdcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f94c40afd58 CR3=000000002e958000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000120 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c3215050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c321505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c3215057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c321506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c32150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c32151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c33ba4a8 00007f94c33ba4a0 00007f94c33ba498 00007f94c33ba470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c3f1d100 00007f94c33ba460 00007f94c33b0004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f94c33ba4b8 00007f94c33ba4b0 00007f94c33ba4a8 00007f94c33ba4a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000