last executing test programs: 2m14.544841563s ago: executing program 32 (id=338): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x15, 0xb04, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0xfffd, 0x0, 0x0, 0x9d, 0xa, 0x80, 0x80, 0x3a}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x365f, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bb7, 0x2, 0x1}}, 0xb8}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x105000) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 2m2.4439401s ago: executing program 33 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r2, r2) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendfile(r3, r0, 0x0, 0x80000000) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) setresgid(0xffffffffffffffff, r2, r2) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) sendfile(r3, r0, 0x0, 0x80000000) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00']) (async) 1m44.375986556s ago: executing program 1 (id=1139): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x7}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x13, 0x0, &(0x7f0000001400)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100008617968dc0fce48181506990a5e7cad3c24a1c3971ee1ce9a321d2e92779c50df27b36c1af95950aea3540d7495b8382066e2bb20d5bbc17dd8d8353cdf973899e67c210fe758882829c29dc4bedee9539312a3a12c3339831540746d174f7d2ccfe1010b870d0f71ee768516095da0a43285143816db8e3e46a706a3016ee88eb9027f265c70ddc7df254501e805d"], 0x114}], 0x1}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) (async) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x7}) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$packet_int(r2, 0x107, 0x13, 0x0, &(0x7f0000001400)) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100008617968dc0fce48181506990a5e7cad3c24a1c3971ee1ce9a321d2e92779c50df27b36c1af95950aea3540d7495b8382066e2bb20d5bbc17dd8d8353cdf973899e67c210fe758882829c29dc4bedee9539312a3a12c3339831540746d174f7d2ccfe1010b870d0f71ee768516095da0a43285143816db8e3e46a706a3016ee88eb9027f265c70ddc7df254501e805d"], 0x114}], 0x1}, 0x0) (async) 1m44.375673341s ago: executing program 1 (id=1140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000780)={&(0x7f00000006c0)=[0x0], 0x0, r5, 0x0, '\x00', 0x1}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1ff, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x20000080) 1m44.30827573s ago: executing program 1 (id=1142): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x80000004, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000280)={&(0x7f0000000140)=[{0x31, 0x8211, 0x0, 0x0}], 0x1}) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) close(0x3) 1m44.306273692s ago: executing program 1 (id=1144): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r2}, 0x20) recvfrom$inet6(r2, &(0x7f0000000040)=""/53, 0x99, 0x2, 0x0, 0x12) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 1m44.139649643s ago: executing program 1 (id=1147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x14f000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x4000}) (async, rerun: 32) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b8, 0x80000001, 0x7, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xfffdfffffffffffa, 0x0, 0x100008, 0x0, 0x248a, 0x9, 0x3, 0x0, 0x0, 0x3ff, 0xf, 0x0, 0x4, 0x5999, 0xfffffffffffffffc, 0x400, 0x2, 0x2be, 0xffffffffffffffef}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00\x00\x00\x00\x02') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00\x02\x00\x00\x00') (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x200}) 1m43.846190156s ago: executing program 1 (id=1152): set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x4, 0x9, 0x4, 0x20, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @generic={0x0, 0x0, 0x4, 0x8, 0x9}], &(0x7f0000000080)='GPL\x00', 0x7, 0x47, &(0x7f00000000c0)=""/71, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x8, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x3, 0x2, 0xf, 0x1}, {0x2, 0x2, 0x8, 0x5}], 0x10, 0x4}, 0x94) close_range(0xffffffffffffffff, r0, 0x2) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @llc={0x1a, 0x301, 0xf, 0x8, 0xc, 0x1, @random="683ccecbf62f"}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @llc={0x1a, 0xffff, 0xe7, 0x33, 0x0, 0x6, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x17, &(0x7f0000000300)='ip6gretap0\x00', 0x8, 0xfffffffffffffffc, 0xfff9}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) 1m43.835247587s ago: executing program 34 (id=1152): set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x4, 0x9, 0x4, 0x20, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @generic={0x0, 0x0, 0x4, 0x8, 0x9}], &(0x7f0000000080)='GPL\x00', 0x7, 0x47, &(0x7f00000000c0)=""/71, 0x41000, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x8, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x3, 0x2, 0xf, 0x1}, {0x2, 0x2, 0x8, 0x5}], 0x10, 0x4}, 0x94) close_range(0xffffffffffffffff, r0, 0x2) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, @llc={0x1a, 0x301, 0xf, 0x8, 0xc, 0x1, @random="683ccecbf62f"}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @llc={0x1a, 0xffff, 0xe7, 0x33, 0x0, 0x6, @broadcast}, 0x4, 0x0, 0x0, 0x0, 0x17, &(0x7f0000000300)='ip6gretap0\x00', 0x8, 0xfffffffffffffffc, 0xfff9}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) 1m32.714050668s ago: executing program 4 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xf397, 0x3}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010000000000000000000700", @ANYBLOB="4000aa"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xf397, 0x3}, 0x6) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010000000000000000000700", @ANYBLOB="4000aa"], 0x28}}, 0x0) (async) 1m32.656082484s ago: executing program 4 (id=1419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) 1m32.425768304s ago: executing program 4 (id=1424): syz_open_dev$hiddev(&(0x7f0000000000), 0x1000, 0x2000) (async) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1000, 0x2000) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001066810402008000f0fad70c20f8b8e8c3fbc9df0dcbbe0e0000000000000000", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c0002800500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m32.425036435s ago: executing program 4 (id=1425): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000000c0)={0x3, 0xa}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x4}]}) mkdir(&(0x7f0000000400)='./file0\x00', 0x1f9) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setreuid(0x0, 0xee01) epoll_create1(0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r5, r5, 0x2013, &(0x7f0000000280)={0xa, 0x8, 0xfff}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], &(0x7f0000000200)=[0x1, 0x4, 0x8, 0xa, 0x2, 0x2, 0x75, 0x81e, 0x4], 0x1}, 0x20) tkill(r5, 0x12) fchdir(r4) truncate(&(0x7f0000000000)='./bus\x00', 0x7ffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd25, 0x25d7dbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) close(0x3) 1m32.355593186s ago: executing program 4 (id=1426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x9, 0x0, 0x0, 0x7ffc1fff}]}) fstatfs(0xffffffffffffffff, 0x0) 1m32.085944763s ago: executing program 4 (id=1429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x378, &(0x7f00000004c0)={0x0, 0x92e5, 0x40, 0x2, 0x362}, &(0x7f0000000440), &(0x7f0000000580)) io_uring_enter(r1, 0x554f, 0xf340, 0x40, &(0x7f0000000600)={[0xa]}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000080000000800bb0000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, &(0x7f0000000340)=""/140}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000db253bae98161314a5ebd4a225b500000a6c"], 0x94}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r7 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) openat(r8, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat$cgroup(r8, &(0x7f0000000380)='syz0\x00', 0x1ff) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x0, 0x24, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0x6}, {0x3, 0xfff3}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cbq={{}, {0x0, 0x2, [@TCA_CBS_PARMS={0x0, 0x1, {0x4, '\x00', 0x10000, 0xe, 0x100, 0x2}}, @TCA_CBS_PARMS={0x0, 0x1, {0x7, '\x00', 0x0, 0xff, 0x4, 0xe}}, @TCA_CBS_PARMS={0x0, 0x1, {0xd, '\x00', 0x93b, 0xff7ffff2, 0x4b, 0x4a}}, @TCA_CBS_PARMS={0x0, 0x1, {0x0, '\x00', 0x0, 0x6, 0x6, 0x400}}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a92000000060a0b04000000000000000002000000500004804c0001800a000100696e6e0000000000000000800800024000000032bb9c3f929aec572585f1e22b25840800034000000007080004400000000f080001400000000010000580090001006d6574610000000008000440000000210900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0xa4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r10, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r0, @ANYRES64=r10, @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r12 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000740)=[{0x8, 0x0, [0xab, 0x5, 0x8001, 0x78defcc6, 0x8, 0xd1c, 0x0, 0x2, 0x8, 0xffff0c0c, 0x0, 0xfffffffe, 0xd, 0x3b, 0x4, 0x6]}], r14, 0x1, 0x1, 0x48}}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) 1m32.039859621s ago: executing program 35 (id=1429): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x378, &(0x7f00000004c0)={0x0, 0x92e5, 0x40, 0x2, 0x362}, &(0x7f0000000440), &(0x7f0000000580)) io_uring_enter(r1, 0x554f, 0xf340, 0x40, &(0x7f0000000600)={[0xa]}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000080000000800bb0000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, 0x0, &(0x7f0000000340)=""/140}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000db253bae98161314a5ebd4a225b500000a6c"], 0x94}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r7 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) openat(r8, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat$cgroup(r8, &(0x7f0000000380)='syz0\x00', 0x1ff) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newqdisc={0x0, 0x24, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0x6}, {0x3, 0xfff3}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cbq={{}, {0x0, 0x2, [@TCA_CBS_PARMS={0x0, 0x1, {0x4, '\x00', 0x10000, 0xe, 0x100, 0x2}}, @TCA_CBS_PARMS={0x0, 0x1, {0x7, '\x00', 0x0, 0xff, 0x4, 0xe}}, @TCA_CBS_PARMS={0x0, 0x1, {0xd, '\x00', 0x93b, 0xff7ffff2, 0x4b, 0x4a}}, @TCA_CBS_PARMS={0x0, 0x1, {0x0, '\x00', 0x0, 0x6, 0x6, 0x400}}]}}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a92000000060a0b04000000000000000002000000500004804c0001800a000100696e6e0000000000000000800800024000000032bb9c3f929aec572585f1e22b25840800034000000007080004400000000f080001400000000010000580090001006d6574610000000008000440000000210900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0xa4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r10, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r0, @ANYRES64=r10, @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r12 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000740)=[{0x8, 0x0, [0xab, 0x5, 0x8001, 0x78defcc6, 0x8, 0xd1c, 0x0, 0x2, 0x8, 0xffff0c0c, 0x0, 0xfffffffe, 0xd, 0x3b, 0x4, 0x6]}], r14, 0x1, 0x1, 0x48}}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100"}) 1m4.365086539s ago: executing program 6 (id=1930): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r3 = socket(0xa, 0x3, 0x3a) open(&(0x7f00000001c0)='./file0\x00', 0x2, 0x189) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x34]}}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)={0x0, 0xfb, 0x97, 0x6, 0x6, "a4a2bb47d3658c568ac370cf4270b591", "340fef40202fd75a4cafeed8f124264f0cc6f926480c090a25a8ccc0111eab1dcac9794d1943a84dffbdf1be31f7eeccecdcd58716331e142f890cf3b1c122a739da734b3b219113b89c5d2b65f3f625c702cca8a953082277e5c574631e15ffb21455b022bdd50330b2b0b5d3eee92fb71cfbe34da0a26f06f331407a19c506acbe"}, 0x97, 0x1) 1m4.27522105s ago: executing program 6 (id=1931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x4, 0x20000e695, 0x9, 0x400, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x44854) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m4.183753969s ago: executing program 6 (id=1934): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x40, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='J', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x40001, @local, 0x5}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000740)="13daa3fc439cb801bc500c3148725036a59bc122f8f509d597ff55c08e42b6522565010ba7a45e", 0x27}, {&(0x7f0000000780)="16995be98774a0abae7e76400f782d95bb2a6a5ea60090747d09fcd6efbe92e3bff18eff33ace9f1ef4aae0abeca8dd920189e6d4e273f4b7834fd50cfcd72bd4713e35f416ca609975fdbfad103", 0x4e}, {&(0x7f0000000800)="afc01f342cf47863d1f652325f793ce636ac69e8b6662197e86f187957ab3f6c1902ed14a282e996af8ea83dc652e4d5448477ed9f5710e927e6453adfabe04c42704e5bc2f504fb40879f85c8900a36bc1c53fd419504cb9deb73fb18cf0a5ad3f18e875ab17eeb1a729cc8f86740d3e8992f04fb313376a894695267e750c3b325eb6ca1f8b033", 0x88}], 0x3) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x50, r1, 0x100, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0x50}}, 0x80) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x10000000bb3, 0x5}, &(0x7f0000000240)=0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r4, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = syz_open_dev$evdev(&(0x7f0000001d40), 0x4, 0x205501) sendmsg$netlink(r3, &(0x7f0000001e40)={&(0x7f0000000600), 0xc, &(0x7f0000000640)=[{&(0x7f00000009c0)={0x1258, 0x2b, 0x20, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10e7, 0x8a, 0x0, 0x1, [@generic="3aa379d030e5bc724823843530c52598a62500daa60f5528fa00ea673ab9c6033aea95ca7a8d548f1a6f9c3ba1a1bfbc4268c9f5731ea8ea137d178af3bff488564a249c89e94e940d9fc12a8aadb48c9f06547e7c50bc6cf0ede31b5b3ec3c594c686eaf216952f4616b4d6769208560988c3e4ebc74fa7725327730539fd3e86b7d2746649d15a36ca9f42d30b75335511c35948af4314bf59560d499e7247d46c750951c09125e3f5b19cb64c8fa7da2e90a95d3a3ff4a1f98255756eadd1712be3bd62a3faf88da9c9d695d3d90c5b39e038301f5359e690f8c377e250", @nested={0x4, 0x150}, @generic="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"]}, @nested={0x158, 0x78, 0x0, 0x1, [@generic="ed73395ef5bfb1e2fef1e5d20b8e66affe83d8dd0ff8e40e4979170046f0a724b3e479fb3b6b5cf43edbd588159e9a53b647fe4a58434acbb22ebfdd02c969cebb3866939929f4a3d360bd11cada620fb2c39a50e300f0a86c036d72d11a4a42a669761f08605f", @generic="de4445d4a7a8e4c274d7a063a90baec313955d1b756421db27c792773a4507e9ebb1606bed13fde3cd41b382154705cb4d403047e833c2869b70bee7344a53934b55c42bd081aeade960cf3a18f24ceebc6cb78515f3d00b73867769b32138bb8f3deba06379fce124dee25e843ba650d1544476398d4833e67c8743ff01621b15d792cb4081f69cb0cd136d", @nested={0x4, 0x65}, @generic="11d2f9b2d21ab0e3244114222bdb6b0e4ac7b192", @nested={0x4, 0xb}, @nested={0x4, 0xc6}, @typed={0x7, 0x149, 0x0, 0x0, @str='\'&\x00'}, @nested={0x4, 0x136}, @generic="df21b3ca8ace557e413f38e2dfc93ebd6419259633772851339ffc107660a2ba3a93f604cf254c64ca309a385cc537d4d597d49bfb"]}, @typed={0x8, 0xb4, 0x0, 0x0, @u32=0x1}]}, 0x1258}], 0x1, &(0x7f0000001d80)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r3, r2, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r6, r3, r0]}}, @rights={{0x24, 0x1, 0x1, [r7, r2, r3, r0, r0]}}], 0xb0, 0x8801}, 0x800) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r8, &(0x7f0000006980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)='T', 0x1}], 0x1}}], 0x1, 0x810) listen(r8, 0xc6) r9 = accept4(r8, &(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @netrom, @null, @netrom, @null, @null]}, 0x0, 0x80800) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0xff81, 0x8000, 0x67b2, 0x3, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x66, 0x8000, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@cipso={0x86, 0x44, 0x0, [{0x2, 0x11, "efa213d216fb0ae2ce23fc46bc71c3"}, {0x2, 0x3, 's'}, {0x0, 0xa, "a82a0a481ea8c5e9"}, {0x5, 0x10, "a497028cda0ed4b171b2e1d9eef5"}, {0x7, 0x6, "515332ea"}, {0x5, 0x8, "edf422502977"}, {0x6, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x87, 0x3, 0x1, [{@empty, 0x5}]}, @rr={0x7, 0x13, 0xa6, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast]}, @end, @ssrr={0x89, 0x7, 0x6f, [@local]}, @end]}}}}}) getpeername$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810480}, 0xc, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="94000000", @ANYRES16=r10, @ANYBLOB="007000fbdbdf250200000034000180140002006e723000000000000000318749185a01f0e0fe9f43000000000000008cc50100", @ANYRES32=r11, @ANYBLOB="14000200000000000000000000000000000000004c00018008000100", @ANYRES32=r12, @ANYBLOB="08000300020000001400020069703665727370616e300000000000001400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4004000}, 0x8800) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}]}, 0x58}}, 0x0) 1m4.085590855s ago: executing program 6 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file1\x00') mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') chmod(&(0x7f0000000100)='./file1\x00', 0x10a) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) close(r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf2501000000000000000241000000140013000000007564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000100)=[{0x4, 0x0, {0x1, 0x0, 0x4}, {0x1, 0xf0, 0x3}, 0x0, 0xfe}, {0x1, 0x2, {}, {0x1, 0xff, 0x2}, 0xfe}, {0xfffffffffffffffe, 0xfffffffffffffffb, {0x1, 0xf0, 0x2}, {0x1}, 0x0, 0xff}, {0x2, 0x0, {0x2}, {0x1, 0xff, 0x2}, 0x3, 0xfe}], 0x80) prlimit64(0x0, 0x4, &(0x7f0000000000)={0x9, 0x100009f}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xe}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x5d51c833}}, 0x3, 0xa}, 0x90) 1m4.084145454s ago: executing program 6 (id=1937): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400001, 0x20) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000029001400c5d2f9937cbe4ddc4e433d0d00000000fb2bd5c36eea2b3199eaff815c709bca6e76348f7659eeb3e17ace081810d03930ce12f8833196992476820f1b03560e589e0e0b1e0700c592", @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000300)='./file0\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000900)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c00d48c6f6169ef7e3111327d7f2a7e25b26648bcfd18f41836c627474599caca4b7059f0f079f8eb89831f1ff2265be0e0409ed7f2829207b826d378b7092e367e7d9ea2bb56e6e48ecac79cbc491b32bf2c52b547dbf3c423884e74e7076cf6c504f6d45c82c7aa3e2065af6c8cb10a5842603962eda04f322f19fdd0cce98b0078d7956ed064c2fce92ba8c7042c3b5cbe62dc234a25238fb52ddaa825c2c11e5592ab6bdd7d6a4cb337f5cd7d508fb3", @ANYRESDEC=r2]) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xfffffffffffffff9, 0x420000) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681", 0xe}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f140b400", "000000040000005add3182a4ab4fcd00", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) chown(&(0x7f0000000000)='./file0\x00', r7, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000280)=0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@mmap}, {@loose}, {@access_uid={'access', 0x3d, r7}}, {@access_any}, {@access_client}, {@access_uid={'access', 0x3d, r8}}, {@fscache}, {@access_user}], [{@smackfshat={'smackfshat', 0x3d, '$!,O%\x03+&{&#%!/..\xe3\xbc\xd6d\xdcC\x90\x1c\x0f[DEd\xa8\x1e\f%\xde\xcaa\x9a\x91y<\xb1MB\xf4S\x91cb\x86\x88\xa5\xfd\xf0\x1d\xeb\x9e\xeaA\x10\xe22\xacJ\xf4\tc\xfcR\x90\x16o\b\x0f\xc5jR\xfc\xaf\x94\x06a\x1c\x9b\x01\xde\x19\xc0\xbch\xc5s\x12^\xa6m\x18\x0f\xc0\x04\xae\xd0\\\x90\x94\xb2\xf6\x8bW\xea\xdf\xd7]+-k\x1cS\x03\x8cqH\r\xd3\xd6\x84P@{\x9b{b\xaaj\xbe\x9e\n\x194-\xd6\x1b\xa5\xf8(Q8T0\xdc\xf6H\xf3\xcf\xd7\f\x15wE\x93\x98\xe6\v\x90$\x10\x95\xcdu2\xa5&\x98@Q\xc1\xb3\x04\x8d\xa9\x98\xae\x82\x03\xa6\xe4\xbc\x18\x869&\x83\xc4w\xee\xd1+\x83W,N\xc8u\xd9\xf4q\xad\x15\xf3\x0f1\xd7j\xa2\xbd\xe4\xc2D-\x0f\xd1\xedt\xfb\x880\x117\xa3\x14\xa35\xfc=JV\xea\v\x8e \x16\xe2\x0e^\x98\x10\xd7\xbd\xec\x8c}\xa2<\xc5z\xb7\xfd\xbbj\xfb\"Z\xcb\xf5\x844\xcd\x91\xf1\x8b\xe4D\xefR\x99\xebr\xac\x9b\x9bK\x7f\x1c\xb4\f?