last executing test programs: 6m26.265427239s ago: executing program 3 (id=218): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) creat(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200000e00000000000088a84aa9ebb0fb36788cb06b0081003e0008004500002400000000007314142500000000001090"], 0x0) (async) fcntl$setsig(r0, 0xa, 0x91) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="8f", 0x7}) (async) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000140)={r4}) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) syz_emit_ethernet(0x9e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000000000680600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e244001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00401049078000013125a213255fc14f131de9a65cf2bec6042fe06e2d4c3d9fe08000000ca39fd810b37fec0a178de23ac9722112864064811009748a452859b6abf731e0aa0c3ffffffff00030509123dc2dcddbdaa0502000000"], 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="07000000000000003e76c0ae08fdbf6893000000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 6m26.205592674s ago: executing program 3 (id=219): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x21, 0x2, 0x2) getsockopt$sock_int(r1, 0x1, 0x12, 0x0, &(0x7f00000002c0)) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 6m26.205281029s ago: executing program 3 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0xe8, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0xbc, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xac, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffe, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x97e}}]}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x9a0}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xedec, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xab63, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x10004}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x21e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3}}]}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0xe8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000180)={0x14, r2, 0x311, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x2004c890) setsockopt$sock_timeval(r1, 0x1, 0x57, &(0x7f0000000100)={0x77359400}, 0x10) 6m26.135597621s ago: executing program 3 (id=221): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x10000004000, 0x1) ioctl$BLKTRACESTOP(r0, 0x2279, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ca) close(r0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2035099, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x8001, @empty, 0x1}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r2, 0x2) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='user.incfs.size\x00') 6m26.13515882s ago: executing program 3 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x21, 0x0, @dev, @local}}}}, 0x0) 6m25.834858704s ago: executing program 3 (id=224): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0x36) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 6m25.802046459s ago: executing program 32 (id=224): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0x36) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 5m10.324586233s ago: executing program 0 (id=844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xb) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0xffff, 0xfffffffe, 0x5, 0x2, 0xffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000001c0)={0xa45}) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) accept(r0, &(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000980)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002b000701feffffff00000000057c00000c00018008000000ffffffff100003800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket(0x1d, 0x2, 0x6) shutdown(r1, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x0, {}, 0x1}, 0x18) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000002c0)=r7) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) (async) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x2, r6, 0x10, r1}, 0x10) (async) mq_open(&(0x7f0000000200)='vcan0\x00', 0x40, 0x0, &(0x7f0000000240)={0x1, 0x9, 0x7, 0x37}) 5m10.062880734s ago: executing program 0 (id=845): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x2, [0x2], [0x2000], [0x7fffffff, 0x0, 0x0, 0x2], [0x400000000000001]}) fanotify_init(0x4, 0x400) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f0000000080)) r3 = open(&(0x7f0000000040)='.\x00', 0x100, 0x0) fanotify_mark(r3, 0x600, 0x1016, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5m9.769933478s ago: executing program 0 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7ffffffe, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000380)={0x1, 0x2, 0x6, 0x0, 0x2, 0x10001, 0x6, 0x6, 0x7fff}) r2 = syz_open_procfs(0x0, &(0x7f0000000c00)='net/wireless\x00') read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7ffffffe, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in=@empty}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000380)={0x1, 0x2, 0x6, 0x0, 0x2, 0x10001, 0x6, 0x6, 0x7fff}) (async) syz_open_procfs(0x0, &(0x7f0000000c00)='net/wireless\x00') (async) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_INPUT(r3, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) (async) 5m9.651946049s ago: executing program 0 (id=851): unshare(0x6a040000) r0 = io_uring_setup(0x833, &(0x7f00000002c0)={0x0, 0x6d70, 0x8, 0x2, 0x324}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/29, 0x1d}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x4, &(0x7f0000000240)={0x0, "50f04611cbc3ad9335b1cad63f1683e3bfdb00"}}) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xf}, {0x0, 0xb}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x40, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) 5m7.87097706s ago: executing program 2 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d22600001c0012800b000100677b35ee03537780656e00000021be8b05b2e0c87f82b9af928c6d1a1db618d881cf1f7f787a8b0bf1c1dfd8bd9f0817b23d1c524441b5bdd2ee824efb93608da03e0ca4757a4ad6c6aaab8a3f161da39d0d1f78e4c2a68e5c175f81f499f4e5eabe83ae3185c9784d3e564ef062c0dfe5531754beebb5d71eb75a179bb9a8c27ec9925a"], 0x3c}}, 0xc080) 5m7.588511114s ago: executing program 2 (id=862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000003c0)=0x2000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94", 0xc3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", '\x00@\x00\x00\x00\b\x00', "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200002, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ptrace$getenv(0x4201, 0x0, 0x400, &(0x7f00000004c0)) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRES16=r1], 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x14c17}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200410c0}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000440)=0xfffffffb) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x511201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0xc000, 0x1) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xf9, 0xfd, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) 5m7.503518642s ago: executing program 4 (id=863): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0xf, 0x84) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001580)=[{&(0x7f0000000000)=@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044015}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000400)={r5, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x8, 0x4, 0x101, r5}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x3, 0x8, 0x4, 0x101, r5}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0x6f6) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x78) r12 = socket$netlink(0x10, 0x3, 0x15) writev(r12, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 5m7.333290586s ago: executing program 4 (id=864): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001d40)='./binderfs/binder0\x00', 0x1000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x28080, 0x80, 0x20}, 0x18) faccessat2(r2, &(0x7f0000000080)='./file0\x00', 0xd6c4a0480a79b678, 0x100) (async) faccessat2(r2, &(0x7f0000000080)='./file0\x00', 0xd6c4a0480a79b678, 0x100) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x80000000, 0x4) 5m7.244124023s ago: executing program 0 (id=865): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0xe4ce, 0x200000, 0x0, 0x40002, 0x0, 0x7fffffd}) r0 = socket$netlink(0x10, 0x3, 0xb) eventfd(0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d19"], 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x7793, &(0x7f00000004c0)={0x0, 0x400251b5, 0x8000, 0x400006, 0x1324, 0x0, r1}, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=r4, @ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x103c41, 0x10) flock(r6, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="b4d073853f24bd4f55786d2b91a6d5865742aba0aec1572a404394321d3a3e61ef4f18559a74163f7e6a5f7f53e09fd883ff761eedf661298202626bb60200cccbd949391b0dfa28995d60165caa885503", 0x51}, {&(0x7f0000000b00)="2cb23f6b46204dc254f53fca6c5c1733cb8bbb90efa15afc0118f193879e4f51136afb6f6a2e521b2ba910675d6e62bc8cca781d91732f9e4d02959de0c308d455ae4d9c4a14c8e73266fa601ced703b3dd5be2aa7a79e208b8d0ed58fe8e93a89e6bb1dab48a589f54c3c87c4734604910de62a19face1ec2a7a48fe72b64a09e2c9eae22dcf50933e2582a0dc15068a3e897cc5b4127378cead8801d147925a32148ed8ea43cc4648e4309319ab6046eef10355061738e898ce157ba88431d11e9b0bbe3664317e7c740f1b86c839d99a93f854fd65d26", 0xd8}, {&(0x7f0000000c00)="fb82fe8a09eb8eeb0afc8e9725c6becd48bd1eb0a23914edbfa21453567ebb5ccedbfcb7ba5e85fba3e0b8f28b29de5af2e413d087a3551343964525a63a3db6dbd2d9fa7e9a99ce553041b75bc83077ce68b08198f6f612df34708ac1cae44a91c73684916f9c6bf398c6c27525eacff43679eec6f1202ec1b2c78dfafe6b5fae56df5da082b9681a1f92d8ac1156f3ef20182654f3583c63911aa58bc7a118ae877ae67336cadc95a5e1", 0xab}], 0x3, 0x0, 0x0, 0x20048994}}], 0x1, 0x4040040) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000021000040"]) execve(&(0x7f0000000440)='\x00', &(0x7f00000006c0)={[&(0x7f0000000480)='\x00', &(0x7f0000000540)='*(@,*\x00', &(0x7f00000005c0)='$\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='^+&($&$\x00']}, &(0x7f0000000980)={[&(0x7f0000000700)='\x00', &(0x7f0000000740)='TIPCv2\x00', &(0x7f0000000780)='(+*]\'\x00', &(0x7f00000007c0)='/dev/kvm\x00', &(0x7f0000000800)='/dev/kvm\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='\']]}', &(0x7f00000008c0)='TIPCv2\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='/dev/kvm\x00']}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) 5m7.113908636s ago: executing program 4 (id=866): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) close(r0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x220d8c, 0x4) ioctl$I2C_TENBIT(r0, 0x704, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xc7, "a1af2ffe0aca3e3e7ad6e5a6d568944f51027bb5bf64bcb392dc5cf208aef287b0ef89928f97c026a5985dabbf3a9c5a66725ed056705369c63efe8628457a284990491b6f3b5f64055c0d447220ce85e29220d5d50203aba237a0e80831ec63ca64d9f430fdb0e5a3959cdd698480378030bb7101a9bf2cddc49ccdc7f254b85a6e75c803a99fece3a2ae180a958b29b66ba32ee6fc84a7f8a2072ebec3caca0045a0eef82de4c3f8879576c1a607f57f82bc2c07a205b5feb33d6abb4bc0b0a1d98d2fe22c76"}, &(0x7f0000000200)=0xcf) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r1, 0xe, "8730392d5fc4f2f1c1321d9ca70a"}, &(0x7f0000000280)=0x16) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000002c0)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00', 0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000440)={@hyper}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000480)={r1, 0x2}, &(0x7f00000004c0)=0x8) pwrite64(r0, &(0x7f0000000500)="c2841a3a7796c64fcd0831c8abb66d5c6fd09382d9e7dd555f37be9ccc5e722ba846e250fdced3510d6f91bcd6e038da3c728da16f5dda78461981106210e559d1db6d3d022f98b17ac99a49f33beeb1b8087b865fb16c0e0dd7c59c61267d4f761ba46ecf042478c03e5ba9c982ccde7d7ce83a531e4119d3b89648c7352331c5f2d221e4c119387c3b0cdb955bbcb8cbef5f602a0a4d2674f029f803ff369bcbdb8b0c1f9b9f0875a121ce5c9ff9eca3be0ff757e4ce1bb40c196fdb9753341162ddf787e2ca36b86d232f80a69be8be6aea", 0xd3, 0xce) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000640)={r1, @in={{0x2, 0x4e24, @loopback}}, 0x2, 0x2}, &(0x7f0000000700)=0x90) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000740)=0x8008, 0x4) r6 = accept4$inet(r3, &(0x7f0000000780)={0x2, 0x0, @private}, &(0x7f00000007c0)=0x10, 0x80000) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast2, @loopback}, &(0x7f0000000840)=0xc) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000880), 0x539c00, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000008c0)={'team_slave_1\x00', @remote}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000900)={@local, 0x3f, r2}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000940)={0x35c3612c, 0x0, 0x5, 0x5, 0x1}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r0) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a00)='ns/ipc\x00') sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_FAMILY={0x5, 0xd, 0x23}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x84}}, 0x4000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xac, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x4001000) cachestat(r8, &(0x7f0000000d00)={0xffffffffffff9769, 0xbc3}, &(0x7f0000000d40), 0x0) 5m6.824708823s ago: executing program 1 (id=867): mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ceph\x00', 0x208000, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ceph\x00', 0x208000, 0x0) (async) 5m6.823918099s ago: executing program 1 (id=868): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227"], 0x4c}, 0x1, 