\x9b\x0e\r\x00'/303}}, {@smackfsfloor={'smackfsfloor', 0x3d, '=tcp,'}}]}}) inotify_init1(0x80000) getdents64(r4, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat(r0, &(0x7f0000000100)='./file0\x00', 0x600000, 0x143) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m3.775769497s ago: executing program 6 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_ifreq(r0, 0x15630, &(0x7f0000000000)={'caif0\x00', @ifru_mtu=0x10}) 1m3.768691523s ago: executing program 36 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001e0020"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000000c0)=0x10, 0x80000) ioctl$sock_ifreq(r0, 0x15630, &(0x7f0000000000)={'caif0\x00', @ifru_mtu=0x10}) 38.118342781s ago: executing program 7 (id=2304): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) (async) ioctl$KDFONTOP_SET(r0, 0x4b4b, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000002640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c08060304600506040003ffffffffffffab7309fdaaaaaaaaaa41785321dbf645c40004abb00d723c8837658ae852b35508cc31ac14e5e4bf134dba30d5747a4b83c548"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000002640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c08060304600506040003ffffffffffffab7309fdaaaaaaaaaa41785321dbf645c40004abb00d723c8837658ae852b35508cc31ac14e5e4bf134dba30d5747a4b83c548"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/4096}, {&(0x7f0000001600)=""/4096}, {&(0x7f0000000540)=""/115}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000026c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dddadd04e97ad31eed734d1bc72fb460f900f500180600fe800000000000000000c68219c30104cdfd000000007424acf0cba2cf91ad049c0adeb4fd09c43a242fdbdf4508b6da68420fbdbbe5647b270d6d0f8f20ed47d23130c51cf220526c9790bf3a7ae57c701068cc0cd5bc9570247798483ab2a0bee845391656bff76df235901d37cc39863e6c73264af5d52da27a0d22856fd1f08c41820afa239550ea845ca5d1e06db58e6eaffe436c0706ef53987348c673c27e543a16e401b980bbebfd7a95a7a3dc1258809471ea2afc8881e291f40f95c9ff2e98251bf922ac185b90512f986385926109402a0bbbceb20033f9522c8a7f4003434bfe84cb96bc7f378eabcec2000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e1e0000"], 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00a0100083000000a01000009389e57171bffb748ddda6f34fadb533102a2cfdace46d12d0c2cc19e6f95959831e62711f341e419f93c8dd84a2cceee714b09e3a02e0db44896ae468c5be08145b1973dc748e658fd3bb3a48831552fc555033441c69c9d2cfe1d1000000000000"]) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00a0100083000000a01000009389e57171bffb748ddda6f34fadb533102a2cfdace46d12d0c2cc19e6f95959831e62711f341e419f93c8dd84a2cceee714b09e3a02e0db44896ae468c5be08145b1973dc748e658fd3bb3a48831552fc555033441c69c9d2cfe1d1000000000000"]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_regs={0x4, 0x8651, 0xfffffffffffffe59, "1ac13329e642159e7e1e1c8dee4acac598201ea2a1965aedc9197e1bba0c2e680baa9c4bea55a61045910ca96715c19e946e47693cb8f7ac687abf714c1ad9ea160bc0f4feb3b6b3888352cccb3725706688741a2ff0e345bcbe8dd5fb74cff331d35242760a187b93a88403aa04bb0b10d393403886e7244fb20ac61a392a37a3aa64a052e8093f383cb0a5eb050099c3d6f964a9509fce9d030c76e078cfc97bf5407dd95f7ac72453cec6ce5f6932a7b1ccfa1eecbbf4c31e04c880bbc0f2dec05292c1ba8933171fea9d6a29880a51fa53e2de75801751d45991d95749d41b42ea1df7b59d9692ce072c"}}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) io_uring_setup(0xcea, &(0x7f00000002c0)={0x0, 0x9351, 0x4, 0x0, 0x3bb}) (async) r8 = io_uring_setup(0xcea, &(0x7f00000002c0)={0x0, 0x9351, 0x4, 0x0, 0x3bb}) io_uring_setup(0x4ec8, &(0x7f00000000c0)={0x0, 0xb567, 0x1, 0x1, 0xd2, 0x0, r8}) 38.117527665s ago: executing program 7 (id=2305): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="55c1b9188b6d0208b95d561caa4c775d9fc71f5105d72c8951ad0a22a238b8a89d3e8f270b48e82c3757cc32fe04db69356c2d05c4cb13987bef59cf3f8a0c8c6925187f9e93daa35e7c0e24c244e58a074d398088431f91cdca19b4f452153ef71b60d27d173542782e37571ac32bea5253a844536989571e8f0a307eb710b1d8606f351cd905e040fff49a", 0x8c}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x1b, [@remote]}]}}}], 0x18}}], 0x1, 0x1) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) (async) listen(r0, 0xfff) (async) getpeername(r0, 0x0, &(0x7f0000000000)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x181702, 0x0) poll(&(0x7f0000000180)=[{r2, 0x20}], 0x1, 0x2) write$ppp(r2, &(0x7f00000004c0)="c2cf7789", 0x4) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000240)) 38.065415219s ago: executing program 7 (id=2306): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) 38.064925647s ago: executing program 7 (id=2307): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) chdir(&(0x7f0000000140)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000080)='./file0/file0\x00', 0xa) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r2, &(0x7f0000000180)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x6, {0x5, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r7, r8, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.182308573s ago: executing program 7 (id=2310): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x5) 37.020371623s ago: executing program 7 (id=2315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x25}, 0x18) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x4a8200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8c012400e00050069010a0006000900080043000004"], 0x17) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000600)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0045b0f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x8}, {0xd, 0xe}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x4004044) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000080)=0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x8, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7ffffffe, 0x7, 0xffffffffffffff35, 0xedc3, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001200251c2cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10000000ed071c002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES16=r3, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 36.96699238s ago: executing program 37 (id=2315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x25}, 0x18) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x4a8200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180)=0x2000000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8c012400e00050069010a0006000900080043000004"], 0x17) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000600)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0045b0f, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x8}, {0xd, 0xe}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x4004044) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000080)=0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x8, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7ffffffe, 0x7, 0xffffffffffffff35, 0xedc3, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001200251c2cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="10000000ed071c002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES16=r3, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) 34.563444245s ago: executing program 8 (id=2338): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2a00014, &(0x7f0000000240)={'trans=unix,', {[], [{@pcr={'pcr', 0x3d, 0x37}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, 'trans=unix,'}}, {@fsname}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x10'}}, {@uid_lt={'uid<', r1}}, {@context={'context', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x61, 0xd9b1a46141b77209, 0x34, 0x79, 0x65, 0x37], 0x2d, [0x30, 0x38, 0x64, 0x35], 0x2d, [0x62, 0x38, 0x64, 0x38], 0x2d, [0x37, 0x63, 0x63, 0x36], 0x2d, [0x35, 0x61, 0x62, 0x36, 0x31, 0x35, 0x37, 0x62]}}}]}}) 34.484038704s ago: executing program 8 (id=2339): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = eventfd2(0x1, 0x80800) io_submit(0x0, 0x11, &(0x7f00000005c0)=[&(0x7f0000000540)={0x0, 0x0, 0x22, 0x1, 0xffff, r0, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c00002839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0x200, 0x200, 0x0, 0x1, r1}]) 34.483010043s ago: executing program 8 (id=2341): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}}, 0x0) 34.423839809s ago: executing program 8 (id=2342): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x20e0c2) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000040)) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x49}, 0x2, 0x0, 0x1, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000240)) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000001240)={0xc0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) lseek(r4, 0x6, 0x4) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)=0x0) getdents(r4, &(0x7f00000001c0)=""/15, 0xf) r6 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, r5, &(0x7f0000000340)={0x0, 0x4, 0x4, 0x40000477, 0x10, 0xfffffffffffffffc, 0x3, 0x0, 0x69}) fallocate(r4, 0x1, 0x9, 0x81) 34.421799319s ago: executing program 8 (id=2345): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(r0, &(0x7f00000001c0)=""/97, 0x61, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x5}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x0, 0x0, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "ee1990a380ecab90"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) 34.181881487s ago: executing program 8 (id=2349): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/41, 0x29}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r2, &(0x7f0000000000)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00', 0x137) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000001280)=0x80000001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x2400c800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r4, 0x0, 0x0, 0xc0006020, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './mnt\x00'}) mount$overlay(0x0, &(0x7f0000001240)='./mnt\x00', &(0x7f00000012c0), 0x5004, &(0x7f0000001440)={[{@default_permissions}, {@redirect_dir_nofollow}, {@default_permissions}, {@redirect_dir_on}, {@redirect_dir_off}, {@uuid_auto}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0xa}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x62, 0x61, 0x33, 0x35, 0x65, 0x39], 0x2d, [0x64, 0x31, 0x66, 0x36], 0x2d, [0x39, 0x38, 0x64, 0x30], 0x2d, [0x62, 0x61, 0x63, 0x33], 0x2d, [0x52, 0x61, 0x39, 0x61, 0x37, 0x31, 0x32]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt={'uid<', r5}}, {@permit_directio}]}) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="9121e52f", 0x4}, 0x1, 0x0, 0x0, 0x1}, 0xc0e4) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r6 = syz_open_dev$usbmon(&(0x7f0000001200), 0x3ff, 0x4000) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x10001) r7 = syz_io_uring_setup(0x2939, &(0x7f0000001080)={0x0, 0x458, 0x4000, 0x1, 0x2f0}, &(0x7f0000001100), &(0x7f0000001140)) io_uring_setup(0x5268, &(0x7f0000001180)={0x0, 0x9281, 0x20, 0x1, 0x22c, 0x0, r7}) 34.157125011s ago: executing program 38 (id=2349): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/145, 0x91}], 0x1, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/41, 0x29}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r2, &(0x7f0000000000)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00', 0x137) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000001280)=0x80000001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x2400c800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r4, 0x0, 0x0, 0xc0006020, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './mnt\x00'}) mount$overlay(0x0, &(0x7f0000001240)='./mnt\x00', &(0x7f00000012c0), 0x5004, &(0x7f0000001440)={[{@default_permissions}, {@redirect_dir_nofollow}, {@default_permissions}, {@redirect_dir_on}, {@redirect_dir_off}, {@uuid_auto}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0xa}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x62, 0x62, 0x61, 0x33, 0x35, 0x65, 0x39], 0x2d, [0x64, 0x31, 0x66, 0x36], 0x2d, [0x39, 0x38, 0x64, 0x30], 0x2d, [0x62, 0x61, 0x63, 0x33], 0x2d, [0x52, 0x61, 0x39, 0x61, 0x37, 0x31, 0x32]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt={'uid<', r5}}, {@permit_directio}]}) sendmsg$802154_raw(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="9121e52f", 0x4}, 0x1, 0x0, 0x0, 0x1}, 0xc0e4) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r6 = syz_open_dev$usbmon(&(0x7f0000001200), 0x3ff, 0x4000) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x10001) r7 = syz_io_uring_setup(0x2939, &(0x7f0000001080)={0x0, 0x458, 0x4000, 0x1, 0x2f0}, &(0x7f0000001100), &(0x7f0000001140)) io_uring_setup(0x5268, &(0x7f0000001180)={0x0, 0x9281, 0x20, 0x1, 0x22c, 0x0, r7}) 19.52756153s ago: executing program 2 (id=2590): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x48e8, 0x5, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x816c, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0xdb, 0x8e, 0x40b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a800080008000c4009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 19.527321081s ago: executing program 2 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) (async) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async, rerun: 64) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffef8) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000180)={0x2, 0x1, 0x6}) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (rerun: 64) 19.146124341s ago: executing program 2 (id=2596): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r1, 0x0) r2 = getpid() kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000240)='status\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) syz_open_dev$sg(&(0x7f0000000100), 0x182, 0xc801) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x405, 0x0) preadv(r4, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/35, 0x23}], 0x1, 0x5, 0x3) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet(0x2, 0x4, 0xe052) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3}}, 0x10) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mkdirat(r9, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) 19.141923952s ago: executing program 2 (id=2598): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f0000002600)="b56511e72c6cba78", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0xfffffe00) 18.968873131s ago: executing program 2 (id=2600): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)={0x8c, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x200043, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @void}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0xfffffffd) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x33) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0x0, 0x0, 0x4}}) 18.9176093s ago: executing program 2 (id=2602): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x3, 0x6, 0x4, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x2, 0x2, [], [0x0, 0x0, 0x400], [0x0, 0x0, 0x6, 0x3], [0x0, 0x0, 0x8000]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, r3], 0x2, r1, r6, 0xb, 0x6, 0xe, 0x0, {0x7f, 0xfff7, 0x8, 0xb, 0x400, 0x5b, 0x800, 0x401, 0x1, 0x9, 0xd35, 0x3ff, 0x7f, 0x79b, "8c5b4bac6e415bd4d49f794bf11e323952e271f440588f03d8e28bf9c0dc95a7"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140001000000000000000000021fc800", @ANYRES32=r7, @ANYBLOB="080002007f00000014000600060000000180000004000000080000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000080)={r8}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3fc}], 0x1}, 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000210800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 5.375310304s ago: executing program 0 (id=2761): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f574ce4ac91827528289acb0089c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee0000000000000000000ce572ae0de0745310890497fd77693dff25", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001180)="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", 0x126}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/166, 0xa6}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}], 0x3, 0x40090) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000240001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r3, &(0x7f00000002c0)="92", 0x1, 0x10008095, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}}, 0x0) (async) ioperm(0x0, 0x80, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x24e}}], 0x20}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000d650ed3d22abca99a031", @ANYRES8=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900ad0000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000081000000dbaaf0ff50000000bf8600000000000007080000c8070000bfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.292182922s ago: executing program 0 (id=2762): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x73, @string={0x73, 0x3, "cc908054daa0d5ec80911ddb256b961285a574ced327390688b52d4ed4bbefeb916185e34b4100fb6ee3cf7bd60de9c46114190b12f21c55d4389815de9adae94588e4fd9a61258ae6a94a57ae6f01400d6fa1d1a4bf78dbdcdcbdc0f1444a1c2e6a0f83cdd9d638ef813ca6c365256079"}}, &(0x7f0000000100)={0x0, 0x22, 0x15, {[@main=@item_012={0x1, 0x0, 0xa, '\n'}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x4, "ee"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x9, "1bf0a224"}, @local=@item_4={0x3, 0x2, 0x4, "e3a30645"}, @global=@item_012={0x1, 0x1, 0x8, "a5"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0xc, '<'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x956}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0xd, 0x5a, "7808a943c1a46bb4d8615e9ae7ca04e6dcc982b909ea182a6d3648c0c0877c95c876a4aee1f7ad32b433931049e3d96c72a425deb9288728496178d380139b3de43fa885cbb67d9d36cb1d05e200fa83a1b0e554168427c99dea"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0xa1, "5269a400f3b2c86cbda90ed5cb207647b64496d7100ca2ab8fcd12540e133d3e3cc1267fd695c3c27d48c550b3406de5afef763b86769e4b2f58f0527b884795d09bbf4d7879505799e9108dd29a47ee936de206d921dd2aa0d891bc85833b7514b29826eb044a209d430961b6473227c941a00a9e35f4326879f180f4abc8eec101b673f66c2cc28ea7d967411585bc1f28fd4f502ab49c4069e585fd966ca1d6"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x2}}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 3.847001461s ago: executing program 39 (id=2602): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x3, 0x6, 0x4, 0x1}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x2, 0x2, [], [0x0, 0x0, 0x400], [0x0, 0x0, 0x6, 0x3], [0x0, 0x0, 0x8000]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, r3], 0x2, r1, r6, 0xb, 0x6, 0xe, 0x0, {0x7f, 0xfff7, 0x8, 0xb, 0x400, 0x5b, 0x800, 0x401, 0x1, 0x9, 0xd35, 0x3ff, 0x7f, 0x79b, "8c5b4bac6e415bd4d49f794bf11e323952e271f440588f03d8e28bf9c0dc95a7"}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000140001000000000000000000021fc800", @ANYRES32=r7, @ANYBLOB="080002007f00000014000600060000000180000004000000080000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000080)={r8}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000bc0), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06182f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec9668", 0x3fc}], 0x1}, 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000210800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 2.270987312s ago: executing program 0 (id=2787): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x8fde, 0x80, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$packet(0x11, 0x3, 0x300) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 2.270725142s ago: executing program 0 (id=2788): request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x200000, 0x1a0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000380)={0x2, 0x0, 0x7, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000100)={@empty, 0x2b, r3}) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, &(0x7f0000000080)) write$cgroup_int(r0, &(0x7f0000000140)=0x1eff, 0x12) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x800) 1.838778891s ago: executing program 0 (id=2793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5", 0x17}], 0x2) 1.427799752s ago: executing program 0 (id=2794): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x20, 0xd, 0x2, {0x2, 0x22}}, &(0x7f0000000180)={0x0, 0x3, 0x73, @string={0x73, 0x3, "cc908054daa0d5ec80911ddb256b961285a574ced327390688b52d4ed4bbefeb916185e34b4100fb6ee3cf7bd60de9c46114190b12f21c55d4389815de9adae94588e4fd9a61258ae6a94a57ae6f01400d6fa1d1a4bf78dbdcdcbdc0f1444a1c2e6a0f83cdd9d638ef813ca6c365256079"}}, &(0x7f0000000100)={0x0, 0x22, 0x15, {[@main=@item_012={0x1, 0x0, 0xa, '\n'}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x4, "ee"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x9, "1bf0a224"}, @local=@item_4={0x3, 0x2, 0x4, "e3a30645"}, @global=@item_012={0x1, 0x1, 0x8, "a5"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0xc, '<'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x956}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0xd, 0x5a, "7808a943c1a46bb4d8615e9ae7ca04e6dcc982b909ea182a6d3648c0c0877c95c876a4aee1f7ad32b433931049e3d96c72a425deb9288728496178d380139b3de43fa885cbb67d9d36cb1d05e200fa83a1b0e554168427c99dea"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0xa1, "5269a400f3b2c86cbda90ed5cb207647b64496d7100ca2ab8fcd12540e133d3e3cc1267fd695c3c27d48c550b3406de5afef763b86769e4b2f58f0527b884795d09bbf4d7879505799e9108dd29a47ee936de206d921dd2aa0d891bc85833b7514b29826eb044a209d430961b6473227c941a00a9e35f4326879f180f4abc8eec101b673f66c2cc28ea7d967411585bc1f28fd4f502ab49c4069e585fd966ca1d6"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x2}}) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 1.105992585s ago: executing program 5 (id=2805): r0 = socket$netlink(0x10, 0x3, 0x4) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="58894302", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf250e000000240003800800020006000000080001000900000008000300060000000800020009000000040006801c000680080006000100000004000500080001000c00000004000200"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x44890) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00000002c0), 0x1, 0x20002) 1.035407924s ago: executing program 3 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000561000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x6c}, @IFLA_GRE_IKEY={0x8, 0x4, 0xf50}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast1}]}}}]}, 0x48}}, 0x4008080) 1.035083435s ago: executing program 3 (id=2808): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd28, 0x27dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x4008080) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8040) write$nci(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="644601f6"], 0x4) (async) write$nci(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="644601f6"], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 