0x0, 0x0, 0xc000400}, 0x4000) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008040}, 0x10000084) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='stats=global']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100010, &(0x7f0000000280)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}], [{@appraise}, {@appraise}]}) 5m6.734707597s ago: executing program 1 (id=869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0840c0}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0xfff}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x44) ftruncate(r0, 0xc17a) (async) ftruncate(r0, 0xc17a) socket$unix(0x1, 0x5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) 5m6.731999014s ago: executing program 1 (id=870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x361800, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000680)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) modify_ldt$write2(0x11, &(0x7f0000000000)={0xc4f, 0x20000800, 0x4000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) (async) madvise(&(0x7f0000bd9000/0x4000)=nil, 0x4000, 0x3) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 5m6.534806906s ago: executing program 2 (id=871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003a40)={0x44, r1, 0x209, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48004}, 0x4800) 5m6.352263844s ago: executing program 1 (id=872): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) 5m6.264990484s ago: executing program 2 (id=873): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3b8, 0x128, 0x0, 0x148, 0x128, 0x148, 0x320, 0x240, 0x240, 0x320, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x80}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0xc, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) socket$inet_mptcp(0x2, 0x1, 0x106) 5m6.264744159s ago: executing program 4 (id=874): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0) 5m6.170777689s ago: executing program 2 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x33) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2ac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x280, 0x4, 0x0, 0x1, [{0x27c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x270, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0x25c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5a, 0x1, "95643b52a78e85f8400687afb2142e6ddfaaae23f6ee36ac330a233c99bfbe0137ef423892892c14941585356caa25661b0b661a6620969f8714065546a0f466d45aa6548ecd13e736e3efb1e1cc60b931513a8b011a"}, @NFTA_DATA_VALUE={0x7b, 0x1, "0d55095d331ac9fbb9fafc8925a8384f7107f149189994546cefb86cab1c5fbac249a448f8208d81a79791b2d9794f64ae002a1b269cd6b67c2b33e7ab4891656474c77aa782f5291d852526cf2f78eb8a912787487f8064e69e36835bb78351fbb56dc25dcf85713a84439d2dc8c0b4b7da6da8937a4d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd1, 0x1, "42a65508840f7c63afeebc38c2302f4b3d423834e4e17cf2527363bd48bd2a4bfe4176c37be091c5852d6631ca0e87e0cd26d48fe2fafff64df63b66ca8f2531cb6baa8181b494514ed9b45dfd04305ca4383fec09f42dacab3aa057e4277ee8bdcf2515c70066b718a5c68b06598b7344023d9a40253d80ca0d2ba0805d98a03889b0865c6b6c45008abc218eb8313a9059f95d559d9b76b2078bc8e1c15d30132b93658b0f3fb478ed12bfb6db7b69e26b64cb40091a0a99524932f0126cee46e42f7ce6cbd36ea8e1bc3b4d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x2d4}, 0x1, 0x0, 0x0, 0x801}, 0x0) 5m6.1681801s ago: executing program 4 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000002590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r3 = socket$kcm(0x11, 0x3, 0x0) getuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440), 0x18}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) 5m5.051376537s ago: executing program 1 (id=877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}, 0xf0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00d1a370460480ef0a314c9d61c4a716d97ce276a4d4b334040cbafd9cacd865af6d4beace2378da5356707b32"], 0x40}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00d1a370460480ef0a314c9d61c4a716d97ce276a4d4b334040cbafd9cacd865af6d4beace2378da5356707b32"], 0x40}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x800, 0x7, 0x9}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0}, &(0x7f00000005c0)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r8, 0x25, 0x2, @val=@tracing}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010029bd7000fcdbdf2500000040", @ANYRES32=0x0, @ANYBLOB="3a8904000a00000008001b00000000000c002b8008000100", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010029bd7000fcdbdf2500000040", @ANYRES32=0x0, @ANYBLOB="3a8904000a00000008001b00000000000c002b8008000100", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={r3, 0xfd8, 0xdf4a}, &(0x7f00000006c0)=0x8) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000400)={r3, 0xe8, "c72c6efed0a23d18ebe0f3a405cb30ebe5382dd849b2cc566ff5ae03c20ee7549ee0b5ff313cb163b15438fdcdc4b53658d25b30b02365a3d3806768b76b4833f3694dc3892797156fce2caf3a0980428da82ca1fd9b338a86e2e21d6ad64e69fc64b003069bb3f6a5861e96c3d372e62dd99c7fa6d3b2c2e0ed0d0660c14396868bd00eb65771291c03e12dce1a28f376c23f93911fa704d5d92a9cbf110d9dcbf37320bdddcb964891488799ee495f322874b6e45de848c17d60a3e47a3e006b0cdcc2622084e104500302aa4fb1376b06b2e769802dc1426d7aac664808959510062f092332ec"}, &(0x7f0000000500)=0xf0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x8010) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x8010) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e22, 0x5, @private2, 0xf}}, 0x7fffffff, 0x0, 0xf8, 0x800, 0x6}, &(0x7f0000000240)=0x98) 5m4.432712896s ago: executing program 2 (id=878): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="6275e799e64b33fa61819f71cc9cfc108efbf561b11cec80079a0709adeeac5ad3cf5b1fefdf0810f2d4b6ba7025909c43cca9c2848790551461e14100eefefa9312992a198401c42b2332571a88b6cd07e8ed148733061b94e2e274722f9d09db78d2f70bc4272561d80b4c6c02c2f90529476231b68e491dc81e24c26cd46a7711915629ff69438fc8aba29ebf458b2556308b7c3dc166b9c95b557d", 0x9d}, {&(0x7f0000000400)="d5f585dfd47785f88866971382623906dae9a77ba994117098e3148e17997bf5a36782e519db6bb5016ec58b7306ac061c234269f742444fb46442ab49f8525db45119f8ad4b2438b774d490df4fc4dac04fe6cfefb2d3d62ee2368f65e806f44f936b505b67731e490e8479c5788ea0f91250a25fc4a74759a1b5fe6167aa2376ebcf559dce954f5e105464f51781e13a63aee9d943ad1d4933d2f2e6b2fa49da9231039967a6e318cc5c625403ea56d6f9f210d11f8259819e0f67226eab4d86310c4dd4b55da1bbebc0b8db386e9dd8b92f8e3b070a79178446ee7a9346", 0xdf}, {&(0x7f0000000180)}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/528], 0x210}}], 0x1, 0x40080c0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) rt_sigaction(0x1d, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000540)=[{r0, 0x20}, {r2, 0x1100}, {r3, 0x4000}, {r0, 0xa100}], 0x4, 0xffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x2, 0x4}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000580)=0x1310805, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x8, r10}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x25, r8}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 5m2.783203542s ago: executing program 4 (id=879): r0 = socket$rds(0x15, 0x5, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@rdma_args={0x48, 0x114, 0x1, {{0xfff, 0x6}, {&(0x7f0000001640)=""/4096, 0x1000}, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/92, 0xb7}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000006c0)=""/193, 0xc1}, {&(0x7f0000002640)=""/4096}, {&(0x7f0000000540)=""/186}, {&(0x7f0000003640)=""/4096}], 0x4, 0x59, 0x7b}}], 0x48, 0x4000004}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r4], 0x190}}, 0x4000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1\x00'}}, 0x1e) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89901) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) move_mount(r7, 0x0, r6, 0x0, 0x46) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r10, r10}, 0xc) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x8001) r13 = getpgid(0x0) fcntl$setownex(r12, 0xf, &(0x7f0000000140)={0x2, r13}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 5m0.261801074s ago: executing program 0 (id=880): r0 = fanotify_init(0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\b\x00('}}]}}) (rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) (async) lstat(0x0, 0x0) 4m42.930195781s ago: executing program 33 (id=877): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x22}], 0x1}, 0xf0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00d1a370460480ef0a314c9d61c4a716d97ce276a4d4b334040cbafd9cacd865af6d4beace2378da5356707b32"], 0x40}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffff8, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd70008400006206000000080009000200000008000c00d1a370460480ef0a314c9d61c4a716d97ce276a4d4b334040cbafd9cacd865af6d4beace2378da5356707b32"], 0x40}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x800, 0x7, 0x9}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100), &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0}, &(0x7f00000005c0)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r8, 0x25, 0x2, @val=@tracing}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010029bd7000fcdbdf2500000040", @ANYRES32=0x0, @ANYBLOB="3a8904000a00000008001b00000000000c002b8008000100", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010029bd7000fcdbdf2500000040", @ANYRES32=0x0, @ANYBLOB="3a8904000a00000008001b00000000000c002b8008000100", @ANYRES32=r10], 0x34}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={r3, 0xfd8, 0xdf4a}, &(0x7f00000006c0)=0x8) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r11, 0x84, 0x6c, &(0x7f0000000400)={r3, 0xe8, "c72c6efed0a23d18ebe0f3a405cb30ebe5382dd849b2cc566ff5ae03c20ee7549ee0b5ff313cb163b15438fdcdc4b53658d25b30b02365a3d3806768b76b4833f3694dc3892797156fce2caf3a0980428da82ca1fd9b338a86e2e21d6ad64e69fc64b003069bb3f6a5861e96c3d372e62dd99c7fa6d3b2c2e0ed0d0660c14396868bd00eb65771291c03e12dce1a28f376c23f93911fa704d5d92a9cbf110d9dcbf37320bdddcb964891488799ee495f322874b6e45de848c17d60a3e47a3e006b0cdcc2622084e104500302aa4fb1376b06b2e769802dc1426d7aac664808959510062f092332ec"}, &(0x7f0000000500)=0xf0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x8010) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x8010) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e22, 0x5, @private2, 0xf}}, 0x7fffffff, 0x0, 0xf8, 0x800, 0x6}, &(0x7f0000000240)=0x98) 4m28.040505641s ago: executing program 34 (id=880): r0 = fanotify_init(0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000140)={'trans=virtio,', {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\b\x00('}}]}}) (rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) (async) lstat(0x0, 0x0) 3m35.866175415s ago: executing program 35 (id=878): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="6275e799e64b33fa61819f71cc9cfc108efbf561b11cec80079a0709adeeac5ad3cf5b1fefdf0810f2d4b6ba7025909c43cca9c2848790551461e14100eefefa9312992a198401c42b2332571a88b6cd07e8ed148733061b94e2e274722f9d09db78d2f70bc4272561d80b4c6c02c2f90529476231b68e491dc81e24c26cd46a7711915629ff69438fc8aba29ebf458b2556308b7c3dc166b9c95b557d", 0x9d}, {&(0x7f0000000400)="d5f585dfd47785f88866971382623906dae9a77ba994117098e3148e17997bf5a36782e519db6bb5016ec58b7306ac061c234269f742444fb46442ab49f8525db45119f8ad4b2438b774d490df4fc4dac04fe6cfefb2d3d62ee2368f65e806f44f936b505b67731e490e8479c5788ea0f91250a25fc4a74759a1b5fe6167aa2376ebcf559dce954f5e105464f51781e13a63aee9d943ad1d4933d2f2e6b2fa49da9231039967a6e318cc5c625403ea56d6f9f210d11f8259819e0f67226eab4d86310c4dd4b55da1bbebc0b8db386e9dd8b92f8e3b070a79178446ee7a9346", 0xdf}, {&(0x7f0000000180)}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/528], 0x210}}], 0x1, 0x40080c0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) rt_sigaction(0x1d, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000540)=[{r0, 0x20}, {r2, 0x1100}, {r3, 0x4000}, {r0, 0xa100}], 0x4, 0xffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x2, 0x4}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000580)=0x1310805, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x8, r10}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x25, r8}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) 2m50.181835419s ago: executing program 36 (id=879): r0 = socket$rds(0x15, 0x5, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@rdma_args={0x48, 0x114, 0x1, {{0xfff, 0x6}, {&(0x7f0000001640)=""/4096, 0x1000}, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/92, 0xb7}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000006c0)=""/193, 0xc1}, {&(0x7f0000002640)=""/4096}, {&(0x7f0000000540)=""/186}, {&(0x7f0000003640)=""/4096}], 0x4, 0x59, 0x7b}}], 0x48, 0x4000004}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r4], 0x190}}, 0x4000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1\x00'}}, 0x1e) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x89901) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) move_mount(r7, 0x0, r6, 0x0, 0x46) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r10, r10}, 0xc) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r12, 0x5452, &(0x7f0000000040)=0x8001) r13 = getpgid(0x0) fcntl$setownex(r12, 0xf, &(0x7f0000000140)={0x2, r13}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 2m6.332846385s ago: executing program 7 (id=1154): socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mprotect(&(0x7f0000832000/0x3000)=nil, 0x3000, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000fef000/0x10000)=nil, 0x6) 2m6.123031337s ago: executing program 7 (id=1155): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async, rerun: 32) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f00000000c0)=0x2) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000ffffffff0000000000000000fc020000000000000000000000000000640101020000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c0400000200000002000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4e21, 0x8966, 0x0, 0xfff9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x9, 0x4, 0x0, 0x80000000, 0x100000000006, 0x9, 0x4, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@loopback, 0x1, 0x32}, 0x2, @in6=@mcast2, 0x34ff, 0x4, 0x3, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251b000000100008000c0004000201aaaaaaaaaaea0c00f1ff0000000001000000"], 0x30}, 0x1, 0x0, 0x0, 0xc0c5}, 0x4) 2m5.722404163s ago: executing program 7 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000100)) write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003404000100e140010"], 0x80}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x300, 0x70bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000100)) (async) write$binfmt_script(r3, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003404000100e140010"], 0x80}}, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) 2m5.603325809s ago: executing program 7 (id=1160): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0xdc0450e999c92311, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000400)="140000001a005f7fb3e45f2024d21206013a5914", 0x14) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0, 0x41}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x694, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6cac043c06562f01fc00000000000000000000000000000000000000000000000000ffff0a010101161f00000000000009f4fe3a98bc10e540a89ba9fb07ecb68b265159e142b9e8e7841d4645ef2718cf7db1c71685e5d924c2b2ae680dcd4b6deca4cc16ac92ca162d3eb2af3576b7768f19b67be8680954551c5232a31eb4f4fa994904cbd928781ddd1225835610b998c1e4fd8ef282f2ef7cbf74af99f85a537b31a4754e377112d036697bb9e3dcb96ec8fe99c97b2cf6c3896d2ca435b3bad1db5359669795dfb9480fdf0abd51e8d750f0f98cfc86e3dfb28d2245f1615fd69b88338585826e6def31acc28fbd44c9d32bb7d2ca447f0a957c71eb4752cb428ceffdc53d0df1e5e642849e2571cf68d3a7f309926365dac204000000070000000021060000000000004021eba1ef3480c8b36e38d548fc11605d45f2f7472c354ab608da78d588cbd080e82907100000000002010d00050000000000000000000033010000000000000102000004010e010100000000000000040005f9650000000806021000000000fc0000000000000000000000000000012001000000000000000000000000000000000000000000aa1106020000000000fe8000000000000000060000000000aa20010000000000000000000000000001fe8000000000000000000000000000aa3201000000000000c20400000101050200070000000000003210028100000000fc0200000000000000000000000000010000000000000000000000000000000120010000000000000000000000000000fe8000000000000000000000000000aaffe5000000000046750000000000000100000000000000000000ffff7f000001fc010000000000000000000000000001fe880000000000000000000000000401a313000000000000010100088f13c04a057899e9cc62504f22124f9eb27040193040f244ea03b89b605c0a110aa89def5f44bdd21f8a0b1e14c22a32d0bf8cbae46534cf0c7874a2aea13499f8f1cc57672755dc5662a4de2c36b146a95ba6ab819d41ba4a710b7e2fb3621813455666bd5e0776bc4ad07e6d07dd6c8764e6a7f54ce92a03dd0c30941975b02490155052422435282c792ea7b608296917e78cd5907a53efcb1c9665040101c204000000070000000421880b009600010006ae4afd7b28a5cc047a45de11d0ecd29308e00ad4904460739f7d6dd4e0e047c193fe66f21a50ac604aef3caa4def60b76e319b1ad7dd0bc45a4f7115f2e95d1fdfcbb083561d785fcf3cd3d4416130d0e273e2bb228365670225f6fe2b15f6a0fc929bdedb2dc226eaaa46d52434deae0862ecb5d3a747816f8c13dddc4f28a884dbb5a81a71554eab03c0ef6fdeb071a127e9d3f47e0900080000080008dedc3613fab3af7c16864b1a9e63cf47043b3ee171301257e79df4ed85ad5be5d13a6c528a3af99a07f2f515f559872c46f08c4c578b27645aed31824608189cad664e826c555fee89ebe60e3f22968be6aea889f3705930668e2734a1169a324d0b519d64f06813e8b61cbd7430b758b4aace4866831fbbff190b07cb59accd889b72be7032e56088bbca858b297726be278812f8279697f96f0042a3257d62db55c04fb97207e4478af857eb575ff36e82d43ee547e483e35671e980080086dd062939985abc02d04339a5862c63fc1f66a8663fc719ad8c4186771474528c1c5084307dd9e7852451eca65d1f5d46bdede032e5b74458c4fd1e672ebfe8e9a7e294d27357bec186bf243a7ae320a1668e475df6345a4527a729aed2ebe22bf249af0e002c6e9393f8bf4d7d1caf6383a9956a788e3d6d0eb694dd03e449d3e61e72cdb120b87701cf424ccc26c98cd7d0d8ab66ffa1ee49dc3e4cc5b767ec7572407acade1e10ca08e085d45bbc8ce82efdbd14821985d2b520e9ddb7fe92e817306ff84ab1129deaf985ce65d0f7d256c452fe61723be8d6c202f3be78b7680521c5caff5119b5345c8b5fcb080088be000000001800cd0a0100000000000008080022eb000000042108e7020200000000000008fff90d000800655800000002bfef506511da0d3af3666c3a5e31a1ca4c5cb513d4a8a128af1d326c31619ccffe4ce9e1af9c6dcec716b24adb7856889f8b3dc9c4f9219d3927e1c4cbb4c3782503bf1dd5df5c88037d757b55483ce77473043767f2f553abf936999cc557383afe83f938a764f1b6a67ae0b7c25891d9c9100b5d188df1c6c3b9a385b5321351d0d1f2d1bb162317de51fb49cafd1eb4d26fcb698b284d45e241a05552775cb1acd83910ec53fe27a9b5de0a819ad8e69aa4e688c270fe013bded87c6df92252b92f643e245d21a7818b3b7d6c10a286f105a3a10f666bdbe5fdac95ad856f21ca27d39951f1a38a65c76bc4e3d2bc92490a44efa5c33e23238f238764c4cf3ed45d0f74a87e35be7e2fb5ec9cb0dc4c9083d7f0c4f723560b1ec20d9bf28fbf0cac13dff3e386aaf62b07e23b4b3bc83aca"], 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x3, 0xff, 0x4f424752, 0x7, 0xa, [{0x419, 0x9}, {0xfffffff9}, {0x3ff, 0x8}, {0x5, 0x4aa}, {0x1, 0x500}, {0xfffffffb, 0x91}, {0x1, 0x8}, {0xf, 0x4}], 0x3, 0x3, 0x3, 0x2}}) 2m5.321761254s ago: executing program 7 (id=1168): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0xd, 0x5b, 0x2, 0x52, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, 0x80, 0x1, 0x3, 0x101}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@private=0xa010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x2, 0x4e20, 0xff, 0x0, 0x90, 0x20, 0x3a, r2, r5}, {0xfffffffffffffe63, 0x0, 0x4, 0x6, 0x4, 0xff, 0x8001, 0x80}, {0x5, 0xffffffff, 0x8, 0xcc}, 0x7f, 0x6e6bbd, 0x2, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x6c}, 0x2, @in6=@local, 0x3507, 0x3, 0x1, 0x47, 0x0, 0x38, 0xffffffb0}}, 0xe8) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 2m5.265200429s ago: executing program 7 (id=1170): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'pim6reg\x00'}) write$sysctl(r0, &(0x7f0000000080)='3\x00', 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/178, 0xb2, 0x0, &(0x7f0000000180)=""/17, 0x11}, &(0x7f0000000200)=0x40) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000380)={0x7fff, 0x1, 0x1, 'queue0\x00', 0x31}) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000440)="889c65af3787ecc6c115cd53cdf664791f36511b92212d44f341d2c382717832fb357fe2051e14afdf3a5545a94717b62b54ec8305ac244043a9ab5e70714223cde071e316aac87f40e68430fcc524ff3bb1b0d9bf22c2e3fe9f6e2771a9677e99056dcd11ada169e7a994f5f1903ad4e7329e16a38012f3c4938e55aa5ad0faef30ed6f0d22cb8e409358dd68640db3613d4eec7cbcb4eaddd18c5863ec4e6d083fb3454e682d6824b3a3665eead24721d79061d788d597fdb174bb8f601d1e00782f56e80a38dbe744ef", 0xcb}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000005c0), &(0x7f0000000600)={'U+', 0x800}, 0x16, 0x2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000640)={0x1, 0x7, [@link_local, @empty, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @local, @multicast]}) r2 = openat(r0, &(0x7f0000000680)='./file0\x00', 0x8100, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xdfc, 0xe100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x32, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x88, 0xff, 0x1, {0x22, 0x36a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb9, 0x81, 0x8}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0xfe, 0xca, 0x5, 0x10}, 0x18, &(0x7f0000000740)={0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x6, 0xf00f, 0xec21, [0x3fc0]}]}, 0x3, [{0xb5, &(0x7f0000000780)=@string={0xb5, 0x3, "4035bd25d8cdba0f91350ee50ef9a98a61bec3e734be82600e5aa9222b378882930eb3352778c4e11a2897829a72470a7e5850ec5ec8d7964c24fd704c9b4a76ca1ae95d5b36d809476fec01952a9b4258814790d986930e858265efa9e61e92fa0bf007b3ca94dfe22078a65392a530b9d0cf24fef61d63940ad21d0610a7181055836ea4e955ab034b7a2a14b2bb5b39c4a940860e203c1e69be48e92b218b05ec13d7377cd64bdbd96d1db082b525f39205"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x439}}]}) write$cgroup_pid(r0, &(0x7f0000000900), 0x12) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000940)={0x7, 0x2}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000980)={0x2625, 0xeeee8000, 0x1, r2, 0x8}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000009c0)=0x7, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff00000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x4880) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x27792739949c91a5}, 0x80) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000d00)=0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d80)={'ip6erspan0\x00', &(0x7f0000000d40)=@ethtool_cmd={0x4b, 0xfffffffd, 0x400, 0x7, 0xdb, 0x42, 0xa, 0x0, 0x8, 0xb, 0x1000, 0xfff, 0x5, 0x10, 0x81, 0xd, [0x1, 0x2]}}) fstatfs(r4, &(0x7f0000000dc0)=""/134) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x98, r6, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x4040005) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f0000001000)={0x9f, 0x0, 0x1}) 1m49.998375758s ago: executing program 37 (id=1170): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'pim6reg\x00'}) write$sysctl(r0, &(0x7f0000000080)='3\x00', 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/178, 0xb2, 0x0, &(0x7f0000000180)=""/17, 0x11}, &(0x7f0000000200)=0x40) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000380)={0x7fff, 0x1, 0x1, 'queue0\x00', 0x31}) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000440)="889c65af3787ecc6c115cd53cdf664791f36511b92212d44f341d2c382717832fb357fe2051e14afdf3a5545a94717b62b54ec8305ac244043a9ab5e70714223cde071e316aac87f40e68430fcc524ff3bb1b0d9bf22c2e3fe9f6e2771a9677e99056dcd11ada169e7a994f5f1903ad4e7329e16a38012f3c4938e55aa5ad0faef30ed6f0d22cb8e409358dd68640db3613d4eec7cbcb4eaddd18c5863ec4e6d083fb3454e682d6824b3a3665eead24721d79061d788d597fdb174bb8f601d1e00782f56e80a38dbe744ef", 0xcb}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000005c0), &(0x7f0000000600)={'U+', 0x800}, 0x16, 0x2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000640)={0x1, 0x7, [@link_local, @empty, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @local, @multicast]}) r2 = openat(r0, &(0x7f0000000680)='./file0\x00', 0x8100, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0xdfc, 0xe100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x32, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x88, 0xff, 0x1, {0x22, 0x36a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb9, 0x81, 0x8}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0xfe, 0xca, 0x5, 0x10}, 0x18, &(0x7f0000000740)={0x5, 0xf, 0x18, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x6, 0xf00f, 0xec21, [0x3fc0]}]}, 0x3, [{0xb5, &(0x7f0000000780)=@string={0xb5, 0x3, "4035bd25d8cdba0f91350ee50ef9a98a61bec3e734be82600e5aa9222b378882930eb3352778c4e11a2897829a72470a7e5850ec5ec8d7964c24fd704c9b4a76ca1ae95d5b36d809476fec01952a9b4258814790d986930e858265efa9e61e92fa0bf007b3ca94dfe22078a65392a530b9d0cf24fef61d63940ad21d0610a7181055836ea4e955ab034b7a2a14b2bb5b39c4a940860e203c1e69be48e92b218b05ec13d7377cd64bdbd96d1db082b525f39205"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x439}}]}) write$cgroup_pid(r0, &(0x7f0000000900), 0x12) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000940)={0x7, 0x2}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000980)={0x2625, 0xeeee8000, 0x1, r2, 0x8}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000009c0)=0x7, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff00000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044001}, 0x4880) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r6, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x27792739949c91a5}, 0x80) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000d00)=0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000d80)={'ip6erspan0\x00', &(0x7f0000000d40)=@ethtool_cmd={0x4b, 0xfffffffd, 0x400, 0x7, 0xdb, 0x42, 0xa, 0x0, 0x8, 0xb, 0x1000, 0xfff, 0x5, 0x10, 0x81, 0xd, [0x1, 0x2]}}) fstatfs(r4, &(0x7f0000000dc0)=""/134) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x98, r6, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x36}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x44000}, 0x4040005) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f0000001000)={0x9f, 0x0, 0x1}) 4.311658812s ago: executing program 6 (id=2460): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) ppoll(&(0x7f00000007c0)=[{0xffffffffffffffff, 0x4040}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0d, &(0x7f0000000040)) 3.939471998s ago: executing program 8 (id=2463): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.061827463s ago: executing program 8 (id=2464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000006000000010000000100000000df76efbcf8a7196c06f96ce31512131747587b52d3a92fcd0ea22d92d90d27e3ec56d8dd6d2288cee964046ac9877d055f8b497eaa69332712f501906592513c69c10d273334e5afb0f9cfb66193db4005d3160edd5bd7c48e9c4ae6ebd633ccc21450a23a5e9e2e6c171a21a5e66248b3bab436b0b94d3e140415cd09ba2fd4655b6c66afba35e652516cf11f84c970654b0977e88ef8ab3d8a3ea30e8dc3d00019ee8244", @ANYRES8, @ANYRES8=r0, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 2.42153258s ago: executing program 9 (id=2471): socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x10000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0x1, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.151571737s ago: executing program 8 (id=2472): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 2.150672785s ago: executing