373.492217ms ago: executing program 5 (id=2809): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd30, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r7, 0x1, 0xe, &(0x7f0000000600)=""/22, &(0x7f0000000640)=0x16) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x38, 0x140e, 0x10, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000052) 313.654284ms ago: executing program 5 (id=2810): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x800, 0x0, 0x3, 0x3}, 0x20) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000004000000180400801022d84364f623abdd2852f2764100020054797a5f74f2fffffff733b2b2c29e4e0c49060009000000"], 0x34}}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x4, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1, 0xfffffffe}}, 0x24) 233.096417ms ago: executing program 9 (id=2811): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/168, 0xa8) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={r2, 0xfffffffd}, 0x8) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) (async) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) (async) eventfd2(0x6, 0x80000) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x2, r7}) (async) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r5, 0x8, r8) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x62b, 0xffffffffffffffff, &(0x7f00000001c0)="7b0d5f4d87d3c69b44b86ecd6bf3438cd60acc7cf60a90ac8fe0b905", 0xfffffffffffffff0, 0x101, 0x0, 0x2}, &(0x7f0000000180)) 121.556811ms ago: executing program 3 (id=2812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c095}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f00000003c0)={0xdb, 0x0, 0x2}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0x1, 0x800, 0x6, 0xb4c, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f00000000c0)={0x1, 0x1, 0x20, 0x9, 0x0, 0x8, 0x80, 0x6, 0x10, 0x5, 0x80, 0x2, &(0x7f0000000040)=[0x2, 0x65, 0xfffffff9, 0x8001], 0x4, &(0x7f0000000080)="0a29e06e0cd5dfac50ee423101", 0xd}) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0x7) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) 121.243388ms ago: executing program 5 (id=2813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000001440)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x3100}, [@RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x24040014) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x9c, 0x0, &(0x7f00000004c0)=[@decrefs={0x40046307, 0x2}, @enter_looper, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x3}, @exit_looper, @acquire_done={0x40106309, 0x1}, @acquire_done={0x40106309, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@weak_handle={0x77682a85, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x1001, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000280)="5bd18a5875134dbd726f88d146a21ad5908b4f17120f991b57df2a6713d4b9d0b8a1600900000000000000f252933bb0905b15515f9cc26fe04818077bced251e2649142b091e2d1514972fcf12cf169"}) 120.989641ms ago: executing program 9 (id=2814): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f0000002600)="b56511e72c6cba78", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x1f00000000000000) 118.154127ms ago: executing program 5 (id=2815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x65, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC, @ANYRESOCT=0x0]) 117.943405ms ago: executing program 5 (id=2816): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000000100), &(0x7f00000003c0)) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000340)={0x8000000000000001, 0x0, 0x3, 0x2, 0x2, [0x3, 0x9, 0x2, 0x8]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b801475f32750f92f52ff8eaee98a4d1566eec", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x12) unlink(0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xee, 0xc0, 0x7c, [{{0x9, 0x4, 0x0, 0x43, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x73f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {r2}}, './file1\x00'}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00f6ff180001002cbd5cf6ffffff00fe04ff1600000093"], 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000000000010000040"]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x63}, 0x2c) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x20008010) 66.611958ms ago: executing program 9 (id=2817): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x0, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}}, 0x0) 66.229737ms ago: executing program 9 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x3, 0x6, 0x805, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008890}, 0xc040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 61.852413ms ago: executing program 3 (id=2819): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)={0x3b, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @pad1, @jumbo={0xc2, 0x4, 0xd}, @jumbo={0xc2, 0x4, 0xf}, @hao={0xc9, 0x10, @private0}]}, 0x30) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x3c}}, 0x4000) 2.179362ms ago: executing program 9 (id=2820): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x800000000000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x80000000, 0x6, 0x1) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) 1.918616ms ago: executing program 3 (id=2821): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0x5, 0x6, 0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8040040) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000040)) (async) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x66000300) 250.714µs ago: executing program 3 (id=2822): syz_usb_connect(0x4, 0xd5f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x76, 0xb9, 0xdc, 0xff, 0x7d1, 0x3c11, 0x1352, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4d, 0x4, 0x40, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x5, 0x2, 0xc, 0x1f, 0x74, 0x30, 0x1, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x0, 0x81, 0x2, [@generic={0x26, 0x5, "3dcbbe639aac7571749892f0e7c6a39ec11599679792173507340e94e5f112219ebd5000"}]}}, {{0x9, 0x5, 0x1, 0x1c, 0x8, 0x52, 0x6, 0xf7, [@generic={0xb9, 0xb, "97f13280b7517926c87b0233163f318ef3b2495d9d751f1210cb13fd593f2b56fb404bcb9bc61048d4bda3ce50549023c59c5bb6902fdaac4205920160cbabf48a86d09d23f13456b257377dc816c2353680809769bd988ce226d7fa30198110c599166bb1a1a3daaf64b554414031c2bc6883821325fec3227aadca4f2aa572e11b659f4ae20f44784cc2972231d4e20df51ad2602179528e957e56ec71385e3b9e923d3ce5b2b897293540e0705d2f37c7af2f383e29"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x5, 0x6e, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5d, 0x2}]}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x6, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x800}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x5, 0xc8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0x7, 0x1a, 0x40, 0x2, 0x1, 0x9}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x81, 0xd, 0xfc}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x3, 0xbd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}, @generic={0x7b, 0x22, "1f1457f6554e9b1652b282d5eaa0494bfbbadf790fd07173dcae6f9ba1294c91be9098a8fa3fac2f9cd88c2c39495bbea5718064607427331587d377b0ce6d177930e4a84706b81493d60ce6280fcd22a63cd4b12506393c86198bd0d54474265c376ff33a9e1f91c1b84acadc32ac4c31c4b2d7c72dbafcfd"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3f7, 0x4, 0x57, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3e}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x8, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x81, 0xc8, 0x3}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x4, 0x8, 0xd}}]}}, {{0x9, 0x4, 0x56, 0x9, 0x10, 0xc3, 0x9f, 0x8, 0x4, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "7868ef"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0xe47, 0xf, 0x9}, [@obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x0, 0x0, [0x3357, 0x8, 0x1, 0x4, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x7}]}, @uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x4, 0x10, 'Y'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x1, 0x6b, 0x7, "b940", 'y?'}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x2}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x5}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x8, "268b639a112ec7e9"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7f, 0x1002}]}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0x8b, 0x8, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x8001}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x3, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2a, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xf9, 0x1, 0x7, [@generic={0x72, 0x2, "d6b3f1b0bd771d98d13e978071c757499d067234cefa67df7428c4968e2f7e75caa3225d6b984ef75561ffcf01286b419edea818be8572cd2634c718008ff2057652460325a856c79c5f75aee1926861f3a6596c580efdb05a35f6bcd452e6d04460f7d3db963ea9a60a5a3109683e7f"}, @generic={0xfc, 0x1, "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"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x4, 0x6, 0x9, [@generic={0xc9, 0x5, "3866f25963ba592b29ee69c094b74273f43e59afc4d484c22dc726ef1cb1541c080dee0900f200c88763e2cc2fcbfe30f1ef324dbe5e4609749329bae0b760f36aac667bf3a3ac7e27fdb6378078eae9e15f4806478539aa7b2f03c3bb0008f2efdaac443362356ba0b05b4567ac53140777681f89de75e14a862212cf442fb7daa638cb5c87493070af118683472a82c556ed241da6b2c2d245478ddeeceaf7a1568255af2a322d8f026bd06016d5b6d75e20c17d7050a5934225da9f8c13ba23c89fb23681ed"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x7, 0x3d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5d, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x40, 0x6, 0x1}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xf, 0xc, 0xfc, [@generic={0x102, 0x4, "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"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3, 0xde, 0x2, [@generic={0x52, 0x10, "bcfd39112163c92b288ab7f2ea629d76e99e112dc44100c0c92b4b05f65abcc235225d658c381355e999a6d07f74f70be47b8a4e518b6ada02f9ec6c620b21c34f08947791be947087de77ea7db1ea79"}, @generic={0xcd, 0x21, "3be77f86a3fffc5ff5d6829a915ee1fd091d243181be5cd4ae52df7f0050f2c5d4fc03023c2405b21ef943ef078ab2421f3c9fd3dfc548ba891adfc054e2238a1fde81dd1587dd693350e61696454dd54355d34f00d60f2cd8b0717be88ce702141988cf55687f871799568dddaa4c369b953669f7683fe0588db885de8002ee8369b8ab15d19c39dabda32b3e94dffe1ad654ea6525b11ac3b743e1ac162b76079af55a03b969e4a2cab1f47ef0ac0b06bc52e42748653548ab2a9d0f601a6cdc557a9c068ddc3655e923"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xc, 0xd, 0x4, [@generic={0xa9, 0x33, "70d7eaad4856552880ad8a3abd692375edc9d2cbfd1695dde4827126c436ab60a9e6bd8354d87bd7b372fa3ac9cc696a16dc49cd114ef0a0e3c72f3f3084b2cd1fc2b068d5f9ec7a4246351ebf4daaf4d0caaa7b53bb367b7e3bb2b56f74ca6d611d6ee434d22b8a6a6e3f58b2af7c2a1cb7741bf5492653df751abedc47de6aea67a0b560dd2843482e3b4508487b0db4affc93e2ceb4b875f02a305985548add68e146a7db30"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7d, 0x6, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x80, 0xf7, 0x2, [@generic={0x38, 0x7, "088544d0006dfecfe1eb330742f1c0947fd5b038a1dfdae44ceedf63c24c4bbf3ff43aae72cc3a7e334fc1f3bf2d87bf4bb83b4a0faa"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xef}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x2, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x8, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xd4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x7ff}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0xd, 0xfd, 0x40}}, {{0x9, 0x5, 0x3, 0x4761196fb5f8c6b0, 0x3d7, 0x4, 0x7, 0x4a, [@generic={0xc3, 0x30, "b9a2966c8833c479b3a30a172aa1cade560776f4d237394ff11909d59d3e172f8a57f6dc2aff4d4701f946c1a2697b694f2882142917f772b3824d8ed816663c761cfe64a8936b7dc8b1a9a151e573d49c323fb5c175c9aa78200fefdd0c556a1618c64cc578b06c121137c87d6930b788b8a87802eef0685d84a10c755a46226ac00d90958e6f3f914743cd27ce5016f306bce033f06423395bb4e29a5578ec05e711474ce6c60ead2a23ec86ddba261c5feb96a98a5928436c13863824390d18"}]}}]}}, {{0x9, 0x4, 0x22, 0x8, 0xd, 0x40, 0x39, 0x92, 0x5, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x9, 0x7f, "4ebf4f", "cc"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x4, 0x2}]}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0xbf, 0x6, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x19cea4c2fa652e94, 0x1, 0x6}, @generic={0x88, 0x21, "de4a8448177c1ec7bb72017aef05916e8751391387e830537aa3b957a956b91feded477530e310d84255112c821166ee3ac4fa927637a84801fa22e54e472aab979bfdfd198f46f75e26a8e02c7c0347f89db2b061bca3dbb7f0cd691a73aa2a0bc6ccdf9d1a79ab6687d4a135819053c3b34236b4eac8dd2917391d95cddbda860a7ca740b4"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x36, 0x2, 0x3}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x7, 0x8, 0xf7}}, {{0x9, 0x5, 0x9, 0xd, 0x40, 0xa, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3, 0xc0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x8, 0x5}]}}, {{0x9, 0x5, 0x5, 0xd, 0x3ff, 0x8, 0xf9, 0x7, [@generic={0xb5, 0x10, "898db8008f24497ba5855c22b5aa23143ff06a900734a5908fa88fb459375c66cc224cb76d4876d1b4cf0984290ce02d0bd7cd07238f87ace5a2274b832d1352c61916b41e6247a6d521e4e21bec4087f947e66aff40b2fda3925c854235d99faa1b3189ff7fd45a010e873eee2b2bf8e37513c81c76e3f22f915c88b0fd3e3438c4acad46843375f1b27eed0a35240ad4f01e812b9a9db8a497e4a9210a3b8bf0474f7f9571d53dcd31bd66048da16343d092"}, @generic={0xba, 0x3, "5c49b23bf27837a2264a9059b50dc1366c386e060cd5b15f0cbf16dc32a780d92ac8f7cb2d991bc0bc0a3e53d77bb9baabae981c49bbc702904f217f119db00f25d9b57c6c0c0ab2c763e244ffba7a7f29daea2cd695353d925368b99423e7b08a5fb07c96d72a891b6d3f0e785de3ef59dcc0ee9403169f4389750dd2f0ed72d6b2577d3d24489dbd5a4a243fbe944ade4beecdbf96937ca9e363b038b4d31ab45d28af592865e050524b10a3052b340165adc4c1ca74a2"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x9, 0xfe, 0xd, [@generic={0x7, 0x4, "be7e228494"}, @generic={0x11, 0x3, "156294709791e4f5eeae455cc6c6d4"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x30, 0x9, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x3cf, 0x1, 0xff, 0x2}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0xff, 0x3, 0xc5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x42e8}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x4, 0xc, 0x6, [@generic={0x60, 0x11, "b260c1471c7597c8114da105b535b648ead755cf22cba314b1dc6e5d2a60f40120064343783998229841850b75cfc5b5fa6705bca212cb33955ac4bc22b5e1198de01bd0173020dc76ff12566d356b151eb199bbf8d8a839b407c8e71e3f"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xf, 0x2, 0xbc, [@generic={0x39, 0xb, "4048425de90ce5a58451662a9c0e5f42697578ae26fc2e7f55257a65bf7795af43158e76976004b3a867e59bf2cdfb00ec8d141b355ada"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x1, 0xe, 0x35, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x1}]}}]}}, {{0x9, 0x4, 0x1c, 0x9, 0xa, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0x5, 0xfa, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x7, 0xff, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x80, 0x1, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x4, 0x5, 0xc, [@generic={0x26, 0x23, "3cb46941c03c6b134866c9bf0da5f0275e6426f383c2f4547f54914424fbe22b86bfb2a7"}]}}, {{0x9, 0x5, 0x1, 0x10, 0xab991d2c9f74c193, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0xd, 0x4}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x9, 0x80, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xe, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x2, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x0, 0xf1}, @uac_iso={0x7, 0x25, 0x1, 0x7c24eab7225a5618, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x0, 0x78, 0xfc}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x310, 0x6, 0x5e, 0x6, 0x8, 0x2c}, 0x64, &(0x7f0000000e40)={0x5, 0xf, 0x64, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x413, 0xf000, 0x2, [0x0]}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x7, 0xf000, 0x3, [0x30, 0xffc0f0, 0x3f00, 0x0, 0x0, 0xff410f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "fde7703b78d1a89ce61b27765b7774d9"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "3983b0781e86c31eba44f6378be5cfb0"}]}, 0x7, [{0xf2, &(0x7f0000000ec0)=@string={0xf2, 0x3, "bc6b27a397d5a3c139e3cf8252eb2320896c3af40d237e230693eb41b1965494e3601be43b9563065c67bf4476fb56430f7b9f2e9abd91c33c86f42539d9c8408119db84239ffb68999201f335063da28d8f82af1f5a7056a55c4f463742814164049d56cbbe7b923f6a1f099355daa1601018806eb2f795d345371ea2a724f1c616b1de79b3aca4462df0f4ea0d15fc011ecda0696ea819041cccddf84b5a1603099499f1ba556b485490b7f67567ed432b6d02daf92530b26ac3c482ceab793a29caf06b019f4badb3e3aaa5d55ed68c28f2328f5372416fc30980d1df4dc6169f69a70628f11f2fd637b03660e0fc"}}, {0x3, &(0x7f0000000fc0)=@string={0x3, 0x3, "d8"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x42b}}, {0x2c, &(0x7f0000001080)=@string={0x2c, 0x3, "4c2d09457c7147795dbf596a2f9d54c3384da06329d57a8858e1f4adef41f1d66f087a3c9bf95e51ce76"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x1007}}]}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x1, @default, @netrom={'nr', 0x0}, 0x93, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 0s ago: executing program 9 (id=2823): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xffffffffffffffff}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.2.1960'. [ 160.986059][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 160.989366][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 160.992274][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 160.996333][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 160.996418][T12680] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 160.999333][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 160.999358][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 160.999376][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 161.011102][ T3252] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 161.011526][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052a15c00: abort rx timeout. Force session deactivation [ 161.015087][ T3252] hid-generic 00A0:0008:0003.0015: hidraw0: HID v0.05 Device [syz1] on syz0 [ 161.330048][T12694] comedi comedi2: dt2814: a I/O base address must be specified [ 161.338557][T12694] batman_adv: batadv0: Adding interface: ipvlan2 [ 161.341503][T12694] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.352181][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.356236][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.359991][T12694] batman_adv: batadv0: Interface activated: ipvlan2 [ 161.363906][T12694] Bluetooth: MGMT ver 1.23 [ 161.366027][T12694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.410797][ T6644] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.415976][ T5332] Bluetooth: hci4: Malformed Event: 0x02 [ 161.422439][T12696] tipc: Enabled bearer , priority 0 [ 161.428872][T12695] tipc: Resetting bearer [ 161.454062][T12695] tipc: Disabling bearer [ 161.700956][T12715] syz.7.1975: attempt to access beyond end of device [ 161.700956][T12715] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 161.705775][T12715] syz.7.1975: attempt to access beyond end of device [ 161.705775][T12715] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0 [ 161.710175][T12715] Mount JFS Failure: -5 [ 161.711703][T12715] jfs_mount failed w/return code = -5 [ 161.744984][ T5332] Bluetooth: hci0: command tx timeout [ 161.874605][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.878609][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.881620][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.884110][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.886566][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.950696][T12727] chnl_net:caif_netlink_parms(): no params data found [ 161.985194][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.987562][T12727] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.989823][T12727] bridge_slave_0: entered allmulticast mode [ 161.992079][T12727] bridge_slave_0: entered promiscuous mode [ 161.994693][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.997533][T12727] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.999793][T12727] bridge_slave_1: entered allmulticast mode [ 162.002038][T12727] bridge_slave_1: entered promiscuous mode [ 162.019726][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.023656][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.040157][T12727] team0: Port device team_slave_0 added [ 162.043196][T12727] team0: Port device team_slave_1 added [ 162.063373][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.066760][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.075268][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.079382][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.081949][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.090768][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.094983][ T54] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 162.117114][T12727] hsr_slave_0: entered promiscuous mode [ 162.119360][T12727] hsr_slave_1: entered promiscuous mode [ 162.121450][T12727] debugfs: 'hsr0' already exists in 'hsr' [ 162.123611][T12727] Cannot create hsr debugfs directory [ 162.264651][T10327] gretap0: left allmulticast mode [ 162.266124][ T54] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.266846][T10327] gretap0: left promiscuous mode [ 162.270799][ T54] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.272521][T10327] bridge0: port 1(gretap0) entered disabled state [ 162.276694][ T54] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.286168][ T54] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.290146][ T54] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.293809][ T54] usb 12-1: Manufacturer: syz [ 162.297202][ T54] usb 12-1: config 0 descriptor?? [ 162.301260][ T54] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 163.339862][T10327] bond0 (unregistering): Released all slaves [ 163.345756][T10327] bond1 (unregistering): Released all slaves [ 163.352290][T10327] bond2 (unregistering): Released all slaves [ 163.359636][T10327] bond3 (unregistering): Released all slaves [ 163.367502][T10327] bond4 (unregistering): Released all slaves [ 163.380060][T12742] dvmrp1: entered allmulticast mode [ 163.425094][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 163.427427][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.462162][T10327] tipc: Disabling bearer [ 163.464324][T10327] tipc: Disabling bearer [ 163.466668][T10327] tipc: Left network mode [ 163.508079][T10327] IPVS: stopping backup sync thread 12037 ... [ 163.566828][T12756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12756 comm=syz.8.1985 [ 163.779766][T12727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.783327][T12727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.786891][T12727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.790269][T12727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 163.825056][ T9] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 163.825361][ T5972] Bluetooth: hci0: command tx timeout [ 163.826975][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.831144][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.847862][T10327] hsr_slave_0: left promiscuous mode [ 163.851346][T10327] hsr_slave_1: left promiscuous mode [ 163.878063][ T6644] Bluetooth: hci4: Frame reassembly failed (-84) [ 163.881481][ T5977] Bluetooth: hci4: Malformed Event: 0x02 [ 163.905017][ T5977] Bluetooth: hci1: command tx timeout [ 163.960229][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.963199][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.970167][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.973193][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.984937][ T9] usb 13-1: Using ep0 maxpacket: 32 [ 163.988991][ T9] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.993930][ T9] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 163.997511][ T9] usb 13-1: New USB device strings: Mfr=239, Product=1, SerialNumber=131 [ 163.999225][T12727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.001001][ T9] usb 13-1: Product: syz [ 164.006396][ T9] usb 13-1: Manufacturer: syz [ 164.007921][ T9] usb 13-1: SerialNumber: syz [ 164.010057][ T9] usb 13-1: config 0 descriptor?? [ 164.073531][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.090350][T12727] veth0_vlan: entered promiscuous mode [ 164.095928][T12727] veth1_vlan: entered promiscuous mode [ 164.110647][T12727] veth0_macvtap: entered promiscuous mode [ 164.115442][T12727] veth1_macvtap: entered promiscuous mode [ 164.123794][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.130830][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.137756][ T6644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.141520][ T6644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.146866][ T6644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.151910][ T6644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.174192][T10326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.177964][T10326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.190442][ T6644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.193321][ T6644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.214190][ T7931] usb 13-1: USB disconnect, device number 2 [ 164.246776][T12779] tipc: Started in network mode [ 164.248473][T12779] tipc: Node identity 06c839ced03d, cluster identity 4711 [ 164.251067][T12779] tipc: Enabled bearer , priority 0 [ 164.255219][T12778] tipc: Resetting bearer [ 164.288859][T12778] tipc: Disabling bearer [ 164.294182][T10327] IPVS: stop unused estimator thread 0... [ 164.403777][T10327] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.460224][T10327] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.568006][T10327] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.610384][T10327] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.682545][T10327] bridge_slave_1: left allmulticast mode [ 164.684698][T10327] bridge_slave_1: left promiscuous mode [ 164.687343][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.690789][T10327] bridge_slave_0: left allmulticast mode [ 164.692843][T10327] bridge_slave_0: left promiscuous mode [ 164.694760][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.714416][T10327] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 164.741425][T12789] netlink: 'syz.8.1993': attribute type 1 has an invalid length. [ 164.810748][T10327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.814372][T10327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.818061][T10327] bond0 (unregistering): Released all slaves [ 164.822936][T10327] bond1 (unregistering): Released all slaves [ 164.829304][T10327] bond2 (unregistering): Released all slaves [ 164.838468][T12790] vlan2: entered promiscuous mode [ 164.840724][T12790] veth1_virt_wifi: entered promiscuous mode [ 164.843735][T12790] vlan2: entered allmulticast mode [ 164.846463][T12790] veth1_virt_wifi: entered allmulticast mode [ 164.860031][ T7931] usb 12-1: USB disconnect, device number 10 [ 164.989050][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1996'. [ 165.050709][T12806] tipc: Enabled bearer , priority 0 [ 165.055246][T12805] tipc: Resetting bearer [ 165.110685][T12805] tipc: Disabling bearer [ 165.120299][T10327] hsr_slave_0: left promiscuous mode [ 165.123032][T10327] hsr_slave_1: left promiscuous mode [ 165.125930][T10327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.129010][T10327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.132572][T10327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.135999][T10327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.142433][T10327] veth1_vlan: left promiscuous mode [ 165.145466][T10327] veth0_vlan: left promiscuous mode [ 165.330270][T12821] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2003'. [ 165.334060][T12821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12821 comm=syz.8.2003 [ 165.436819][ T7931] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 165.453305][T12825] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 165.453305][T12825] program syz.8.2005 not setting count and/or reply_len properly [ 165.588426][T12832] overlayfs: unescaped trailing colons in lowerdir mount option. [ 165.606344][ T7931] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 165.611223][ T7931] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.617742][ T7931] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 165.625800][T12837] tipc: Enabled bearer , priority 0 [ 165.626723][ T7931] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 165.632591][ T7931] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 165.636083][ T7931] usb 12-1: Manufacturer: syz [ 165.636145][T12836] tipc: Resetting bearer [ 165.638983][ T7931] usb 12-1: config 0 descriptor?? [ 165.643995][ T7931] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 165.690114][T12836] tipc: Disabling bearer [ 165.799324][T12848] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2013'. [ 165.805252][T12848] program syz.8.2013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.905071][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.905407][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 165.905790][ T5332] Bluetooth: hci0: command tx timeout [ 165.985839][ T5972] Bluetooth: hci1: command tx timeout [ 166.005969][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 166.008743][ T1115] ata1: failed to read log page 10h (errno=-5) [ 166.011473][ T1115] ata1.00: exception Emask 0x1 SAct 0x8 SErr 0x0 action 0x0 [ 166.013897][ T1115] ata1.00: irq_stat 0x40000000 [ 166.015644][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED [ 166.017566][ T1115] ata1.00: cmd 61/60:18:76:0b:10/00:00:00:00:00/40 tag 3 ncq dma 49152 out [ 166.017566][ T1115] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 166.023082][ T1115] ata1.00: status: { DRDY } [ 166.025403][ T1115] ata1.00: configured for UDMA/100 [ 166.027214][ T1115] ata1: EH complete [ 166.071538][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 166.071553][ T40] audit: type=1400 audit(6000000127.916:762): avc: denied { append } for pid=12872 comm="syz.5.2022" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.073424][T12871] tipc: Enabled bearer , priority 0 [ 166.092497][T12868] tipc: Resetting bearer [ 166.131570][T12868] tipc: Disabling bearer [ 166.137822][ T40] audit: type=1400 audit(6000000127.986:763): avc: denied { setattr } for pid=12872 comm="syz.5.2022" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.260213][T12884] kvm: emulating exchange as write [ 166.271001][T10327] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.528420][T12900] tipc: Enabled bearer , priority 0 [ 166.532070][T12899] tipc: Resetting bearer [ 166.558810][T12899] tipc: Disabling bearer [ 166.690252][T12907] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 166.723005][T12907] loop6: detected capacity change from 0 to 63 [ 166.725606][ T40] audit: type=1400 audit(6000000128.576:764): avc: denied { map } for pid=12906 comm="syz.2.2034" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.729607][T12906] buffer_io_error: 6 callbacks suppressed [ 166.729622][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.733544][ T40] audit: type=1400 audit(6000000128.576:765): avc: denied { execute } for pid=12906 comm="syz.2.2034" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 166.736788][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.752725][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.757783][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.761150][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.761933][T12915] cgroup: No subsys list or none specified [ 166.764477][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.770462][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.773115][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.776058][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.778681][T12906] Buffer I/O error on dev loop6, logical block 0, async page read [ 166.942204][T12923] tipc: Enabled bearer , priority 0 [ 166.948045][T12922] tipc: Resetting bearer [ 167.002756][T12922] tipc: Disabling bearer [ 167.354974][ T54] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 167.371234][ T40] audit: type=1400 audit(6000000129.277:766): avc: granted { setsecparam } for pid=12953 comm="syz.8.2052" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 167.397556][ T40] audit: type=1400 audit(6000000129.307:767): avc: denied { name_connect } for pid=12958 comm="syz.8.2053" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 167.466294][T12964] dlm: non-version read from control device 0 [ 167.471103][ T40] audit: type=1400 audit(6000000129.377:768): avc: denied { mounton } for pid=12963 comm="syz.8.2055" path="/58/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 167.515379][ T54] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 167.518727][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.521620][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.526831][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.530332][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.533691][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.537755][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.540617][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.543477][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.547298][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.550161][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.553290][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.558076][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.560938][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.563814][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.567443][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.570257][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.573136][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.577132][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.577959][T12968] kvm: kvm [12967]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 167.583991][T12968] kvm: kvm [12967]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 167.585751][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.590572][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.594398][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.598386][ T54] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 167.601243][ T54] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 167.604624][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 167.607639][T12968] kvm: kvm [12967]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 167.608328][ T54] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 167.614156][ T54] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 167.617114][ T54] usb 7-1: Product: syz [ 167.618536][ T54] usb 7-1: Manufacturer: syz [ 167.620036][ T54] usb 7-1: SerialNumber: syz [ 167.622456][ T54] usb 7-1: config 0 descriptor?? [ 167.626020][ T54] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 167.634338][T12968] kvm: kvm [12967]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 167.638794][T12968] kvm: kvm [12967]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 167.659632][T12968] kvm_intel: kvm [12967]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 167.995029][ T5977] Bluetooth: hci0: command tx timeout [ 168.028236][ T7931] usb 7-1: USB disconnect, device number 15 [ 168.030838][ T7931] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 168.074988][ T5977] Bluetooth: hci1: command tx timeout [ 168.215920][ T841] usb 12-1: USB disconnect, device number 11 [ 168.250049][T12982] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2060'. [ 168.261325][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2060'. [ 168.315075][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.316065][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 168.413193][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2064'. [ 168.526664][T13002] vivid-001: disconnect [ 168.535635][T12999] vivid-001: reconnect [ 168.557101][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2066'. [ 168.565053][ T7931] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 168.726402][ T7931] usb 13-1: unable to get BOS descriptor or descriptor too short [ 168.729210][ T7931] usb 13-1: not running at top speed; connect to a high speed hub [ 168.732404][ T7931] usb 13-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 168.735870][ T7931] usb 13-1: config 1 interface 0 has no altsetting 0 [ 168.739116][T10326] Bluetooth: hci4: Frame reassembly failed (-84) [ 168.741293][ T7931] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.744348][ T7931] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.748421][ T7931] usb 13-1: Manufacturer: 좢༟稑㺯肸Ǚ酿郹䐍⽛冹 [ 168.751248][ T7931] usb 13-1: SerialNumber: syz [ 168.753759][T12990] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 168.844980][ T7694] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 168.945777][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2074'. [ 168.980013][T13026] 9p filesystem being mounted at /18 supports timestamps until 2106-02-07 (0xffffffff) [ 168.986062][ T7931] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 168.990427][T13026] netlink: 'syz.2.2075': attribute type 8 has an invalid length. [ 168.993463][ T7931] usb 13-1: USB disconnect, device number 3 [ 168.996018][ T7931] usblp0: removed [ 169.006510][ T7694] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 169.010182][ T7694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.013567][ T7694] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 169.020339][ T7694] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 169.023324][ T7694] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 169.027553][ T7694] usb 10-1: Manufacturer: syz [ 169.030685][ T7694] usb 10-1: config 0 descriptor?? [ 169.034860][ T7694] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 169.096569][ T40] audit: type=1400 audit(6000000131.007:769): avc: denied { write } for pid=13027 comm="syz.2.2076" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 169.108544][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 169.249833][T13035] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 169.253522][T13035] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 170.145007][ T5977] Bluetooth: hci1: command tx timeout [ 170.225766][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2089'. [ 170.225964][T13074] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2088'. [ 170.232011][T13074] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2088'. [ 170.236881][T13075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 170.280409][T13086] fuse: Unknown parameter 'dont_measure' [ 170.340735][T13094] loop2: detected capacity change from 0 to 28 [ 170.343894][T13094] loop2: unable to read partition table [ 170.345799][T13094] loop2: partition table beyond EOD, truncated [ 170.347770][T13094] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 170.430854][T13098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3527901602 (451571405056 ns) > initial count (446678046208 ns). Using initial count to start timer. [ 170.453652][T13098] kvm: pic: non byte read [ 170.486468][T13098] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 170.488923][T13098] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 170.581533][T13105] netlink: 'syz.2.2100': attribute type 30 has an invalid length. [ 170.587678][ T6638] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.590640][ T6638] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.593793][ T6638] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.597495][ T6638] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.609609][ T40] audit: type=1400 audit(6000000132.517:770): avc: denied { connect } for pid=13108 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 170.616578][ T40] audit: type=1400 audit(6000000132.517:771): avc: denied { listen } for pid=13108 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 170.634016][T13114] kAFS: unparsable volume name [ 170.754941][ T7694] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 170.784986][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.785025][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 170.874276][T13124] input: syz1 as /devices/virtual/input/input21 [ 170.906532][ T7694] usb 13-1: config index 0 descriptor too short (expected 39, got 27) [ 170.909398][ T7694] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 170.913346][ T7694] usb 13-1: config 0 interface 0 has no altsetting 0 [ 170.917390][ T7694] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.921108][ T7694] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.924576][ T7694] usb 13-1: Product: syz [ 170.924851][ T6054] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 170.927072][ T7694] usb 13-1: Manufacturer: syz [ 170.934654][ T7694] usb 13-1: SerialNumber: syz [ 170.937245][ T7694] usb 13-1: config 0 descriptor?? [ 170.939542][ T7694] hub 13-1:0.0: bad descriptor, ignoring hub [ 170.941630][ T7694] hub 13-1:0.0: probe with driver hub failed with error -5 [ 170.945368][ T7694] usb 13-1: selecting invalid altsetting 0 [ 171.096000][ T6054] usb 7-1: config 0 has no interfaces? [ 171.098092][ T6054] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 171.101802][ T6054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.106891][ T6054] usb 7-1: config 0 descriptor?? [ 171.311199][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 171.311216][ T40] audit: type=1400 audit(6000000133.217:774): avc: denied { mounton } for pid=13113 comm="syz.2.2102" path="/proc/93/task" dev="proc" ino=52031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 171.365004][ T40] audit: type=1400 audit(6000000133.267:775): avc: denied { associate } for pid=13113 comm="syz.2.2102" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 171.596814][ T6053] usb 10-1: USB disconnect, device number 20 [ 171.669778][T13148] net_ratelimit: 174 callbacks suppressed [ 171.669791][T13148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.807460][T13155] fuse: Unknown parameter '000000000000000000000060x0000000000000004' [ 171.874952][ T40] audit: type=1400 audit(6000000133.777:776): avc: denied { set_context_mgr } for pid=13161 comm="syz.5.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.881621][T13162] binder: 13161:13162 unknown command 0 [ 171.884979][ T40] audit: type=1400 audit(6000000133.787:777): avc: denied { call } for pid=13161 comm="syz.5.