program 9 (id=2473): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f000000fa00)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001880)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.51170537s ago: executing program 5 (id=2477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x5}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.401558661s ago: executing program 8 (id=2478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000500), 0x0, 0x4004441) fsmount(0xffffffffffffffff, 0x1, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES16=r2], 0x10) sendmsg$inet(r0, 0x0, 0x40800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) socket$netlink(0x10, 0x3, 0x0) 1.341952331s ago: executing program 5 (id=2479): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)='d'}) 1.341543999s ago: executing program 5 (id=2480): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, 0x0, 0x0) 1.275240037s ago: executing program 6 (id=2481): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeed, 0x8031, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f0000000140)=""/179, 0xb3) 1.220681703s ago: executing program 9 (id=2482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.031681786s ago: executing program 6 (id=2483): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff070000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.031493801s ago: executing program 5 (id=2484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x500, 0x0, 0x1c, {[@timestamp={0x5, 0xa, 0xfffe, 0x88000}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4a) 1.031273887s ago: executing program 6 (id=2485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r0, r0, 0x2, r2, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080001000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) 961.800682ms ago: executing program 9 (id=2486): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$ax25(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x50) chdir(0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) syz_pidfd_open(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socket(0x28, 0x5, 0x0) 851.989195ms ago: executing program 5 (id=2487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x5}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 741.519064ms ago: executing program 5 (id=2488): r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x100, @multicast2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) prctl$PR_SET_NAME(0xf, 0x0) 501.533113ms ago: executing program 8 (id=2489): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYBLOB="0000000000000100200012"], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 71.190485ms ago: executing program 6 (id=2490): accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 71.023497ms ago: executing program 9 (id=2491): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x41}, 0x8}], 0x1c) 70.850233ms ago: executing program 6 (id=2492): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x40003, 0x10, 0x5}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 254.5µs ago: executing program 8 (id=2493): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x9, 0x47a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) 0s ago: executing program 9 (id=2494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): [T10788] IPVS: using max 44 ests per chain, 105600 per kthread [ 341.377923][T10794] loop6: detected capacity change from 0 to 7 [ 341.380627][T10794] Dev loop6: unable to read RDB block 7 [ 341.382548][T10794] loop6: unable to read partition table [ 341.385094][T10794] loop6: partition table beyond EOD, truncated [ 341.390301][T10794] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.921920][ T29] usb 13-1: USB disconnect, device number 10 [ 341.954620][T10800] __nla_validate_parse: 4 callbacks suppressed [ 341.954631][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1303'. [ 342.319681][T10813] tipc: Enabled bearer , priority 0 [ 342.322217][T10813] syzkaller0: entered promiscuous mode [ 342.323939][T10813] syzkaller0: entered allmulticast mode [ 342.339827][T10813] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 342.350208][T10813] tipc: Resetting bearer [ 342.353996][T10812] tipc: Resetting bearer [ 342.364273][T10812] tipc: Disabling bearer [ 342.397452][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.556596][T10821] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 342.567966][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 342.569270][ T5296] Bluetooth: hci2: command 0x0406 tx timeout [ 342.569285][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 342.579177][T10821] sp0: Synchronizing with TNC [ 342.601659][T10818] /dev/sr0: Can't open blockdev [ 342.704920][ T40] audit: type=1800 audit(5282262734.522:787): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1316" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 342.742663][T10836] netlink: 196 bytes leftover after parsing attributes in process `syz.8.1317'. [ 342.831806][T10846] virtio-fs: tag not found [ 343.263198][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1323'. [ 343.443462][ T40] audit: type=1400 audit(5282262735.262:788): avc: denied { getopt } for pid=10876 comm="syz.5.1330" lport=46459 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 343.504924][T10884] net_ratelimit: 1 callbacks suppressed [ 343.504936][T10884] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 343.524387][T10883] tipc: Enabled bearer , priority 0 [ 343.529617][T10883] syzkaller0: entered promiscuous mode [ 343.531423][T10883] syzkaller0: entered allmulticast mode [ 343.539685][T10883] tipc: Resetting bearer [ 343.557462][T10883] tipc: Disabling bearer [ 344.477812][ T5296] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.553161][ T40] audit: type=1800 audit(5282262736.372:789): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1338" name="file1" dev="tmpfs" ino=708 res=0 errno=0 [ 344.639711][ T5296] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.639890][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 344.642358][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 345.359585][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.363888][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.367010][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.371827][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.374758][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.434976][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1349'. [ 345.463167][ T40] audit: type=1400 audit(5282262737.282:790): avc: denied { allowed } for pid=10923 comm="syz.8.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 345.476196][ T40] audit: type=1400 audit(5282262737.292:791): avc: denied { ioctl } for pid=10923 comm="syz.8.1348" path="socket:[39862]" dev="sockfs" ino=39862 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 345.592996][T10926] chnl_net:caif_netlink_parms(): no params data found [ 345.688434][ T8567] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 345.694356][ T8567] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.813227][ T1338] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 345.862599][ T8567] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 345.865608][ T8567] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.871455][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.873755][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.876041][T10926] bridge_slave_0: entered allmulticast mode [ 345.878929][T10926] bridge_slave_0: entered promiscuous mode [ 345.882125][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.884496][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.886738][T10926] bridge_slave_1: entered allmulticast mode [ 345.890511][T10926] bridge_slave_1: entered promiscuous mode [ 345.892952][T10950] syz_tun: entered allmulticast mode [ 345.926182][T10950] pimreg: entered allmulticast mode [ 345.947570][T10926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.952572][ T8567] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 345.955264][ T8567] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.961520][T10926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.997532][ T1338] usb 11-1: Using ep0 maxpacket: 8 [ 346.003324][T10926] team0: Port device team_slave_0 added [ 346.004293][ T1338] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 346.005958][T10949] syz_tun: left allmulticast mode [ 346.012417][T10949] pimreg: left allmulticast mode [ 346.013062][ T1338] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 346.018083][ T1338] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 346.022066][ T1338] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.027434][ T1338] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.031099][ T1338] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.054967][T10926] team0: Port device team_slave_1 added [ 346.060134][ T8567] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 346.064466][ T8567] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.172044][T10926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.174906][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.185705][T10926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.193415][T10926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.196643][T10926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.208906][T10926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.254922][ T1338] usb 11-1: usb_control_msg returned -32 [ 346.257920][ T1338] usbtmc 11-1:16.0: can't read capabilities [ 346.301965][T10970] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1365'. [ 346.337492][T10926] hsr_slave_0: entered promiscuous mode [ 346.340823][T10926] hsr_slave_1: entered promiscuous mode [ 346.345280][T10970] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1365'. [ 346.453649][ T8567] bridge_slave_1: left allmulticast mode [ 346.456370][ T8567] bridge_slave_1: left promiscuous mode [ 346.460558][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.469503][ T8567] bridge_slave_0: left allmulticast mode [ 346.471977][ T8567] bridge_slave_0: left promiscuous mode [ 346.474518][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.572767][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1370'. [ 346.577688][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 346.637511][ T1338] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 346.657298][ C2] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 346.669024][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1351'. [ 346.717466][ T5942] Bluetooth: hci3: command 0x0405 tx timeout [ 346.717554][ T5296] Bluetooth: hci1: command 0x0c1a tx timeout [ 346.797478][ T1338] usb 13-1: Using ep0 maxpacket: 16 [ 346.801307][ T1338] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 346.805828][ T1338] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 346.810349][ T1338] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.815777][ T1338] usb 13-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 346.819717][ T1338] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.825916][ T1338] usb 13-1: config 0 descriptor?? [ 346.833401][ T1338] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input22 [ 346.999435][ T8567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.004486][ T8567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.011930][ T8567] bond0 (unregistering): Released all slaves [ 347.035756][ T29] usb 13-1: USB disconnect, device number 11 [ 347.188892][T10926] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 347.194851][T10926] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 347.202789][T10926] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 347.220192][T10926] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 347.329095][ T8567] hsr_slave_0: left promiscuous mode [ 347.332906][ T8567] hsr_slave_1: left promiscuous mode [ 347.335687][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.341185][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.345473][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.348997][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.380202][ T8567] veth1_macvtap: left promiscuous mode [ 347.382339][ T8567] veth0_macvtap: left promiscuous mode [ 347.384502][ T8567] veth1_vlan: left promiscuous mode [ 347.386459][ T8567] veth0_vlan: left promiscuous mode [ 347.437455][ T5296] Bluetooth: hci4: command tx timeout [ 348.200911][ T8567] team0 (unregistering): Port device team_slave_1 removed [ 348.284848][ T8567] team0 (unregistering): Port device team_slave_0 removed [ 348.556329][ T1338] usb 11-1: USB disconnect, device number 6 [ 348.861682][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.870653][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.878128][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.880338][ T6621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.883837][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.886065][ T6621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.957583][ T1338] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 349.042725][T10926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.109082][ T1338] usb 11-1: config 5 has an invalid interface number: 3 but max is 0 [ 349.118197][ T1338] usb 11-1: config 5 has no interface number 0 [ 349.126020][ T1338] usb 11-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 349.141096][ T1338] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.149465][ T1338] usb 11-1: Product: syz [ 349.151163][ T1338] usb 11-1: Manufacturer: syz [ 349.153007][ T1338] usb 11-1: SerialNumber: syz [ 349.170047][ T1338] ftdi_sio 11-1:5.3: FTDI USB Serial Device converter detected [ 349.174038][ T1338] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 349.263665][T10926] veth0_vlan: entered promiscuous mode [ 349.271187][T10926] veth1_vlan: entered promiscuous mode [ 349.291075][T10926] veth0_macvtap: entered promiscuous mode [ 349.294751][T10926] veth1_macvtap: entered promiscuous mode [ 349.304835][T10926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.311080][T10926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.318514][ T8567] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.322237][ T8567] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.327744][ T8567] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.330805][ T8567] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.371814][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1379'. [ 349.384399][T11024] team_slave_0: entered promiscuous mode [ 349.387035][T11024] team_slave_1: entered promiscuous mode [ 349.389102][T11024] macvtap1: entered promiscuous mode [ 349.390752][T11024] team0: entered promiscuous mode [ 349.392557][T11024] macvtap1: entered allmulticast mode [ 349.394217][T11024] team0: entered allmulticast mode [ 349.395751][T11024] team_slave_0: entered allmulticast mode [ 349.397839][T11024] team_slave_1: entered allmulticast mode [ 349.401019][T11024] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 349.413346][T11024] team0: left allmulticast mode [ 349.415364][T11024] team_slave_0: left allmulticast mode [ 349.417821][T11024] team_slave_1: left allmulticast mode [ 349.420065][T11024] team0: left promiscuous mode [ 349.422603][T11024] team_slave_0: left promiscuous mode [ 349.425298][T11024] team_slave_1: left promiscuous mode [ 349.431520][ T55] usb 11-1: USB disconnect, device number 7 [ 349.438125][ T55] ftdi_sio 11-1:5.3: device disconnected [ 349.454928][ T8580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.459182][ T8580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.476537][ T8580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.477465][ T53] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 349.481623][ T8580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.527521][ T5296] Bluetooth: hci4: command tx timeout [ 349.566221][T11062] bridge0: port 3(syz_tun) entered blocking state [ 349.569200][T11062] bridge0: port 3(syz_tun) entered disabled state [ 349.571867][T11062] syz_tun: entered allmulticast mode [ 349.574584][T11062] syz_tun: entered promiscuous mode [ 349.576738][T11062] bridge0: port 3(syz_tun) entered blocking state [ 349.579157][T11062] bridge0: port 3(syz_tun) entered forwarding state [ 349.584325][T11062] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 349.648242][ T53] usb 10-1: Using ep0 maxpacket: 8 [ 349.651376][ T53] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 349.654206][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.658791][ T53] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.662897][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.666797][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.671566][ T53] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 349.674312][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.678656][ T53] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.682991][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.686968][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.692761][ T53] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 349.695537][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 349.699654][ T53] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.703833][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.707983][ T53] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 349.714231][ T53] usb 10-1: string descriptor 0 read error: -22 [ 349.716603][ T53] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 349.719985][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.740193][ T53] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 349.817008][T11072] misc userio: The device must be registered before sending interrupts [ 350.058027][ T6027] usb 14-1: new low-speed USB device number 2 using dummy_hcd [ 350.210000][ T6027] usb 14-1: No LPM exit latency info found, disabling LPM. [ 350.217154][ T6027] usb 14-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 350.221116][ T6027] usb 14-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 350.224395][ T6027] usb 14-1: config 1 interface 0 has no altsetting 0 [ 350.229444][ T6027] usb 14-1: string descriptor 0 read error: -22 [ 350.231386][ T6027] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 350.234083][ T6027] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.241666][T11072] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 350.243914][T11072] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 350.456579][ T55] usb 14-1: USB disconnect, device number 2 [ 351.435303][T11112] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.607778][ T5296] Bluetooth: hci4: command tx timeout [ 351.640254][ T40] audit: type=1400 audit(5282262743.462:792): avc: denied { accept } for pid=11118 comm="syz.8.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 351.744068][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1407'. [ 351.998321][ T937] usb 10-1: USB disconnect, device number 6 [ 352.267512][ T3252] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 352.437408][ T3252] usb 14-1: Using ep0 maxpacket: 32 [ 352.440993][ T3252] usb 14-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 352.444218][ T3252] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.448523][ T3252] usb 14-1: config 0 descriptor?? [ 352.550523][T11146] netlink: 'syz.8.1415': attribute type 1 has an invalid length. [ 352.653072][ T3252] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 352.658219][T11137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.663727][T11137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.664424][ T3252] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 352.668890][ T3252] dib0700: firmware download failed at 7 with -22 [ 352.676447][T11137] random: crng reseeded on system resumption [ 352.702609][T11154] trusted_key: syz.8.1419 sent an empty control message without MSG_MORE. [ 352.738891][ T6004] usb 14-1: USB disconnect, device number 3 [ 352.881997][T11160] x_tables: ip_tables: osf match: only valid for protocol 6 [ 353.311986][ T40] audit: type=1400 audit(5282262745.132:793): avc: denied { map } for pid=11163 comm="syz.5.1423" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.327511][ T40] audit: type=1400 audit(5282262745.132:794): avc: denied { write execute } for pid=11163 comm="syz.5.1423" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.627469][ T937] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 353.677512][ T5296] Bluetooth: hci4: command tx timeout [ 353.797460][ T937] usb 10-1: Using ep0 maxpacket: 8 [ 353.801311][ T937] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.807210][ T937] usb 10-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 353.810211][ T937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.813073][ T937] usb 10-1: Product: syz [ 353.814709][ T937] usb 10-1: Manufacturer: syz [ 353.816410][ T937] usb 10-1: SerialNumber: syz [ 353.819897][ T937] usb 10-1: config 0 descriptor?? [ 353.822941][ T937] cdc_phonet 10-1:0.0: probe with driver cdc_phonet failed with error -22 [ 353.967405][ T3252] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 354.149902][ T3252] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.153276][ T3252] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.159018][ T3252] usb 13-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 354.161980][ T3252] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.165713][ T3252] usb 13-1: Product: syz [ 354.167014][ T3252] usb 13-1: Manufacturer: syz [ 354.169429][ T3252] usb 13-1: SerialNumber: syz [ 354.178507][ T3252] usb 13-1: config 0 descriptor?? [ 354.427752][T11201] input: syz1 as /devices/virtual/input/input23 [ 354.506843][T11201] gretap2: entered allmulticast mode [ 354.676636][ T40] audit: type=1400 audit(5282262746.492:795): avc: denied { relabelfrom } for pid=11208 comm="syz.9.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 354.683761][ T40] audit: type=1400 audit(5282262746.492:796): avc: denied { relabelto } for pid=11208 comm="syz.9.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 356.286241][ T937] usb 10-1: USB disconnect, device number 7 [ 356.711596][ T1338] usb 13-1: USB disconnect, device number 12 [ 357.730045][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1470'. [ 358.297516][ T2304] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 358.377054][ T40] audit: type=1400 audit(5282262750.192:797): avc: denied { map } for pid=11304 comm="syz.5.1477" path="socket:[42651]" dev="sockfs" ino=42651 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 358.469856][ T2304] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 358.473561][ T2304] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 358.477895][ T2304] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 358.481631][ T2304] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 358.486190][ T2304] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 358.493002][ T2304] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 358.496743][ T2304] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 358.500159][ T2304] usb 11-1: Product: syz [ 358.502113][ T2304] usb 11-1: Manufacturer: syz [ 358.511737][ T2304] cdc_wdm 11-1:1.0: skipping garbage [ 358.514189][ T2304] cdc_wdm 11-1:1.0: skipping garbage [ 358.519172][ T2304] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 358.521684][ T2304] cdc_wdm 11-1:1.0: Unknown control protocol [ 359.226133][ T1338] usb 11-1: USB disconnect, device number 8 [ 359.247419][ T2304] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 359.327402][ T9] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 359.408827][ T2304] usb 14-1: Using ep0 maxpacket: 16 [ 359.412683][ T2304] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.417118][ T2304] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.421557][ T2304] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.426704][ T2304] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.432104][ T2304] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.437628][ T2304] usb 14-1: config 0 descriptor?? [ 359.488891][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.492672][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.496421][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.499762][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.504466][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 359.507447][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.510014][ T9] usb 10-1: SerialNumber: syz [ 359.519997][ T9] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 359.523487][ T9] usb-storage 10-1:1.0: USB Mass Storage device detected [ 359.551713][ T9] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 359.850995][ T2304] hid_parser_main: 73 callbacks suppressed [ 359.851008][ T2304] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 359.855712][ T2304] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 359.858542][ T2304] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 359.866431][ T2304] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:045E:07DA.0009/input/input24 [ 359.985728][ T2304] microsoft 0003:045E:07DA.0009: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 360.111725][ T937] usb 14-1: USB disconnect, device number 4 [ 360.431794][ T40] audit: type=1400 audit(5282262752.252:798): avc: denied { sqpoll } for pid=11353 comm="syz.6.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 360.644966][T11370] syzkaller0: entered promiscuous mode [ 360.647461][T11370] syzkaller0: entered allmulticast mode [ 361.737439][ T937] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 361.905389][ T937] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.909169][ T937] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.912179][ T937] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.915076][ T937] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.940081][ T937] usb 11-1: config 0 descriptor?? [ 362.092663][ T9526] usb 10-1: USB disconnect, device number 8 [ 362.129377][T11418] netlink: 'syz.9.1507': attribute type 27 has an invalid length. [ 362.160151][T11393] program syz.6.