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 171.885965][T13162] binder: 13161:13162 ioctl c0306201 200000004a40 returned -22 [ 172.174861][ T7694] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 172.326998][ T7694] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 172.331963][ T7694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.336642][ T7694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.340710][ T7694] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 172.347225][ T7694] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 172.351008][ T7694] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 172.354448][ T7694] usb 10-1: Manufacturer: syz [ 172.357885][ T7694] usb 10-1: config 0 descriptor?? [ 172.765200][ T7694] appleir 0003:05AC:8243.0016: item fetching failed at offset 0/1 [ 172.768161][ T7694] appleir 0003:05AC:8243.0016: parse failed [ 172.770189][ T7694] appleir 0003:05AC:8243.0016: probe with driver appleir failed with error -22 [ 172.965836][ T61] usb 10-1: USB disconnect, device number 21 [ 173.264913][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 173.265053][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 173.590395][ T40] audit: type=1400 audit(6000000135.497:778): avc: denied { name_bind } for pid=13179 comm="syz.5.2126" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 173.641597][ T7931] usb 7-1: USB disconnect, device number 16 [ 173.669022][ T40] audit: type=1400 audit(6000000135.577:779): avc: denied { read append } for pid=13182 comm="syz.5.2127" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.677244][ T40] audit: type=1400 audit(6000000135.577:780): avc: denied { open } for pid=13182 comm="syz.5.2127" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.686174][ T40] audit: type=1400 audit(6000000135.587:781): avc: denied { ioctl } for pid=13182 comm="syz.5.2127" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.720559][ T8034] Bluetooth: hci4: Frame reassembly failed (-84) [ 173.816535][ T40] audit: type=1400 audit(6000000135.727:782): avc: denied { map } for pid=13194 comm="syz.5.2131" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 174.087189][T13209] __nla_validate_parse: 5 callbacks suppressed [ 174.087201][T13209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2136'. [ 174.114922][ T7694] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 174.286469][ T7694] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 174.290132][ T7694] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.293632][ T7694] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.296931][ T7694] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 174.301962][ T7694] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 174.305441][ T7694] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 174.308245][ T7694] usb 12-1: Manufacturer: syz [ 174.310670][ T7694] usb 12-1: config 0 descriptor?? [ 174.395066][ T3252] usb 13-1: USB disconnect, device number 4 [ 174.716770][ T7694] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1 [ 174.719454][ T7694] appleir 0003:05AC:8243.0017: parse failed [ 174.721425][ T7694] appleir 0003:05AC:8243.0017: probe with driver appleir failed with error -22 [ 174.775955][ T40] audit: type=1400 audit(6000000136.687:783): avc: denied { write } for pid=13230 comm="syz.5.2145" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.917413][ T841] usb 12-1: USB disconnect, device number 12 [ 174.955355][T13233] delete_channel: no stack [ 175.146693][T13250] netlink: 'syz.5.2150': attribute type 2 has an invalid length. [ 175.149350][T13250] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2150'. [ 175.152381][T13250] nbd: must specify a device to reconfigure [ 175.207682][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2150'. [ 175.339297][T13259] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 175.342429][T13259] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 175.720240][ T8034] tipc: Subscription rejected, illegal request [ 175.744938][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 175.745011][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 175.969763][T13296] mkiss: ax0: crc mode is auto. [ 176.097216][T10327] Bluetooth: hci4: Frame reassembly failed (-84) [ 176.105061][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 176.190317][T13306] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2167'. [ 176.257426][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 176.260858][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.264398][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.267777][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 176.272534][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 176.275488][ T9] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 176.278499][ T9] usb 7-1: Manufacturer: syz [ 176.280869][ T9] usb 7-1: config 0 descriptor?? [ 176.455021][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 176.455038][ T40] audit: type=1400 audit(6000524426.360:785): avc: denied { mounton } for pid=13310 comm="syz.5.2169" path="/284/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 176.467129][ T40] audit: type=1400 audit(6000524426.360:786): avc: denied { name_bind } for pid=13310 comm="syz.5.2169" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 176.690237][ T841] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 176.690925][ T9] appleir 0003:05AC:8243.0018: item fetching failed at offset 0/1 [ 176.696021][ T9] appleir 0003:05AC:8243.0018: parse failed [ 176.697928][ T9] appleir 0003:05AC:8243.0018: probe with driver appleir failed with error -22 [ 176.823370][T13339] Bluetooth: MGMT ver 1.23 [ 176.827445][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2176'. [ 176.840846][ T841] usb 10-1: Using ep0 maxpacket: 32 [ 176.844015][ T841] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.847567][ T841] usb 10-1: config 0 has no interfaces? [ 176.849699][ T841] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 176.853321][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.856720][ T841] usb 10-1: config 0 descriptor?? [ 176.892564][ T9] usb 7-1: USB disconnect, device number 17 [ 177.438661][T13357] fuse: Invalid rootmode [ 177.441433][T13358] fuse: Invalid rootmode [ 177.760206][ T5977] Bluetooth: hci3: command tx timeout [ 178.027145][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 178.031438][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2186'. [ 178.161096][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 178.162734][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 178.213233][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2189'. [ 178.216412][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2189'. [ 178.310235][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 178.381821][ T6638] Bluetooth: hci4: Frame reassembly failed (-84) [ 178.604323][ T7694] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 178.757037][ T7694] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 178.760398][ T7694] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.763886][ T7694] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.767080][ T7694] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.772448][ T7694] usb 13-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 178.775493][ T7694] usb 13-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 178.778136][ T7694] usb 13-1: Manufacturer: syz [ 178.780215][ T7694] usb 13-1: config 0 descriptor?? [ 178.886673][ T5977] Bluetooth: hci0: command tx timeout [ 179.137359][T13418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 179.175267][T13420] __nla_validate_parse: 1 callbacks suppressed [ 179.175285][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2203'. [ 179.182994][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2203'. [ 179.189110][ T7694] appleir 0003:05AC:8243.0019: item fetching failed at offset 0/1 [ 179.192106][ T7694] appleir 0003:05AC:8243.0019: parse failed [ 179.194497][ T7694] appleir 0003:05AC:8243.0019: probe with driver appleir failed with error -22 [ 179.269969][ T7694] usb 10-1: USB disconnect, device number 22 [ 179.278015][T13424] cgroup: Invalid name [ 179.288496][T13424] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13424 comm=syz.7.2204 [ 179.293996][T13424] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 179.296639][T13424] SELinux: failed to load policy [ 179.391179][ T6054] usb 13-1: USB disconnect, device number 5 [ 179.453122][ T40] audit: type=1400 audit(6000524429.337:787): avc: denied { map } for pid=13431 comm="syz.5.2208" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.463599][ T40] audit: type=1400 audit(6000524429.337:788): avc: denied { execute } for pid=13431 comm="syz.5.2208" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.523950][T13436] fuse: Unknown parameter '' [ 179.566954][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2212'. [ 179.570795][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2212'. [ 179.617016][T13443] netlink: 182608 bytes leftover after parsing attributes in process `syz.5.2213'. [ 179.846763][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2222'. [ 179.850880][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2222'. [ 180.058441][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2231'. [ 180.062749][T13503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2231'. [ 180.184013][T13515] netlink: 'syz.5.2235': attribute type 7 has an invalid length. [ 180.186668][T13515] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2235'. [ 180.387647][ T6053] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 180.418105][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 180.418153][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 180.509107][T13544] netlink: ct family unspecified [ 180.511200][T13544] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.527390][T13546] qnx4: no qnx4 filesystem (no root dir). [ 180.542613][ T6053] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 180.547332][ T6053] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.551717][ T6053] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.555113][T13551] geneve2: entered promiscuous mode [ 180.555795][ T6053] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 180.557967][T13551] geneve2: entered allmulticast mode [ 180.567333][ T6053] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 180.572378][ T6053] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 180.575813][ T6053] usb 12-1: Manufacturer: syz [ 180.579054][ T6053] usb 12-1: config 0 descriptor?? [ 180.666558][ T40] audit: type=1400 audit(6000524430.538:789): avc: denied { read } for pid=13553 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.702353][ T40] audit: type=1400 audit(6000524430.578:790): avc: denied { map } for pid=13555 comm="syz.5.2247" path="/302/file0" dev="tmpfs" ino=1672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.708546][ T6638] Bluetooth: hci4: Frame reassembly failed (-84) [ 180.989740][ T6053] appleir 0003:05AC:8243.001A: item fetching failed at offset 0/1 [ 180.993425][ T6053] appleir 0003:05AC:8243.001A: parse failed [ 180.995875][ T6053] appleir 0003:05AC:8243.001A: probe with driver appleir failed with error -22 [ 181.158380][ T40] audit: type=1400 audit(6000524431.034:791): avc: denied { execute } for pid=13573 comm="syz.8.2254" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=55201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 181.169456][ T40] audit: type=1800 audit(6000524431.034:792): pid=13574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2254" name="secretmem" dev="secretmem" ino=55201 res=0 errno=0 [ 181.191999][ T9] usb 12-1: USB disconnect, device number 13 [ 181.608083][ T40] audit: type=1400 audit(6000524431.481:793): avc: denied { setattr } for pid=13578 comm="syz.8.2256" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 181.659528][ T40] audit: type=1326 audit(6000524431.531:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13578 comm="syz.8.2256" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6566f8ebe9 code=0x0 [ 181.781655][T13579] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(0) [ 181.783801][T13579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.786306][T13579] vhci_hcd vhci_hcd.0: Device attached [ 181.788490][T13595] vhci_hcd: cannot find the pending unlink 1023 [ 181.801503][T13599] netlink: del zone limit has 4 unknown bytes [ 181.802079][T13601] syz_tun: entered allmulticast mode [ 181.838998][T13598] syz_tun: left allmulticast mode [ 181.855919][T13603] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 181.855919][T13603] The task syz.7.2261 (13603) triggered the difference, watch for misbehavior. [ 182.019546][ T7694] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 182.160570][ T54] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 182.311754][ T54] usb 10-1: Using ep0 maxpacket: 32 [ 182.316077][ T54] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.320492][ T54] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 182.325366][ T54] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.329361][ T54] usb 10-1: config 1 interface 0 has no altsetting 0 [ 182.334050][ T54] usb 10-1: New USB device found, idVendor=056a, idProduct=0038, bcdDevice= 0.40 [ 182.337781][ T54] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.341154][ T54] usb 10-1: Product: syz [ 182.343092][ T54] usb 10-1: Manufacturer: у [ 182.345235][ T54] usb 10-1: SerialNumber: syz [ 182.754804][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 182.755022][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 182.761250][ T54] usbhid 10-1:1.0: can't add hid device: -71 [ 182.763374][ T54] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 182.766568][ T54] usb 10-1: USB disconnect, device number 23 [ 182.788112][T13595] vhci_hcd: connection reset by peer [ 182.792268][ T8034] vhci_hcd: stop threads [ 182.793783][ T8034] vhci_hcd: release socket [ 182.797592][ T8034] vhci_hcd: disconnect device [ 182.841705][T13628] netlink: 'syz.7.2269': attribute type 2 has an invalid length. [ 182.935801][ T40] audit: type=1400 audit(6000524432.792:795): avc: denied { write } for pid=13633 comm="syz.8.2272" path="socket:[58021]" dev="sockfs" ino=58021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 182.947028][ T40] audit: type=1400 audit(6000524432.802:796): avc: denied { read } for pid=13633 comm="syz.8.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.022773][T10327] Bluetooth: hci4: Frame reassembly failed (-84) [ 183.046848][ T841] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 183.209433][ T841] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.214022][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.219131][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.222624][ T841] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.227731][ T841] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.230802][ T841] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.233335][ T841] usb 7-1: Manufacturer: syz [ 183.236116][ T841] usb 7-1: config 0 descriptor?? [ 183.645883][ T841] appleir 0003:05AC:8243.001B: item fetching failed at offset 0/1 [ 183.648778][ T841] appleir 0003:05AC:8243.001B: parse failed [ 183.651095][ T841] appleir 0003:05AC:8243.001B: probe with driver appleir failed with error -22 [ 183.755947][ T40] audit: type=1400 audit(6000524433.606:797): avc: denied { ioctl } for pid=13647 comm="syz.5.2278" path="socket:[58500]" dev="sockfs" ino=58500 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 183.764417][ T40] audit: type=1400 audit(6000524433.616:798): avc: denied { create } for pid=13647 comm="syz.5.2278" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 183.848549][ T6053] usb 7-1: USB disconnect, device number 18 [ 184.013593][ T61] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 184.037635][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.040458][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.042921][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.046219][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.049093][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.051733][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.054583][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.057457][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.060393][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.063321][ T6054] hid-generic 000C:0007:000C.001C: unknown main item tag 0x0 [ 184.068415][ T6054] hid-generic 000C:0007:000C.001C: hidraw0: HID v14.24 Device [syz1] on syz0 [ 184.154569][ T61] usb 13-1: device descriptor read/64, error -71 [ 184.377505][T13685] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 184.378653][ T40] audit: type=1400 audit(6000524434.232:799): avc: denied { mounton } for pid=13684 comm="syz.2.2292" path="/bus" dev="ramfs" ino=59447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 184.381437][T13685] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.393377][T13685] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 184.416480][ T61] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 184.422746][T13691] netlink: 'syz.2.2294': attribute type 21 has an invalid length. [ 184.426639][T13691] __nla_validate_parse: 10 callbacks suppressed [ 184.426655][T13691] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2294'. [ 184.557393][ T61] usb 13-1: device descriptor read/64, error -71 [ 184.593907][ T40] audit: type=1800 audit(6000524434.440:800): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2296" name="file0" dev="overlay" ino=2 res=0 errno=0 [ 184.668268][ T61] usb usb13-port1: attempt power cycle [ 184.719430][T13712] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 184.980278][ T54] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 185.010658][ T61] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 185.041528][ T61] usb 13-1: device descriptor read/8, error -71 [ 185.091017][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 185.091113][ T5977] Bluetooth: hci4: command 0x1003 tx timeout [ 185.143333][ T54] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.147878][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.152655][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.156708][ T54] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.164047][ T54] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.167108][ T54] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.169664][ T54] usb 10-1: Manufacturer: syz [ 185.172259][ T54] usb 10-1: config 0 descriptor?? [ 185.184053][T13722] program syz.7.2304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.186386][T13721] program syz.7.2304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.233481][T13730] Unsupported ieee802154 address type: 0 [ 185.261829][T13732] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.292412][ T61] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 185.313783][ T61] usb 13-1: device descriptor read/8, error -71 [ 185.405130][T13744] overlayfs: invalid origin (0000) [ 185.423566][ T61] usb usb13-port1: unable to enumerate USB device [ 185.580381][ T54] appleir 0003:05AC:8243.001D: item fetching failed at offset 0/1 [ 185.583370][ T54] appleir 0003:05AC:8243.001D: parse failed [ 185.585797][ T54] appleir 0003:05AC:8243.001D: probe with driver appleir failed with error -22 [ 185.782316][ T6035] usb 10-1: USB disconnect, device number 24 [ 186.227548][T12402] bond0: (slave syz_tun): Releasing backup interface [ 186.233723][T13748] netlink: 'syz.2.2312': attribute type 3 has an invalid length. [ 186.237120][T13748] netlink: 'syz.2.2312': attribute type 1 has an invalid length. [ 186.241056][T13748] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2312'. [ 186.244998][T13748] NCSI netlink: No device for ifindex 0 [ 186.346948][ T6629] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.351941][ T6629] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.402837][ T6629] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.406481][ T6629] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.452688][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.456088][ T5977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.458632][ T5977] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.462696][ T5977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.465874][ T5977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 186.490961][ T6629] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.495713][ T6629] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.521814][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2321'. [ 186.526583][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2321'. [ 186.549541][ T6629] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.553967][ T6629] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.577987][T13767] chnl_net:caif_netlink_parms(): no params data found [ 186.630811][T13767] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.633994][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.637223][T13767] bridge_slave_0: entered allmulticast mode [ 186.640550][T13767] bridge_slave_0: entered promiscuous mode [ 186.645297][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.647909][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.650542][T13767] bridge_slave_1: entered allmulticast mode [ 186.654984][T13767] bridge_slave_1: entered promiscuous mode [ 186.664259][T13782] usb usb8: usbfs: process 13782 (syz.5.2323) did not claim interface 0 before use [ 186.667851][T13782] usb usb8: selecting invalid altsetting 1 [ 186.681546][T13767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.689031][T13767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.689033][T13782] overlayfs: failed to resolve './file1': -2 [ 186.714683][T13767] team0: Port device team_slave_0 added [ 186.719630][T13767] team0: Port device team_slave_1 added [ 186.729678][ T5972] Bluetooth: hci4: Malformed Event: 0x02 [ 186.743982][ T6629] bridge_slave_1: left allmulticast mode [ 186.746173][ T6629] bridge_slave_1: left promiscuous mode [ 186.748291][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.751356][ T6629] bridge_slave_0: left allmulticast mode [ 186.754321][ T6629] bridge_slave_0: left promiscuous mode [ 186.756391][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.800202][ T6629] erspan0 (unregistering): left promiscuous mode [ 186.806046][ T6629] gretap0 (unregistering): left promiscuous mode [ 187.175090][ T7694] vhci_hcd: vhci_device speed not set [ 187.205357][ T54] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 187.368055][ T54] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 187.372212][ T54] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.376447][ T54] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.379707][ T54] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.385403][ T54] usb 13-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 187.388907][ T54] usb 13-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 187.392012][ T54] usb 13-1: Manufacturer: syz [ 187.394880][ T54] usb 13-1: config 0 descriptor?? [ 187.711073][ T6629] team0: Port device bond0 removed [ 187.714749][ T6629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.719461][ T6629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.722876][ T6629] bond0 (unregistering): Released all slaves [ 187.727037][ T6629] bond1 (unregistering): Released all slaves [ 187.731815][ T6629] bond2 (unregistering): Released all slaves [ 187.735601][ T6629] bond3 (unregistering): Released all slaves [ 187.739771][T13767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.742116][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.751300][T13767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.755937][T13767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.758541][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.767288][T13767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.795566][T13767] hsr_slave_0: entered promiscuous mode [ 187.797772][T13767] hsr_slave_1: entered promiscuous mode [ 187.805925][ T54] appleir 0003:05AC:8243.001E: item fetching failed at offset 0/1 [ 187.808654][ T54] appleir 0003:05AC:8243.001E: parse failed [ 187.810704][ T54] appleir 0003:05AC:8243.001E: probe with driver appleir failed with error -22 [ 187.814265][ T6629] tipc: Disabling bearer [ 187.816256][ T6629] tipc: Left network mode [ 187.820968][T13799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 187.826708][T13799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2329'. [ 187.896703][T13767] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 187.901089][T13767] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 187.905699][T13767] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 187.909328][T13767] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 187.956230][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.968229][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.972332][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.974627][ T6641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.980950][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.984277][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.009871][ T54] usb 13-1: USB disconnect, device number 10 [ 188.045315][ T6629] hsr_slave_0: left promiscuous mode [ 188.047264][ T6629] hsr_slave_1: left promiscuous mode [ 188.049140][ T6629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.052479][ T6629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.055149][ T6629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.057517][ T6629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.064702][ T6629] veth1_macvtap: left promiscuous mode [ 188.067291][ T6629] veth0_macvtap: left promiscuous mode [ 188.069175][ T6629] veth1_vlan: left promiscuous mode [ 188.072060][ T6629] veth0_vlan: left promiscuous mode [ 188.159663][ T6629] team0 (unregistering): Port device team_slave_1 removed [ 188.166353][ T6629] team0 (unregistering): Port device team_slave_0 removed [ 188.218454][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.233418][T13816] 9pnet: Unknown protocol version 9p2000.u 0 0 51036 2 ffff888058a0f700 0 [ 188.233418][T13816] [ 188.293936][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 188.334384][T13767] veth0_vlan: entered promiscuous mode [ 188.340157][T13767] veth1_vlan: entered promiscuous mode [ 188.355367][T13767] veth0_macvtap: entered promiscuous mode [ 188.360254][T13767] veth1_macvtap: entered promiscuous mode [ 188.370956][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.376343][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.381323][ T6641] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.384935][ T6641] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.388829][ T6641] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.392596][ T6641] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.412689][T10326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.415694][T10326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.425473][ T8034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.428338][ T8034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.460449][T13824] netlink: 'syz.9.2316': attribute type 4 has an invalid length. [ 188.528959][ T6629] IPVS: stop unused estimator thread 0... [ 188.533343][T13829] netlink: 'syz.8.2334': attribute type 6 has an invalid length. [ 188.536552][T13829] netlink: 'syz.8.2334': attribute type 3 has an invalid length. [ 188.539603][T13829] netlink: 'syz.8.2334': attribute type 6 has an invalid length. [ 188.543062][T13829] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.554380][ T5972] Bluetooth: hci3: command tx timeout [ 188.736961][ T40] audit: type=1326 audit(6000524438.562:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13833 comm="syz.8.2336" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6566f8ebe9 code=0x0 [ 188.780640][T13841] 9pnet_fd: p9_fd_create_unix (13841): problem connecting socket: ./file0: -111 [ 188.795719][ T5977] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.795790][ T5972] Bluetooth: hci4: command 0x1003 tx timeout [ 188.835611][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2341'. [ 189.113111][T10326] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.155075][T10326] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.189325][T13866] loop3: detected capacity change from 0 to 1 [ 189.191963][T13866] Dev loop3: unable to read RDB block 1 [ 189.194361][T13866] loop3: unable to read partition table [ 189.196265][T13866] loop3: partition table beyond EOD, truncated [ 189.198899][T13866] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 189.221563][T10326] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.263795][ T5332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.266451][ T5332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.270150][ T5332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.272692][ T5332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.275395][ T5332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.282548][T10326] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.305996][ T40] audit: type=1400 audit(6000524439.119:802): avc: denied { lock } for pid=13865 comm="syz.5.2351" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 189.347779][T10326] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.366215][T13868] chnl_net:caif_netlink_parms(): no params data found [ 189.396226][T13874] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.421350][T13868] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.423643][T13868] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.426038][T13868] bridge_slave_0: entered allmulticast mode [ 189.428402][T13868] bridge_slave_0: entered promiscuous mode [ 189.435658][T13868] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.438744][T13868] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.441563][T13868] bridge_slave_1: entered allmulticast mode [ 189.444718][T13868] bridge_slave_1: entered promiscuous mode [ 189.472223][T13868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.477657][T13868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.481508][T13885] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2355'. [ 189.503663][T13868] team0: Port device team_slave_0 added [ 189.509083][T13868] team0: Port device team_slave_1 added [ 189.536944][T13892] sctp: [Deprecated]: syz.9.2357 (pid 13892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.536944][T13892] Use struct sctp_sack_info instead [ 189.544226][ T40] audit: type=1400 audit(6000524439.357:803): avc: denied { read } for pid=13891 comm="syz.9.2357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.545532][T13868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.553717][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.562506][T13894] netlink: 'syz.5.2358': attribute type 8 has an invalid length. [ 189.564321][T13868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.572550][T10326] bridge_slave_1: left allmulticast mode [ 189.575080][T10326] bridge_slave_1: left promiscuous mode [ 189.577597][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.584847][T10326] bridge_slave_0: left allmulticast mode [ 189.587759][T10326] bridge_slave_0: left promiscuous mode [ 189.588909][ T40] audit: type=1400 audit(6000524439.397:804): avc: denied { create } for pid=13895 comm="syz.5.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 189.590507][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.608219][T13896] Bluetooth: MGMT ver 1.23 [ 189.672358][T10326] dvmrp1 (unregistering): left allmulticast mode [ 189.679557][ T40] audit: type=1400 audit(6000524439.486:805): avc: denied { append } for pid=13897 comm="syz.9.2360" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.702811][T13903] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.647480][ T5972] Bluetooth: hci3: command tx timeout [ 191.130612][ T5972] Bluetooth: hci0: command 0x1003 tx timeout [ 191.132747][ T5977] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.372067][ T5977] Bluetooth: hci4: command tx timeout [ 191.668425][T10326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.673402][T10326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.677320][T10326] bond0 (unregistering): Released all slaves [ 191.682555][T13868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.685700][T13868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.696295][T13868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.703751][T13903] netlink: 'syz.9.2360': attribute type 3 has an invalid length. [ 191.743819][T13868] hsr_slave_0: entered promiscuous mode [ 191.746860][T13868] hsr_slave_1: entered promiscuous mode [ 191.748893][T13868] debugfs: 'hsr0' already exists in 'hsr' [ 191.750797][T13868] Cannot create hsr debugfs directory [ 191.753487][T10326] tipc: Left network mode [ 191.754819][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2365'. [ 191.804201][T13920] vlan0: entered promiscuous mode [ 191.807017][T13920] vlan0: entered allmulticast mode [ 191.808872][T13920] hsr_slave_1: entered allmulticast mode [ 191.812577][T13921] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 191.927043][T13926] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (2) [ 191.940239][T13928] 9p filesystem being mounted at /76/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 192.021491][T10326] hsr_slave_0: left promiscuous mode [ 192.023576][T10326] hsr_slave_1: left promiscuous mode [ 192.025469][T10326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.028509][T10326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.031578][T10326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.033962][T10326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.036619][T10326] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 192.038887][T10326] batman_adv: batadv0: Removing interface: ipvlan2 [ 192.043195][T10326] veth1_macvtap: left promiscuous mode [ 192.044886][T10326] veth0_macvtap: left promiscuous mode [ 192.047369][T10326] veth1_vlan: left promiscuous mode [ 192.049159][T10326] veth0_vlan: left promiscuous mode [ 192.089348][ T40] audit: type=1400 audit(6000524441.891:806): avc: denied { remount } for pid=13932 comm="syz.2.2372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 192.154610][T10326] team0 (unregistering): Port device team_slave_1 removed [ 192.164416][T10326] team0 (unregistering): Port device team_slave_0 removed [ 192.199444][T13946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2376'. [ 192.311683][T13948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.444053][T13868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.447752][T13868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.452423][T13868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.456801][T13868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.490964][T13868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.498629][T13868] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.503616][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.503647][ T6644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.505776][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.510710][ T6644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.586684][T13868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.601152][T13868] veth0_vlan: entered promiscuous mode [ 192.605392][T13868] veth1_vlan: entered promiscuous mode [ 192.616719][T13868] veth0_macvtap: entered promiscuous mode [ 192.620550][T13868] veth1_macvtap: entered promiscuous mode [ 192.628104][T13868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.633968][T13868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.638700][ T6629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.642738][ T6629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.645969][ T6629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.648673][ T6629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.659884][ T6035] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 192.673595][ T8034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.677082][ T8034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.689761][T10326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.692329][T10326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.718662][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2350'. [ 192.750563][ T5977] Bluetooth: hci3: command tx timeout [ 192.812548][ T6035] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 192.816964][ T6035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.821950][ T6035] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.826466][ T6035] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.833612][ T6035] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 192.837357][ T6035] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 192.840698][ T6035] usb 7-1: Manufacturer: syz [ 192.844372][ T6035] usb 7-1: config 0 descriptor?? [ 193.253805][ T6035] appleir 0003:05AC:8243.001F: item fetching failed at offset 0/1 [ 193.256398][ T6035] appleir 0003:05AC:8243.001F: parse failed [ 193.258340][ T6035] appleir 0003:05AC:8243.001F: probe with driver appleir failed with error -22 [ 193.456364][ T54] usb 7-1: USB disconnect, device number 19 [ 193.474941][ T5977] Bluetooth: hci4: command tx timeout [ 193.529931][T14014] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2395'. [ 193.569907][T14016] debugfs: 'ttyS3' already exists in 'caif_serial' [ 193.576507][T14016] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2396'. [ 193.701217][T14027] tmpfs: Group quota block hardlimit too large. [ 193.818014][T14040] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 193.820102][T14040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.823154][T14040] vhci_hcd vhci_hcd.0: Device attached [ 193.826152][T14041] vhci_hcd: connection closed [ 193.826975][ T6641] vhci_hcd: stop threads [ 193.829851][ T6641] vhci_hcd: release socket [ 193.831295][ T6641] vhci_hcd: disconnect device [ 194.001794][T14046] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 194.013027][T14046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.022206][T14046] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 194.027742][T14046] vlan2: entered allmulticast mode [ 194.030345][T14046] veth1: entered allmulticast mode [ 194.032693][T14046] veth1: entered promiscuous mode [ 194.034682][T14046] veth1: left promiscuous mode [ 194.036868][T14046] bond1: (slave vlan2): making interface the new active one [ 194.039720][T14046] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 194.046158][T14046] veth1: entered promiscuous mode [ 194.048387][T14046] vlan2: entered promiscuous mode [ 194.050398][T14046] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 194.253240][T14055] kvm: kvm [14054]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0xc2) = 0x800 [ 194.268425][T14055] kvm: kvm [14054]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0x11e) = 0xbe702911 [ 194.286257][T14055] kvm: kvm [14054]: vcpu2, guest rIP: 0x45c Unhandled WRMSR(0x186) = 0x800 [ 194.372396][T14061] 9pnet_fd: Insufficient options for proto=fd [ 194.474594][ T8034] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.632197][ T53] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 194.712002][T14090] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2421'. [ 194.793972][ T53] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 194.797601][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.800866][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.804044][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 194.809344][ T53] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 194.812588][ T53] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 194.815841][ T53] usb 7-1: Manufacturer: syz [ 194.818514][ T53] usb 7-1: config 0 descriptor?? [ 194.832887][ T5972] Bluetooth: hci3: command tx timeout [ 195.228471][ T53] appleir 0003:05AC:8243.0020: item fetching failed at offset 0/1 [ 195.231946][ T53] appleir 0003:05AC:8243.0020: parse failed [ 195.234456][ T53] appleir 0003:05AC:8243.0020: probe with driver appleir failed with error -22 [ 195.433590][ T840] usb 7-1: USB disconnect, device number 20 [ 195.557335][ T5972] Bluetooth: hci4: command tx timeout [ 195.845730][ T6638] nci: nci_rx_work: unknown MT 0x7 [ 196.522659][ T5977] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.523062][ T5972] Bluetooth: hci0: command 0x1003 tx timeout [ 196.646863][T14128] 9p: Unknown access argument 18446744073709551615: -34 [ 196.727944][T14141] atomic_op ffff888035c54998 conn xmit_atomic 0000000000000000 [ 196.740688][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 196.979334][T14144] netlink: 'syz.5.2435': attribute type 17 has an invalid length. [ 196.982583][T14144] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2435'. [ 197.007062][T14146] comedi comedi0: comedi_config --init_data is deprecated [ 197.067621][T14150] SELinux: policydb version 4849681 does not match my version range 15-35 [ 197.070936][T14150] SELinux: failed to load policy [ 197.138765][T14157] netlink: 'syz.5.2438': attribute type 1 has an invalid length. [ 197.154590][T14152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.158241][T14152] bond4: (slave bond5): making interface the new active one [ 197.161385][T14152] bond4: (slave bond5): Enslaving as an active interface with an up link [ 197.168937][T14152] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 197.175263][T14152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2438'. [ 197.180495][T14152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.331772][T14190] netlink: 830 bytes leftover after parsing attributes in process `syz.9.2449'. [ 197.336256][ T40] audit: type=1400 audit(6000524447.100:807): avc: denied { write } for pid=14189 comm="syz.9.2449" path="socket:[64549]" dev="sockfs" ino=64549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 197.344255][T14192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14192 comm=syz.5.2450 [ 197.417581][T14199] kAFS: No cell specified [ 197.520080][ T40] audit: type=1326 audit(6000524447.289:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.2454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x7ffc0000 [ 197.527316][ T40] audit: type=1326 audit(6000524447.289:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14201 comm="syz.9.2454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x7ffc0000 [ 197.610489][T14216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2458'. [ 197.613930][ T40] audit: type=1400 audit(6000524447.379:810): avc: denied { getopt } for pid=14215 comm="syz.0.