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.171501][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.177054][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.185312][T11418] bridge0: port 3(syz_tun) entered disabled state [ 362.191908][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.195192][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.281082][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.290871][T11418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.410932][ T6625] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.414475][ T6625] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.421790][ T6625] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.425079][ T6625] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.552456][T11425] tipc: Started in network mode [ 362.554097][T11425] tipc: Node identity 72a22a93414a, cluster identity 4711 [ 362.556491][T11425] tipc: Enabled bearer , priority 0 [ 362.559019][T11425] syzkaller0: entered promiscuous mode [ 362.560886][T11425] syzkaller0: entered allmulticast mode [ 362.573575][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1509'. [ 362.580780][T11425] tipc: Resetting bearer [ 362.585491][T11424] tipc: Resetting bearer [ 362.598472][T11424] tipc: Disabling bearer [ 363.483891][ T40] audit: type=1400 audit(5282262755.302:799): avc: denied { execute } for pid=11437 comm="syz.5.1515" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 363.827652][ T53] usb 13-1: new low-speed USB device number 13 using dummy_hcd [ 363.979158][ T53] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 363.982068][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 363.985588][ T53] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.989451][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 363.992904][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 363.997497][ T53] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 364.000007][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.003200][ T53] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.006870][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 364.014765][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 364.019344][ T53] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 364.022026][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.026239][ T53] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.030910][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 364.035215][ T53] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 364.042433][ T53] usb 13-1: string descriptor 0 read error: -22 [ 364.045052][ T53] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 364.048798][ T53] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.060094][ T53] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 364.271754][ T53] usb 13-1: USB disconnect, device number 13 [ 364.340943][ T937] usb 11-1: string descriptor 0 read error: -71 [ 364.344735][ T937] usb 11-1: USB disconnect, device number 9 [ 364.544064][T11467] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 364.747430][ T937] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 364.907411][ T937] usb 11-1: Using ep0 maxpacket: 32 [ 364.911464][ T937] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 364.914047][ T937] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 364.918985][ T937] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 364.923767][ T937] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 364.930442][ T937] usb 11-1: config 0 interface 0 has no altsetting 0 [ 364.935646][ T937] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 364.939391][ T937] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 364.942728][ T937] usb 11-1: Product: syz [ 364.944332][ T937] usb 11-1: Manufacturer: syz [ 364.946171][ T937] usb 11-1: SerialNumber: syz [ 364.949437][ T937] usb 11-1: config 0 descriptor?? [ 364.953635][ T937] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 364.959194][ T937] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 365.388870][ T40] audit: type=1400 audit(5282262757.212:800): avc: denied { attach_queue } for pid=11488 comm="syz.8.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 365.452483][T11490] usb usb8: usbfs: process 11490 (syz.9.1527) did not claim interface 0 before use [ 365.664312][T11500] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 365.713638][ T937] usb 11-1: USB disconnect, device number 10 [ 365.725332][ T937] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 365.827762][ T40] audit: type=1400 audit(5282262757.652:801): avc: denied { bind } for pid=11502 comm="syz.5.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 365.850012][T11511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11511 comm=syz.8.1542 [ 365.855328][T11511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1547 sclass=netlink_audit_socket pid=11511 comm=syz.8.1542 [ 367.304910][T11554] netlink: 'syz.5.1557': attribute type 6 has an invalid length. [ 367.441137][ T9173] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 367.486960][ T40] audit: type=1400 audit(5282262759.262:802): avc: denied { shutdown } for pid=11555 comm="syz.5.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 367.627415][ T9173] usb 13-1: Using ep0 maxpacket: 16 [ 367.631565][ T9173] usb 13-1: config 0 has no interfaces? [ 367.634399][ T9173] usb 13-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.637233][ T9173] usb 13-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.640111][ T9173] usb 13-1: Manufacturer: syz [ 367.651448][ T9173] usb 13-1: config 0 descriptor?? [ 367.678026][T11568] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1563'. [ 367.840285][T11576] GUP no longer grows the stack in syz.9.1566 (11576): 200000005000-200000008000 (200000004000) [ 367.845097][T11576] CPU: 0 UID: 0 PID: 11576 Comm: syz.9.1566 Not tainted syzkaller #0 PREEMPT(full) [ 367.845114][T11576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.845121][T11576] Call Trace: [ 367.845125][T11576] [ 367.845130][T11576] dump_stack_lvl+0x16c/0x1f0 [ 367.845169][T11576] gup_vma_lookup+0x1d2/0x220 [ 367.845187][T11576] fixup_user_fault+0x26e/0x540 [ 367.845204][T11576] ? futex_lock_pi+0x678/0x7c0 [ 367.845222][T11576] fault_in_user_writeable+0x70/0xe0 [ 367.845237][T11576] futex_lock_pi+0x681/0x7c0 [ 367.845256][T11576] ? __pfx_futex_lock_pi+0x10/0x10 [ 367.845272][T11576] ? __futex_wait+0x24b/0x2f0 [ 367.845304][T11576] ? __pfx_futex_wake_mark+0x10/0x10 [ 367.845329][T11576] do_futex+0x11a/0x350 [ 367.845343][T11576] ? __pfx_do_futex+0x10/0x10 [ 367.845361][T11576] __x64_sys_futex+0x1e0/0x4c0 [ 367.845376][T11576] ? restore_signal_shadow_stack+0x63/0x460 [ 367.845388][T11576] ? __pfx___x64_sys_futex+0x10/0x10 [ 367.845401][T11576] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 367.845419][T11576] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 367.845440][T11576] do_syscall_64+0xcd/0xfa0 [ 367.845455][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.845466][T11576] RIP: 0033:0x7f3009f8efc9 [ 367.845475][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.845486][T11576] RSP: 002b:00007f300ae69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.845497][T11576] RAX: ffffffffffffffda RBX: 00007f300a1e5fa0 RCX: 00007f3009f8efc9 [ 367.845504][T11576] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 367.845510][T11576] RBP: 00007f300a011f91 R08: 0000000000000000 R09: 0000000000000000 [ 367.845516][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.845523][T11576] R13: 00007f300a1e6038 R14: 00007f300a1e5fa0 R15: 00007ffd60ca82c8 [ 367.845537][T11576] [ 367.911967][T11551] gre1: entered promiscuous mode [ 367.913944][T11551] gre1: entered allmulticast mode [ 367.923802][ T9173] usb 13-1: USB disconnect, device number 14 [ 368.897798][T11593] loop8: detected capacity change from 0 to 7 [ 368.903994][T11593] Dev loop8: unable to read RDB block 7 [ 368.906175][T11593] loop8: unable to read partition table [ 368.909157][T11593] loop8: partition table beyond EOD, truncated [ 368.916263][T11593] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 369.486856][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1578'. [ 369.657441][ T937] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 369.817551][ T937] usb 11-1: Using ep0 maxpacket: 16 [ 369.822246][ T937] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 369.850486][ T937] usb 11-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 369.854292][ T937] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.854314][ T937] usb 11-1: Product: syz [ 369.854327][ T937] usb 11-1: Manufacturer: syz [ 369.854339][ T937] usb 11-1: SerialNumber: syz [ 369.856577][ T937] usb 11-1: config 0 descriptor?? [ 369.862659][ T937] ftdi_sio 11-1:0.0: FTDI USB Serial Device converter detected [ 369.863500][ T937] usb 11-1: Detected FT232R [ 370.080713][ T937] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 370.083309][ T937] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 370.085859][ T937] ftdi_sio 11-1:0.0: GPIO initialisation failed: -71 [ 370.091208][ T937] usb 11-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 370.094952][ T937] usb 11-1: USB disconnect, device number 11 [ 370.103290][ T937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 370.108558][ T937] ftdi_sio 11-1:0.0: device disconnected [ 370.491642][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1595'. [ 370.504555][T11649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.662901][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1596'. [ 371.407862][T11676] loop8: detected capacity change from 0 to 8 [ 371.410524][T11676] Dev loop8: unable to read RDB block 8 [ 371.412434][T11676] loop8: unable to read partition table [ 371.414841][T11676] loop8: partition table beyond EOD, truncated [ 371.418877][T11676] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 371.465039][T11679] tipc: Enabling of bearer rejected, failed to enable media [ 371.535597][T11686] netlink: 'syz.9.1602': attribute type 10 has an invalid length. [ 371.541336][T11686] team0: Port device bridge0 added [ 371.650868][T11677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.658551][T11677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.660986][T11677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.663481][T11677] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.665640][T11677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.674875][T11677] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.706527][T11695] netlink: 'syz.6.1606': attribute type 4 has an invalid length. [ 371.709406][T11695] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1606'. [ 371.783328][T11696] netlink: 312 bytes leftover after parsing attributes in process `syz.8.1608'. [ 372.377061][T11701] fuse: root generation should be zero [ 372.617643][T11709] netlink: 'syz.6.1611': attribute type 5 has an invalid length. [ 373.597454][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.677568][ T5942] Bluetooth: hci4: command 0x0405 tx timeout [ 373.677584][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 373.677629][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 374.342886][T11716] netlink: 'syz.6.1614': attribute type 6 has an invalid length. [ 374.345765][T11716] netlink: 'syz.6.1614': attribute type 1 has an invalid length. [ 374.349042][T11716] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1614'. [ 375.042699][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1619'. [ 375.143826][T11740] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1624'. [ 375.148874][T11740] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1624'. [ 375.221112][T11746] netlink: 'syz.9.1626': attribute type 11 has an invalid length. [ 375.289764][T11749] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1622'. [ 375.737368][ T53] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 375.757413][ T5942] Bluetooth: hci4: command 0x0405 tx timeout [ 375.897374][ T53] usb 10-1: Using ep0 maxpacket: 32 [ 375.900740][ T53] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.905669][ T53] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 375.909999][ T53] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 375.912616][ T53] usb 10-1: Product: syz [ 375.913988][ T53] usb 10-1: Manufacturer: syz [ 375.915725][ T53] usb 10-1: SerialNumber: syz [ 375.920166][ T53] usb 10-1: config 0 descriptor?? [ 375.922878][ T53] hub 10-1:0.0: bad descriptor, ignoring hub [ 375.924818][ T53] hub 10-1:0.0: probe with driver hub failed with error -5 [ 376.127466][ T937] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 376.279868][ T937] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.284076][ T937] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 376.288525][ T937] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.294979][ T937] usb 14-1: config 0 descriptor?? [ 376.507148][ T40] audit: type=1400 audit(5282262768.322:803): avc: denied { listen } for pid=11758 comm="syz.9.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.553996][ T53] usb 14-1: USB disconnect, device number 5 [ 377.443084][T11798] usb usb8: usbfs: process 11798 (syz.9.1644) did not claim interface 0 before use [ 377.837442][ T5942] Bluetooth: hci4: command 0x0405 tx timeout [ 378.519565][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 378.748318][ T9526] usb 10-1: reset high-speed USB device number 9 using dummy_hcd [ 378.755789][ T9526] usb 10-1: device reset changed ep0 maxpacket size! [ 378.770603][ T9526] usb 10-1: USB disconnect, device number 9 [ 378.827285][T11826] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1655'. [ 378.917532][ T9173] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 379.068914][ T9173] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.071654][ T9173] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.074808][ T9173] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.078336][ T9173] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 379.081746][ T9173] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 379.086447][ T9173] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.087424][ T9526] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 379.089809][ T9173] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.094402][ T9173] usb 14-1: Product: syz [ 379.095774][ T9173] usb 14-1: Manufacturer: syz [ 379.103907][ T9173] cdc_wdm 14-1:1.0: skipping garbage [ 379.105609][ T9173] cdc_wdm 14-1:1.0: skipping garbage [ 379.108255][ T9173] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 379.110154][ T9173] cdc_wdm 14-1:1.0: Unknown control protocol [ 379.187470][ T840] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 379.247394][ T9526] usb 10-1: Using ep0 maxpacket: 16 [ 379.251318][ T9526] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.254833][ T9526] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.260743][ T9526] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 379.264529][ T9526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.267937][ T9526] usb 10-1: Product: syz [ 379.269329][ T9526] usb 10-1: Manufacturer: syz [ 379.270858][ T9526] usb 10-1: SerialNumber: syz [ 379.274209][ T9526] usb 10-1: config 0 descriptor?? [ 379.307266][ T937] usb 14-1: USB disconnect, device number 6 [ 379.339049][ T840] usb 11-1: config 0 has no interfaces? [ 379.342780][ T840] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 379.345640][ T840] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.348832][ T840] usb 11-1: Product: syz [ 379.350189][ T840] usb 11-1: Manufacturer: syz [ 379.351715][ T840] usb 11-1: SerialNumber: syz [ 379.354993][ T840] usb 11-1: config 0 descriptor?? [ 379.478413][ T53] usb 10-1: USB disconnect, device number 10 [ 379.651013][T11837] kvm: pic: non byte write [ 379.656172][T11837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147483648 (4294967296 ns) > initial count (3880 ns). Using initial count to start timer. [ 379.668749][T11830] veth1_vlan: left promiscuous mode [ 379.675474][ T840] usb 11-1: USB disconnect, device number 12 [ 379.874560][T11850] gretap0: entered promiscuous mode [ 379.879579][T11850] .