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 197.614766][ T5977] Bluetooth: hci2: Unknown advertising packet type: 0x72 [ 197.615635][T14218] fuse: Unknown parameter 'usersecurity.capability' [ 197.625742][ T5977] Bluetooth: hci2: adv larger than maximum supported [ 197.625753][ T5977] Bluetooth: hci2: Malformed LE Event: 0x0d [ 197.649223][ T5977] Bluetooth: hci4: command tx timeout [ 197.713893][T14239] openvswitch: netlink: IP tunnel TTL not specified. [ 197.726730][T14239] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 197.732518][T14239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.738738][T14242] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 197.762161][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 197.820955][ T40] audit: type=1400 audit(6000524447.588:811): avc: denied { bind } for pid=14228 comm="syz.9.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 197.895918][T14279] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2471'. [ 197.926564][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2472'. [ 197.929754][T14281] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2472'. [ 197.938510][T14274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.940783][T14274] IPv6: NLM_F_CREATE should be set when creating new route [ 197.943027][T14274] IPv6: NLM_F_CREATE should be set when creating new route [ 198.055329][ T40] audit: type=1400 audit(6000524447.816:812): avc: denied { name_bind } for pid=14295 comm="syz.5.2475" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 198.088918][T14301] syz.5.2477: attempt to access beyond end of device [ 198.088918][T14301] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 198.093422][T14301] befs: (nbd5): unable to read superblock [ 198.212682][ T7694] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 198.292208][T14315] lo: entered allmulticast mode [ 198.295591][T14315] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 198.298586][T14314] lo: left allmulticast mode [ 198.363001][ T7694] usb 14-1: Using ep0 maxpacket: 8 [ 198.369517][ T7694] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 198.372017][T14327] 9pnet_virtio: no channels available for device syz [ 198.374530][ T7694] usb 14-1: config 0 has no interface number 0 [ 198.378649][ T7694] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.382842][ T7694] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 198.387239][ T7694] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.391277][ T7694] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.395785][ T7694] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 198.398591][ T7694] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.402053][ T7694] usb 14-1: config 0 descriptor?? [ 198.407423][ T7694] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 198.419588][ T40] audit: type=1400 audit(6000524448.184:813): avc: denied { bind } for pid=14330 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 198.464982][T14335] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.608979][ T6054] usb 14-1: USB disconnect, device number 2 [ 198.611820][ T6054] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 198.755343][ T53] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 198.907238][ T53] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.911526][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.915963][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.920026][ T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.926451][ T53] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.930101][ T53] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.933356][ T53] usb 10-1: Manufacturer: syz [ 198.936696][ T53] usb 10-1: config 0 descriptor?? [ 198.952901][T14343] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 198.968063][T14343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.979627][T14343] vlan3: entered allmulticast mode [ 199.173931][ T6053] IPVS: starting estimator thread 0... [ 199.192584][T14363] batman_adv: batadv0: Adding interface: gretap1 [ 199.194640][T14363] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.200472][T14366] syz.2.2500: attempt to access beyond end of device [ 199.200472][T14366] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 199.202665][T14363] batman_adv: batadv0: Interface activated: gretap1 [ 199.206496][T14366] (syz.2.2500,14366,3):ocfs2_get_sector:1714 ERROR: status = -5 [ 199.206513][T14366] (syz.2.2500,14366,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 199.206524][T14366] (syz.2.2500,14366,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 199.206533][T14366] (syz.2.2500,14366,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 199.227625][T14365] gtp0: entered promiscuous mode [ 199.268107][T14361] IPVS: using max 57 ests per chain, 136800 per kthread [ 199.500736][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.502817][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.548947][ T53] appleir 0003:05AC:8243.0021: item fetching failed at offset 0/1 [ 199.551765][ T53] appleir 0003:05AC:8243.0021: parse failed [ 199.553724][ T53] appleir 0003:05AC:8243.0021: probe with driver appleir failed with error -22 [ 199.750877][ T6053] usb 10-1: USB disconnect, device number 25 [ 199.768380][T14380] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 199.774913][T14378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.820741][T14384] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 199.987382][T14388] __nla_validate_parse: 5 callbacks suppressed [ 199.987398][T14388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2506'. [ 199.993999][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 200.041776][ T40] audit: type=1400 audit(6000524449.785:814): avc: denied { watch watch_reads } for pid=14397 comm="syz.2.2508" path="pipe:[47872]" dev="pipefs" ino=47872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.278015][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2509'. [ 200.354126][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'. [ 200.497688][ T40] audit: type=1400 audit(6000524450.253:815): avc: denied { setattr } for pid=14425 comm="syz.9.2517" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 200.878345][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2521'. [ 200.886225][T14446] wireguard0: entered promiscuous mode [ 200.888120][T14446] wireguard0: entered allmulticast mode [ 200.902505][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 200.905389][T14449] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 200.907836][T14451] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2523'. [ 201.074062][T14456] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2525'. [ 201.076960][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 201.079901][T14456] tipc: MTU too low for tipc bearer [ 201.096870][T14454] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2524'. [ 201.350019][T14481] ksmbd: Unknown IPC event: 1, ignore. [ 201.366123][T14484] openvswitch: netlink: IP tunnel dst address not specified [ 201.699638][ T40] audit: type=1400 audit(6000524451.437:816): avc: denied { setopt } for pid=14510 comm="syz.9.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.852011][T14523] geneve2: entered promiscuous mode [ 201.853869][T14523] geneve2: entered allmulticast mode [ 201.866940][ T6641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.871255][ T6641] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.875097][ T6641] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.878510][ T6641] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.900409][T14527] SELinux: unknown common  [ 201.902276][T14527] SELinux: failed to load policy [ 201.975044][ T5977] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 202.144194][T14546] netlink: 'syz.5.2557': attribute type 7 has an invalid length. [ 202.188805][T14548] geneve3: entered promiscuous mode [ 202.191746][T14548] geneve3: entered allmulticast mode [ 202.195482][ T8034] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.200226][ T8034] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.203451][ T8034] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.207683][ T8034] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.247708][T14557] netlink: 'syz.5.2561': attribute type 5 has an invalid length. [ 202.251004][T14557] netlink: 'syz.5.2561': attribute type 7 has an invalid length. [ 202.257098][T14557] : entered promiscuous mode [ 202.386918][T14567] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.528271][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 202.528281][ T40] audit: type=1400 audit(6000524452.272:818): avc: denied { create } for pid=14577 comm="syz.2.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 202.693148][T14594] autofs4:pid:14594:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 202.920706][T14626] bridge_slave_0: left allmulticast mode [ 202.923447][T14626] bridge_slave_0: left promiscuous mode [ 202.925936][T14626] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.936491][T14626] bridge_slave_1: left allmulticast mode [ 202.943665][T14626] bridge_slave_1: left promiscuous mode [ 202.945629][T14626] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.953265][T14626] bond0: (slave bond_slave_0): Releasing backup interface [ 202.959162][T14626] bond0: (slave bond_slave_1): Releasing backup interface [ 202.964931][T14626] team0: Port device team_slave_0 removed [ 202.969876][T14626] team0: Port device team_slave_1 removed [ 202.972140][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.974573][T14626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.977596][T14626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.980916][T14626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.994869][T14626] batman_adv: batadv0: Interface deactivated: gretap1 [ 202.997716][T14626] batman_adv: batadv0: Removing interface: gretap1 [ 203.166617][T14653] syzkaller1: entered promiscuous mode [ 203.168918][T14653] syzkaller1: entered allmulticast mode [ 203.279369][ T24] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 203.441912][ T24] usb 14-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 203.445504][ T24] usb 14-1: config 1 interface 0 has no altsetting 0 [ 203.448966][ T24] usb 14-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 203.451945][ T24] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.454490][ T24] usb 14-1: Product: syz [ 203.455844][ T24] usb 14-1: Manufacturer: ⹆멝蜏 [ 203.457503][ T24] usb 14-1: SerialNumber: syz [ 203.785876][T14664] netlink: 'syz.2.2590': attribute type 21 has an invalid length. [ 203.810596][T14666] netlink: 'syz.2.2591': attribute type 1 has an invalid length. [ 203.820883][T14666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.828282][T14666] bond1: (slave wlan0): Releasing active interface [ 203.831130][T14666] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 203.839463][T14666] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 203.856750][T14671] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 203.884764][T14673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14673 comm=syz.5.2593 [ 203.926396][ T24] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/input/input23 [ 203.928250][ T5366] bcm5974 14-1:1.0: could not read from device [ 203.932945][ T24] usb 14-1: USB disconnect, device number 3 [ 204.025848][T14679] block device autoloading is deprecated and will be removed. [ 204.154553][T14683] ISOFS: Unable to identify CD-ROM format. [ 204.159179][T14683] netlink: 'syz.2.2596': attribute type 3 has an invalid length. [ 204.169989][T14683] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 204.173072][T14683] SELinux: failed to load policy [ 204.363961][T14695] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 204.420354][ T40] audit: type=1400 audit(6000524454.153:819): avc: denied { watch } for pid=14694 comm="syz.5.2601" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 204.423336][T14695] random: crng reseeded on system resumption [ 204.429910][ T40] audit: type=1400 audit(6000524454.153:820): avc: denied { watch_sb } for pid=14694 comm="syz.5.2601" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.372320][ T40] audit: type=1400 audit(6000524455.098:821): avc: denied { setattr } for pid=14710 comm="syz.9.2608" name="SCO" dev="sockfs" ino=67713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.336294][T14730] blktrace: Concurrent blktraces are not allowed on loop18 [ 207.527223][T14742] __nla_validate_parse: 15 callbacks suppressed [ 207.527244][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2619'. [ 207.534556][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2619'. [ 207.724774][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2628'. [ 207.728235][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2628'. [ 207.748880][T14768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2629'. [ 207.790454][T14775] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2631'. [ 207.794783][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2631'. [ 207.851267][T14782] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.885159][T14784] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2634'. [ 207.917063][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2637'. [ 207.921850][T14790] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2637'. [ 207.953697][ T40] audit: type=1400 audit(6000524457.665:822): avc: denied { getopt } for pid=14793 comm="syz.9.2639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 208.066807][T14799] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 208.120283][T14803] loop6: detected capacity change from 0 to 6656 [ 208.122890][T14803] buffer_io_error: 13 callbacks suppressed [ 208.122900][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.128810][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.132408][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.136134][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.139252][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.142721][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.146544][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.149088][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.151594][T14803] ldm_validate_partition_table(): Disk read failed. [ 208.153975][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.156691][T14803] Buffer I/O error on dev loop6, logical block 0, async page read [ 208.159705][T14803] Dev loop6: unable to read RDB block 0 [ 208.161856][T14803] loop6: unable to read partition table [ 208.164242][T14803] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 208.374274][T10326] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.462285][T14827] syz_tun: entered allmulticast mode [ 208.467071][ T40] audit: type=1400 audit(6000524458.183:823): avc: denied { map } for pid=14826 comm="syz.0.2649" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 208.482861][T14826] syz_tun: left allmulticast mode [ 208.878352][T14849] vcan1: entered allmulticast mode [ 208.895171][T14847] tipc: Started in network mode [ 208.903579][T14847] tipc: Node identity ac1414aa, cluster identity 4711 [ 208.906519][T14847] tipc: Enabled bearer , priority 10 [ 209.937241][T14911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.023401][ T841] tipc: Node number set to 2886997162 [ 210.158891][T14922] syz.0.2674: attempt to access beyond end of device [ 210.158891][T14922] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 210.167068][T14922] SQUASHFS error: Failed to read block 0x0: -5 [ 210.169672][T14922] unable to read squashfs_super_block [ 210.195223][T14924] netlink: 'syz.0.2675': attribute type 11 has an invalid length. [ 210.388127][ T40] audit: type=1400 audit(6000524460.094:824): avc: denied { mount } for pid=14936 comm="syz.9.2680" name="/" dev="rpc_pipefs" ino=67371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 210.411992][T14941] fuse: Unknown parameter 'fd0x0000000000000003' [ 210.596812][T14954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1954005275 (125056337600 ns) > initial count (69329932160 ns). Using initial count to start timer. [ 210.603075][T14954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3503323016 (224212673024 ns) > initial count (219510975936 ns). Using initial count to start timer. [ 210.720362][T14962] .: renamed from bond0 (while UP) [ 210.867315][ T7694] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 211.018759][ T7694] usb 14-1: config 0 has no interfaces? [ 211.022816][ T7694] usb 14-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 211.026688][ T7694] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.029990][ T7694] usb 14-1: Product: syz [ 211.032083][ T7694] usb 14-1: Manufacturer: syz [ 211.033931][ T7694] usb 14-1: SerialNumber: syz [ 211.036681][ T7694] usb 14-1: config 0 descriptor?? [ 211.408612][ T53] usb 10-1: new low-speed USB device number 26 using dummy_hcd [ 211.445211][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.448989][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.464602][T14960] netlink: 'syz.9.2689': attribute type 20 has an invalid length. [ 211.474537][T10327] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.474631][T14960] netlink: 'syz.9.2689': attribute type 20 has an invalid length. [ 211.478187][T10327] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.484563][T10327] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.487995][T10327] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.560667][ T841] usb 14-1: USB disconnect, device number 4 [ 211.561329][ T53] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 211.566010][ T53] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 211.568576][ T53] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 211.572316][ T53] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 211.576239][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 211.579801][ T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 211.587800][ T53] usb 10-1: string descriptor 0 read error: -22 [ 211.590218][ T53] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 211.593109][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.596723][ T53] usb 10-1: config 0 descriptor?? [ 211.598871][T14975] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 211.601751][ T53] hub 10-1:0.0: bad descriptor, ignoring hub [ 211.603800][ T53] hub 10-1:0.0: probe with driver hub failed with error -5 [ 211.607070][ T53] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input25 [ 211.805229][ T6053] usb 10-1: USB disconnect, device number 26 [ 212.121820][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 212.234709][T14988] netdevsim netdevsim9: Direct firmware load for  failed with error -2 [ 212.237484][T14988] netdevsim netdevsim9: Falling back to sysfs fallback for:  [ 212.415398][T14992] No control pipe specified [ 212.620448][T15001] Invalid logical block size (2051) [ 213.087239][T15016] netlink: 'syz.9.2705': attribute type 5 has an invalid length. [ 213.193318][T15023] tmpfs: Bad value for 'mpol' [ 213.310758][ T40] audit: type=1400 audit(6000524463.001:825): avc: denied { create } for pid=15028 comm="syz.0.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 213.369067][T15036] bond0: entered allmulticast mode [ 213.371627][T15036] bond_slave_0: entered allmulticast mode [ 213.374192][T15036] bond_slave_1: entered allmulticast mode [ 213.403945][T15038] __nla_validate_parse: 21 callbacks suppressed [ 213.403963][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'. [ 213.412376][ T40] audit: type=1400 audit(6000524463.100:826): avc: denied { listen } for pid=15037 comm="syz.0.2714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 213.773252][T15046] tipc: Enabled bearer , priority 0 [ 213.777296][T15045] tipc: Resetting bearer [ 213.811091][T15045] tipc: Disabling bearer [ 213.891855][T15048] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2717'. [ 213.895888][T15048] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2717'. [ 213.901757][T15048] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2717'. [ 213.926159][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'. [ 213.930521][T15056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2720'. [ 214.075542][T10327] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.078777][T10327] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.081962][T10327] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.084916][T10327] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.141119][ T24] hid-generic 0005:0B57:05DF.0022: collection stack underflow [ 214.144225][ T24] hid-generic 0005:0B57:05DF.0022: item 0 0 0 12 parsing failed [ 214.147701][ T24] hid-generic 0005:0B57:05DF.0022: probe with driver hid-generic failed with error -22 [ 214.433488][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2729'. [ 214.437635][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2729'. [ 214.602931][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2741'. [ 214.606328][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2741'. [ 215.024661][ T8034] vlan2: left promiscuous mode [ 215.450044][ T40] audit: type=1326 audit(6000524465.131:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.5.2747" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe28a18ebe9 code=0x0 [ 215.503874][T15138] netlink: 'syz.5.2747': attribute type 10 has an invalid length. [ 215.508061][T15138] bridge0: port 3(team0) entered blocking state [ 215.508462][T15140] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 215.510316][T15138] bridge0: port 3(team0) entered disabled state [ 215.515683][T15138] team0: entered allmulticast mode [ 215.517541][T15138] team_slave_0: entered allmulticast mode [ 215.519403][T15138] team_slave_1: entered allmulticast mode [ 215.522109][T15138] team0: entered promiscuous mode [ 215.523997][T15138] team_slave_0: entered promiscuous mode [ 215.526400][T15138] team_slave_1: entered promiscuous mode [ 215.704306][ T6054] IPVS: starting estimator thread 0... [ 215.769595][ T40] audit: type=1326 audit(6000524465.450:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 215.779100][ T40] audit: type=1326 audit(6000524465.450:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 215.788799][ T40] audit: type=1326 audit(6000524465.450:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 215.799862][ T40] audit: type=1326 audit(6000524465.450:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 215.807852][T15154] IPVS: using max 57 ests per chain, 136800 per kthread [ 215.809214][ T40] audit: type=1326 audit(6000524465.450:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 215.821169][ T40] audit: type=1326 audit(6000524465.450:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 215.830675][ T40] audit: type=1326 audit(6000524465.450:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 217.858421][T15164] binder: Bad value for 'max' [ 218.025514][T15171] __vm_enough_memory: pid: 15171, comm: syz.5.2760, bytes: 21200629067776 not enough memory for the allocation [ 218.338295][ T40] kauditd_printk_skb: 51357 callbacks suppressed [ 218.338306][ T40] audit: type=1326 audit(6000524467.999:52192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.347254][ T40] audit: type=1326 audit(6000524467.999:52193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.354504][ T40] audit: type=1326 audit(6000524468.009:52194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.361711][ T40] audit: type=1326 audit(6000524468.009:52195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.369217][ T40] audit: type=1326 audit(6000524468.009:52196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.377745][ T40] audit: type=1326 audit(6000524468.009:52197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.385031][ T40] audit: type=1326 audit(6000524468.009:52198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.392269][ T40] audit: type=1326 audit(6000524468.009:52199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.399941][ T40] audit: type=1326 audit(6000524468.009:52200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.407228][ T40] audit: type=1326 audit(6000524468.009:52201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15152 comm="syz.9.2753" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58298ebe9 code=0x50000 [ 218.602828][T15193] openvswitch: netlink: Message has 24 unknown bytes. [ 218.605501][T15193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.611214][T15194] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 0 [ 218.619691][T15195] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 1 [ 218.621825][T15196] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 2 [ 218.627918][T15197] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 0, id = 3 [ 218.684414][T15199] __nla_validate_parse: 10 callbacks suppressed [ 218.684426][T15199] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2767'. [ 218.773392][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2769'. [ 218.779795][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2769'. [ 219.064928][T15229] IPVS: wlc: UDP 172.20.20.187:0 - no destination available [ 219.116676][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2778'. [ 219.120144][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2778'. [ 219.146807][T15235] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2779'. [ 219.432741][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 219.567783][ T6644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.571043][ T6644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.586960][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.589705][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.592374][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.596033][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.599187][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.670371][ T6644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.675613][ T6644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.707698][T15245] chnl_net:caif_netlink_parms(): no params data found [ 219.733582][ T6644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.737368][ T6644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.773706][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.776468][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.778831][T15245] bridge_slave_0: entered allmulticast mode [ 219.781747][T15245] bridge_slave_0: entered promiscuous mode [ 219.786999][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.789409][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.792128][T15245] bridge_slave_1: entered allmulticast mode [ 219.798508][T15245] bridge_slave_1: entered promiscuous mode [ 219.826579][ T6644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.829801][ T6644] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.835993][T15245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.842207][T15245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.871895][T15245] team0: Port device team_slave_0 added [ 219.875497][T15245] team0: Port device team_slave_1 added [ 219.900119][T15245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.902536][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.911156][T15245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.916084][T15245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.918700][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.927300][T15245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.965268][T15245] hsr_slave_0: entered promiscuous mode [ 219.967674][T15245] hsr_slave_1: entered promiscuous mode [ 219.969990][T15245] debugfs: 'hsr0' already exists in 'hsr' [ 219.971853][T15245] Cannot create hsr debugfs directory [ 220.002715][ T6644] bridge_slave_1: left allmulticast mode [ 220.004575][ T6644] bridge_slave_1: left promiscuous mode [ 220.008716][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.012990][ T6644] bridge_slave_0: left allmulticast mode [ 220.015384][ T6644] bridge_slave_0: left promiscuous mode [ 220.017482][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.392673][T15258] Bluetooth: MGMT ver 1.23 [ 220.435941][ T6644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.441826][ T6644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.446050][ T6644] bond0 (unregistering): Released all slaves [ 220.464179][ T6644] bond1 (unregistering): (slave vlan2): Releasing active interface [ 220.467877][ T6644] veth1: left promiscuous mode [ 220.470086][ T6644] bond1 (unregistering): Released all slaves [ 220.488784][ T6644] bond2 (unregistering): Released all slaves [ 220.510266][ T6644] bond3 (unregistering): (slave wlan0): Releasing active interface [ 220.519837][ T6644] bond3 (unregistering): Released all slaves [ 220.584838][ T6644] tipc: Left network mode [ 220.621070][ T6644] IPVS: stopping master sync thread 14384 ... [ 220.985565][ T6644] hsr_slave_0: left promiscuous mode [ 220.989892][ T6644] hsr_slave_1: left promiscuous mode [ 220.992379][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.995272][ T6644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.998739][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.001437][ T6644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.010048][ T6644] veth1_macvtap: left promiscuous mode [ 221.012076][ T6644] veth0_macvtap: left promiscuous mode [ 221.013930][ T6644] veth1_vlan: left promiscuous mode [ 221.015728][ T6644] veth0_vlan: left promiscuous mode [ 221.057945][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2788'. [ 221.223816][ T6644] team0 (unregistering): Port device team_slave_1 removed [ 221.246653][ T6644] team0 (unregistering): Port device team_slave_0 removed [ 221.448667][T15245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.452907][T15280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.458377][T15245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.462436][T15280] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 221.465104][T15280] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 221.469362][T15280] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 221.472278][T15280] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 221.474933][ T5977] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 221.480390][T15245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.681626][ T5977] Bluetooth: hci0: command tx timeout [ 221.755745][T15245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.787004][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.793921][T15245] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.797742][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.800065][ T6641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.804649][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.807028][T10326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.896365][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.916027][T15245] veth0_vlan: entered promiscuous mode [ 221.920238][T15245] veth1_vlan: entered promiscuous mode [ 221.934018][T15245] veth0_macvtap: entered promiscuous mode [ 221.938850][T15245] veth1_macvtap: entered promiscuous mode [ 221.939598][T15298] syz.5.2795: attempt to access beyond end of device [ 221.939598][T15298] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 221.945566][T15298] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 221.949233][T15245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.953411][T15299] syz.5.2795: attempt to access beyond end of device [ 221.953411][T15299] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 221.958587][T15299] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 221.959970][T15245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.969749][ T6638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.978817][ T6638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.981839][ T6638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.988707][ T6638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.004909][ T8034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.007312][ T8034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.015225][ T8034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.018873][ T8034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.049846][T15310] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2799'. [ 222.063179][ T6054] hid-generic 0362:07FF:7FFFFFFF.0023: item fetching failed at offset 0/2 [ 222.066089][ T6054] hid-generic 0362:07FF:7FFFFFFF.0023: probe with driver hid-generic failed with error -22 [ 222.109452][ T6644] IPVS: stop unused estimator thread 0... [ 222.129707][T15321] (J: renamed from lo (while UP) [ 222.254599][T15333] qnx4: no qnx4 filesystem (no root dir). [ 222.359670][T10326] nci: nci_ntf_packet: unknown ntf opcode 0x406 [ 222.362084][T10326] nci: nci_ntf_packet: unknown ntf opcode 0x406 [ 223.052532][T15355] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 223.052770][T15353] IPVS: stopping master sync thread 15355 ... [ 223.165232][T15360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.178593][T15360] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 223.181044][T15360] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 223.183902][T15360] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 223.186562][T15360] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 223.187430][T15366] 9pnet_fd: Insufficient options for proto=fd [ 223.191004][ T5977] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 223.246205][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2817'. [ 223.278494][T15374] geneve2: entered promiscuous mode [ 223.280171][T15374] geneve2: entered allmulticast mode [ 223.303869][T15378] blktrace: Concurrent blktraces are not allowed on sg0 [ 223.328237][ T840] libceph: connect (1)[c::]:6789 error -101 [ 223.330393][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 223.381489][ T61] libceph: connect (1)[c::]:6789 error -101 [ 223.383801][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 223.468389][ T841] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 223.589962][ T840] libceph: connect (1)[c::]:6789 error -101 [ 223.592008][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 223.629200][ T841] usb 10-1: Using ep0 maxpacket: 8 [ 223.632050][ T841] usb 10-1: config 0 interface 0 has no altsetting 0 [ 223.634231][ T841] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 223.637064][ T841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.640808][ T841] usb 10-1: config 0 descriptor?? [ 223.649315][ T61] libceph: connect (1)[c::]:6789 error -101 [ 223.651416][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 223.689195][ T840] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.693736][ T840] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 223.697988][ T840] CPU: 0 UID: 0 PID: 840 Comm: kworker/0:2 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 223.702302][ T840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.706186][ T840] Workqueue: events l2cap_info_timeout [ 223.708204][ T840] RIP: 0010:do_raw_spin_lock+0x6d/0x2b0 [ 223.710236][ T840] Code: 98 81 48 8d 54 05 00 c7 02 f1 f1 f1 f1 c7 42 04 04 f3 f3 f3 65 48 8b 15 39 2f 3e 12 48 89 54 24 60 31 d2 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e4 [ 223.717438][ T840] RSP: 0018:ffffc90004e5fa00 EFLAGS: 00010203 [ 223.719685][ T840] RAX: dffffc0000000000 RBX: 00000000000001c0 RCX: 0000000000000000 [ 223.722577][ T840] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000001c4 [ 223.725637][ T840] RBP: 1ffff920009cbf41 R08: 0000000000000001 R09: 0000000000000000 [ 223.728547][ T840] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000001c0 [ 223.731460][ T840] R13: 0000000000000002 R14: ffff8880263144b0 R15: 0000000000000004 [ 223.734632][ T840] FS: 0000000000000000(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 223.737951][ T840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.740397][ T840] CR2: 00007ff5838c5f98 CR3: 000000002bb0b000 CR4: 0000000000352ef0 [ 223.743313][ T840] Call Trace: [ 223.744552][ T840] [ 223.745666][ T840] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.747628][ T840] ? __pfx___might_resched+0x10/0x10 [ 223.749698][ T840] lock_sock_nested+0x5f/0xf0 [ 223.751470][ T840] ? l2cap_sock_ready_cb+0x41/0x170 [ 223.753602][ T840] l2cap_sock_ready_cb+0x41/0x170 [ 223.755716][ T840] l2cap_conn_start+0x144/0xb30 [ 223.757312][ T840] ? __pfx_l2cap_conn_start+0x10/0x10 [ 223.759009][ T840] ? __pfx___mutex_lock+0x10/0x10 [ 223.760686][ T840] ? debug_object_deactivate+0x1ec/0x3a0 [ 223.762565][ T840] ? rcu_is_watching+0x12/0xc0 [ 223.764213][ T840] ? lock_acquire+0x2cd/0x350 [ 223.765755][ T840] ? rcu_is_watching+0x12/0xc0 [ 223.767301][ T840] l2cap_info_timeout+0x81/0xa0 [ 223.768871][ T840] process_one_work+0x9cc/0x1b70 [ 223.770516][ T840] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 223.772713][ T840] ? __pfx_process_one_work+0x10/0x10 [ 223.774442][ T840] ? assign_work+0x1a0/0x250 [ 223.775913][ T840] worker_thread+0x6c8/0xf10 [ 223.777393][ T840] ? __pfx_worker_thread+0x10/0x10 [ 223.779016][ T840] kthread+0x3c5/0x780 [ 223.780403][ T840] ? __pfx_kthread+0x10/0x10 [ 223.781910][ T840] ? rcu_is_watching+0x12/0xc0 [ 223.783548][ T840] ? __pfx_kthread+0x10/0x10 [ 223.785072][ T840] ret_from_fork+0x5d7/0x6f0 [ 223.786556][ T840] ? __pfx_kthread+0x10/0x10 [ 223.788031][ T840] ret_from_fork_asm+0x1a/0x30 [ 223.789586][ T840] [ 223.790610][ T840] Modules linked in: [ 223.791951][ T840] ---[ end trace 0000000000000000 ]--- [ 223.793723][ T840] RIP: 0010:do_raw_spin_lock+0x6d/0x2b0 [ 223.795490][ T840] Code: 98 81 48 8d 54 05 00 c7 02 f1 f1 f1 f1 c7 42 04 04 f3 f3 f3 65 48 8b 15 39 2f 3e 12 48 89 54 24 60 31 d2 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 e4 [ 223.803942][ T840] RSP: 0018:ffffc90004e5fa00 EFLAGS: 00010203 [ 223.806620][ T840] RAX: dffffc0000000000 RBX: 00000000000001c0 RCX: 0000000000000000 [ 223.810027][ T840] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 00000000000001c4 [ 223.813362][ T840] RBP: 1ffff920009cbf41 R08: 0000000000000001 R09: 0000000000000000 [ 223.816746][ T840] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000001c0 [ 223.820288][ T840] R13: 0000000000000002 R14: ffff8880263144b0 R15: 0000000000000004 [ 223.823723][ T840] FS: 0000000000000000(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 223.827581][ T840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.830580][ T840] CR2: 00007ff5838c5f98 CR3: 000000002bb0b000 CR4: 0000000000352ef0 [ 223.834263][ T840] Kernel panic - not syncing: Fatal exception in interrupt [ 223.838030][ T840] Kernel Offset: disabled [ 223.839949][ T840] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:19:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff856416c5 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc90004e5f400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b10dfe0 R15=ffffffff85641660 RIP=ffffffff856416ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff5838c5f98 CR3=000000002bb0b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000c0000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff14e37fc0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff14e38146 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff14e38146 00007fff14e3814c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8be12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8be12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8be12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8be12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8be12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdc8be12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a441ea0 RCX=ffffffff81af8d01 RDX=ffff888027d34880 RSI=ffffffff81af8cdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc9000355f4d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4883d5 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af8ce2 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2ff7ce7d60 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2ff71876c3 00007f2ff71876c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffee6638600 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555724a92fc 00005555724a9070 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555724ae3ee 00005555724ade60 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060129a00210b880 82000d8003027080 8082000d80030180 cc82100001ec1000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000100000 10000c1000010000 0408060a0106cc0d 80041080a2d48608 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000006080606 0129a00210b88082 000d800302708080 82000d80030180cc ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 82100001ec100004 8004060675c80023 30302f2330302f62 73752f7375622f76 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642f01ffffffff ffffffffd5080480 030010001e80041c 8004021000010000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a441e80 RCX=ffffffff81af8d01 RDX=ffff888054b08000 RSI=ffffffff81af8cdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90005ff7888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4883d1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af8cdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff8257729a0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde54c8d10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde54c8e96 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde54c8e96 00007ffde54c8e9c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff825812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff825812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff825812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff825812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff825812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff825812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000191e44 RBX=0000000000000003 RCX=ffffffff8b937c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162600 RDI=ffffffff819133c1 RBP=ffffed1003c54000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2a0000 R14=ffffffff90ab3b90 R15=0000000000000000 RIP=ffffffff8b93678f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000340 CR3=000000004e87a000 CR4=00352ef0 DR0=0000000000000001 DR1=0000000000000002 DR2=0000000000000008 DR3=1000000100000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000