`: (slave vlan0): Enslaving as an active interface with an up link [ 380.051091][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1668'. [ 380.053938][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1668'. [ 380.098801][T11865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 381.856069][T11924] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 381.858884][T11924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.863617][T11924] vhci_hcd vhci_hcd.0: Device attached [ 381.872367][T11924] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 381.875196][T11924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.879198][T11924] vhci_hcd vhci_hcd.0: Device attached [ 382.047501][ T2304] vhci_hcd: vhci_device speed not set [ 382.107808][ T2304] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 382.129656][T11942] bond1: option tlb_dynamic_lb: invalid value (2) [ 382.132477][T11942] bond1 (unregistering): Released all slaves [ 382.257839][T11949] tipc: Enabled bearer , priority 0 [ 382.261258][T11949] syzkaller0: entered promiscuous mode [ 382.263609][T11949] syzkaller0: entered allmulticast mode [ 382.280270][T11949] tipc: Resetting bearer [ 382.284221][T11948] tipc: Resetting bearer [ 382.293000][T11948] tipc: Disabling bearer [ 383.408160][ T40] audit: type=1400 audit(5282262775.222:804): avc: denied { override_creds } for pid=11975 comm="syz.6.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 383.522035][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.524758][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.579877][T11933] vhci_hcd: connection closed [ 384.580108][T11931] vhci_hcd: connection reset by peer [ 384.580129][ T8568] vhci_hcd: stop threads [ 384.594986][ T8568] vhci_hcd: release socket [ 384.596661][ T8568] vhci_hcd: disconnect device [ 384.598878][ T8568] vhci_hcd: stop threads [ 384.600517][ T8568] vhci_hcd: release socket [ 384.602135][ T8568] vhci_hcd: disconnect device [ 385.515231][T12016] loop8: detected capacity change from 0 to 7 [ 385.519236][T12016] Dev loop8: unable to read RDB block 7 [ 385.521177][T12016] loop8: unable to read partition table [ 385.523200][T12016] loop8: partition table beyond EOD, truncated [ 385.525297][T12016] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 386.230043][T12040] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.377881][T12048] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 386.936551][T12061] netlink: 'syz.5.1732': attribute type 4 has an invalid length. [ 387.207576][ T2304] vhci_hcd: vhci_device speed not set [ 387.260077][T12083] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1740'. [ 387.395049][T12090] netlink: 'syz.9.1743': attribute type 10 has an invalid length. [ 387.397774][T12090] bridge0: port 4(netdevsim0) entered blocking state [ 387.399992][T12090] bridge0: port 4(netdevsim0) entered disabled state [ 387.402222][T12090] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 387.407043][T12090] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 387.496661][T12100] pim6reg: entered allmulticast mode [ 387.528723][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1751'. [ 388.456067][T12127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.529640][ T40] audit: type=1400 audit(5282262780.352:805): avc: denied { setopt } for pid=12133 comm="syz.5.1761" lport=54805 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 388.590395][T12137] netlink: 'syz.6.1759': attribute type 4 has an invalid length. [ 388.592983][T12137] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1759'. [ 388.596136][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1763'. [ 389.289368][T12156] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 389.412302][T12166] netlink: 'syz.6.1775': attribute type 1 has an invalid length. [ 389.434886][T12166] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 389.439133][T12166] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 389.444040][T12166] bond2: (slave vcan0): making interface the new active one [ 389.449244][T12166] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 389.498769][T12173] ipvlan2: entered promiscuous mode [ 389.732575][ T40] audit: type=1326 audit(5282262781.552:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.743862][ T40] audit: type=1326 audit(5282262781.552:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.751303][ T40] audit: type=1326 audit(5282262781.562:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.760163][ T40] audit: type=1326 audit(5282262781.562:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.767217][ T40] audit: type=1326 audit(5282262781.562:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.774915][ T40] audit: type=1326 audit(5282262781.562:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.783098][ T40] audit: type=1326 audit(5282262781.562:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.791924][ T40] audit: type=1326 audit(5282262781.562:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.799727][ T40] audit: type=1326 audit(5282262781.562:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.9.1782" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3009f8efc9 code=0x7ffc0000 [ 389.826067][T12190] netlink: 'syz.5.1785': attribute type 12 has an invalid length. [ 389.993825][T12197] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 390.101557][ T6625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.105004][ T6625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.727500][ T840] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 390.858795][ T840] usb 14-1: device descriptor read/64, error -71 [ 391.097391][ T840] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 391.247418][ T840] usb 14-1: device descriptor read/64, error -71 [ 391.357801][ T840] usb usb14-port1: attempt power cycle [ 391.584085][T12248] input: syz1 as /devices/virtual/input/input25 [ 391.697589][ T840] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 391.719752][ T840] usb 14-1: device descriptor read/8, error -71 [ 391.736748][T12258] kvm: pic: level sensitive irq not supported [ 391.742963][T12258] kvm: pic: non byte read [ 391.779193][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1810'. [ 391.967369][ T840] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 391.987864][ T840] usb 14-1: device descriptor read/8, error -71 [ 392.098482][ T840] usb usb14-port1: unable to enumerate USB device [ 392.227405][ T937] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 392.377388][ T937] usb 13-1: Using ep0 maxpacket: 16 [ 392.380815][ T937] usb 13-1: config 6 has an invalid interface number: 170 but max is 0 [ 392.383510][ T937] usb 13-1: config 6 has no interface number 0 [ 392.387180][ T937] usb 13-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 392.390126][ T937] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.392627][ T937] usb 13-1: Product: syz [ 392.394161][ T937] usb 13-1: Manufacturer: syz [ 392.395790][ T937] usb 13-1: SerialNumber: syz [ 392.677952][ T937] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611 [ 392.681358][ T937] gspca_sn9c20x: Write register 1000 failed -71 [ 392.683347][ T937] gspca_sn9c20x: Device initialization failed [ 392.685465][ T937] gspca_sn9c20x 13-1:6.170: probe with driver gspca_sn9c20x failed with error -71 [ 392.689421][ T937] usb 13-1: USB disconnect, device number 15 [ 393.007193][T12280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.011592][T12280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.014819][T12280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.019136][T12280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.487441][ T937] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 393.639583][ T937] usb 13-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.645104][ T937] usb 13-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 393.648053][ T937] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.650616][ T937] usb 13-1: Product: syz [ 393.651991][ T937] usb 13-1: Manufacturer: syz [ 393.653482][ T937] usb 13-1: SerialNumber: syz [ 393.657140][ T937] usb 13-1: config 0 descriptor?? [ 393.863992][ T937] usb 13-1: USB disconnect, device number 16 [ 394.422945][T12297] input: syz1 as /devices/virtual/input/input26 [ 394.878867][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.037505][ T5296] Bluetooth: hci3: command 0x0405 tx timeout [ 395.041626][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 395.050566][ T5942] Bluetooth: hci4: command 0x0405 tx timeout [ 395.458782][T12300] delete_channel: no stack [ 395.827769][ T937] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 396.007521][ T937] usb 13-1: Using ep0 maxpacket: 8 [ 396.011564][ T937] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 396.015216][ T937] usb 13-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.020303][ T937] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.027470][ T937] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.044841][ T937] usbtmc 13-1:16.0: bulk endpoints not found [ 396.127479][ T7203] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 396.289742][ T7203] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 396.292636][ T7203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.298048][ T7203] usb 10-1: config 0 descriptor?? [ 396.806556][T12348] netlink: 'syz.9.1837': attribute type 4 has an invalid length. [ 396.895521][T12350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.007712][ T7203] pegasus 10-1:0.0: probe with driver pegasus failed with error -110 [ 398.449970][ T55] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 398.513378][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 398.513389][ T40] audit: type=1400 audit(5282262790.332:818): avc: denied { bind } for pid=12370 comm="syz.9.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 398.549419][ T9173] usb 13-1: USB disconnect, device number 17 [ 398.617684][ T55] usb 11-1: Using ep0 maxpacket: 8 [ 398.625156][ T55] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 398.629164][ T55] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.632752][ T55] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.636737][ T55] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.643459][ T55] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.651115][ T55] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.654402][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.658800][T12381] vlan2: entered promiscuous mode [ 398.661917][T12381] batadv0: entered promiscuous mode [ 398.796677][ T9173] usb 10-1: USB disconnect, device number 11 [ 398.864041][ T55] usb 11-1: usb_control_msg returned -32 [ 398.866549][ T55] usbtmc 11-1:16.0: can't read capabilities [ 399.026842][ T7203] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 399.187356][ T7203] usb 13-1: Using ep0 maxpacket: 32 [ 399.190772][ T7203] usb 13-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 399.194189][ T7203] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.198506][ T7203] usb 13-1: config 0 descriptor?? [ 399.223390][T12399] usbtmc 11-1:16.0: control status returned 0 [ 399.403786][ T7203] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 399.409035][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.409602][ T7203] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 399.412587][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.416003][ T7203] dib0700: firmware download failed at 7 with -22 [ 399.424843][ T9173] usb 11-1: USB disconnect, device number 13 [ 399.431706][T12387] random: crng reseeded on system resumption [ 399.493678][ T840] usb 13-1: USB disconnect, device number 18 [ 399.752568][T12404] loop6: detected capacity change from 0 to 7 [ 399.755670][ T9411] Dev loop6: unable to read RDB block 7 [ 399.758198][ T9411] loop6: unable to read partition table [ 399.760692][ T9411] loop6: partition table beyond EOD, truncated [ 399.766066][T12404] Dev loop6: unable to read RDB block 7 [ 399.768289][T12404] loop6: unable to read partition table [ 399.770372][T12404] loop6: partition table beyond EOD, truncated [ 399.772503][T12404] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 399.831178][T12406] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 400.261911][ T40] audit: type=1326 audit(5282262792.082:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.271278][ T40] audit: type=1326 audit(5282262792.082:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.281157][ T40] audit: type=1326 audit(5282262792.082:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.290570][ T40] audit: type=1326 audit(5282262792.082:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.299657][ T40] audit: type=1326 audit(5282262792.082:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.309150][ T40] audit: type=1326 audit(5282262792.082:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.318123][ T40] audit: type=1326 audit(5282262792.082:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.327205][ T40] audit: type=1326 audit(5282262792.082:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.336413][ T40] audit: type=1326 audit(5282262792.082:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.8.1866" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ecd38efc9 code=0x7ffc0000 [ 400.670661][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1868'. [ 400.788973][T12434] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1872'. [ 401.985052][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1888'. [ 402.146366][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1894'. [ 402.274203][T12504] syzkaller1: entered promiscuous mode [ 402.276065][T12504] syzkaller1: entered allmulticast mode [ 402.467823][ T2304] usb 13-1: new full-speed USB device number 19 using dummy_hcd [ 402.629280][ T2304] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 402.633122][ T2304] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 402.637848][ T2304] usb 13-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 402.641521][ T2304] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.646276][ T2304] usb 13-1: config 0 descriptor?? [ 402.717882][ T840] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 402.757476][ T9173] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 402.880484][ T840] usb 14-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 402.884134][ T840] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.890635][ T840] usb 14-1: config 0 descriptor?? [ 402.899422][ T840] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input27 [ 402.907520][ T9173] usb 10-1: Using ep0 maxpacket: 16 [ 402.912338][ T9173] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 402.918732][ T9173] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 402.921804][ T9173] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 402.926842][ T9173] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 402.929540][ T9173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.931955][ T9173] usb 10-1: Product: syz [ 402.933227][ T9173] usb 10-1: Manufacturer: syz [ 402.934622][ T9173] usb 10-1: SerialNumber: syz [ 402.938074][ T9173] usb 10-1: config 0 descriptor?? [ 402.940228][T12518] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 402.959111][ T9173] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 402.961372][ T9173] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 402.963525][ T9173] mcba_usb 10-1:0.0 can0: failed tx_urb -90 [ 402.965400][ T9173] mcba_usb 10-1:0.0 can0: Failed to send cmd (169) [ 402.967921][ T9173] mcba_usb 10-1:0.0: Microchip CAN BUS Analyzer connected [ 403.061232][ T2304] hid-multitouch 0003:0457:07DA.000A: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0 [ 403.150095][T12515] bridge0: port 3(macsec0) entered blocking state [ 403.154411][T12515] bridge0: port 3(macsec0) entered disabled state [ 403.156994][T12515] macsec0: entered allmulticast mode [ 403.159456][T12515] veth1_macvtap: entered allmulticast mode [ 403.162227][T12515] macsec0: entered promiscuous mode [ 403.167732][T12515] bridge0: port 3(macsec0) entered blocking state [ 403.169858][T12515] bridge0: port 3(macsec0) entered forwarding state [ 403.207231][ T5647] mcba_usb 10-1:0.0 can0: bit-timing not yet defined [ 403.244266][ T2304] usb 14-1: USB disconnect, device number 11 [ 403.323444][ T55] usb 13-1: USB disconnect, device number 19 [ 403.785689][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 403.785700][ T40] audit: type=1326 audit(5282262795.602:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12539 comm="syz.9.1913" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3009f8efc9 code=0x0 [ 405.125028][ T9173] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 405.128418][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1929'. [ 405.133562][ T9173] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 405.144987][T12579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.455067][ T9173] usb 10-1: USB disconnect, device number 12 [ 405.468768][ T9173] mcba_usb 10-1:0.0 can0: device disconnected [ 405.707431][ T2304] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 405.857417][ T2304] usb 13-1: Using ep0 maxpacket: 16 [ 405.862107][ T2304] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.866634][ T2304] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.872310][ T2304] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.879428][ T2304] usb 13-1: config 0 descriptor?? [ 406.153674][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1942'. [ 406.156653][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1942'. [ 406.288949][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.297600][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.302276][T12587] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1932'. [ 406.311385][ T2304] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 406.614497][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1947'. [ 406.633200][T12628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.017430][ T2304] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 407.177448][ T2304] usb 10-1: Using ep0 maxpacket: 16 [ 407.188860][ T2304] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 407.200252][ T2304] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 407.204462][ T2304] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.208247][ T2304] usb 10-1: Product: syz [ 407.210181][ T2304] usb 10-1: Manufacturer: syz [ 407.212370][ T2304] usb 10-1: SerialNumber: syz [ 407.219178][ T2304] usb 10-1: config 0 descriptor?? [ 407.225505][ T2304] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 407.230472][ T2304] usb 10-1: Detected FT232R [ 407.433032][ T2304] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 407.437243][ T2304] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 407.440836][ T2304] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 407.445155][ T2304] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 407.449950][ T2304] usb 10-1: USB disconnect, device number 13 [ 407.456050][ T2304] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 407.459477][ T2304] ftdi_sio 10-1:0.0: device disconnected [ 407.486600][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1955'. [ 407.490722][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1955'. [ 408.247666][ T55] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 408.397387][ T55] usb 14-1: Using ep0 maxpacket: 32 [ 408.402153][ T55] usb 14-1: config 0 has an invalid interface number: 85 but max is 0 [ 408.405585][ T55] usb 14-1: config 0 has no interface number 0 [ 408.409333][ T55] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.413861][ T55] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.418601][ T55] usb 14-1: config 0 interface 85 has no altsetting 0 [ 408.423267][ T55] usb 14-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 408.429416][ T55] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.434949][ T55] usb 14-1: Product: syz [ 408.436414][ T55] usb 14-1: Manufacturer: syz [ 408.438096][ T55] usb 14-1: SerialNumber: syz [ 408.440885][ T55] usb 14-1: config 0 descriptor?? [ 408.482310][ T840] usb 13-1: USB disconnect, device number 20 [ 408.687463][ T9173] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 408.837446][ T9173] usb 10-1: Using ep0 maxpacket: 16 [ 408.842591][ T9173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 408.862110][ T9173] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 408.866149][ T9173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.869972][ T9173] usb 10-1: Product: syz [ 408.871912][ T9173] usb 10-1: Manufacturer: syz [ 408.874051][ T9173] usb 10-1: SerialNumber: syz [ 408.876251][ T55] appletouch 14-1:0.85: Failed to request geyser raw mode [ 408.878559][ T9173] usb 10-1: config 0 descriptor?? [ 408.880810][ T55] appletouch 14-1:0.85: probe with driver appletouch failed with error -5 [ 408.882214][ T9173] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 408.885449][ T55] usb 14-1: USB disconnect, device number 12 [ 408.890794][ T9173] usb 10-1: Detected FT232R [ 408.953429][T12707] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 409.089346][ T9173] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 409.092161][ T9173] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 409.094560][ T9173] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 409.097940][ T9173] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 409.102517][ T9173] usb 10-1: USB disconnect, device number 14 [ 409.107207][ T9173] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 409.113150][ T9173] ftdi_sio 10-1:0.0: device disconnected [ 409.114820][T12713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.787812][T12746] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 410.207450][ T9173] usb 14-1: new full-speed USB device number 13 using dummy_hcd [ 410.358994][ T9173] usb 14-1: config 5 has an invalid interface number: 3 but max is 0 [ 410.362304][ T9173] usb 14-1: config 5 has no interface number 0 [ 410.366193][ T9173] usb 14-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 410.370399][ T9173] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.373068][ T9173] usb 14-1: Product: syz [ 410.374503][ T9173] usb 14-1: Manufacturer: syz [ 410.376133][ T9173] usb 14-1: SerialNumber: syz [ 410.381388][ T9173] ftdi_sio 14-1:5.3: FTDI USB Serial Device converter detected [ 410.386432][ T9173] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 410.581749][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2000'. [ 410.591838][T12758] macvtap1: entered promiscuous mode [ 410.594161][T12758] dummy0: entered promiscuous mode [ 410.598805][T12758] macvtap1: entered allmulticast mode [ 410.601080][T12758] dummy0: entered allmulticast mode [ 410.606746][T12758] dummy0: left allmulticast mode [ 410.609456][T12758] dummy0: left promiscuous mode [ 410.617428][ T55] usb 14-1: USB disconnect, device number 13 [ 410.620032][ T55] ftdi_sio 14-1:5.3: device disconnected [ 411.027389][ T9526] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 411.202771][ T9526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.206304][T12795] netlink: 1296 bytes leftover after parsing attributes in process `syz.6.2016'. [ 411.207849][ T9526] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.207867][ T9526] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.207890][ T9526] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.207903][ T9526] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.209275][ T9526] usb 10-1: config 0 descriptor?? [ 411.356346][ T40] audit: type=1400 audit(5282262803.172:874): avc: denied { accept } for pid=12801 comm="syz.6.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 411.414610][T12802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.420340][T12802] batadv_slave_0: entered promiscuous mode [ 411.621898][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.625397][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.629256][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.632572][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.633600][T12817] netlink: 'syz.9.2021': attribute type 4 has an invalid length. [ 411.635373][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.635402][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.644646][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.648248][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.651395][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.654589][ T9526] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 411.677750][ T9526] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 411.890935][ T9526] usb 10-1: USB disconnect, device number 15 [ 412.324527][T12834] usb usb8: usbfs: process 12834 (syz.8.2027) did not claim interface 0 before use [ 412.334029][T12833] netlink: 14448 bytes leftover after parsing attributes in process `syz.6.2028'. [ 412.338220][T12833] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 413.667395][ T9526] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 413.847483][ T9526] usb 13-1: Using ep0 maxpacket: 16 [ 413.851365][ T9526] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 413.855979][ T9526] usb 13-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 413.859577][ T9526] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.862201][ T9526] usb 13-1: Product: syz [ 413.863627][ T9526] usb 13-1: Manufacturer: syz [ 413.865204][ T9526] usb 13-1: SerialNumber: syz [ 413.868745][ T9526] usb 13-1: config 0 descriptor?? [ 413.872154][ T9526] ftdi_sio 13-1:0.0: FTDI USB Serial Device converter detected [ 413.875745][ T9526] usb 13-1: Detected FT232R [ 414.086867][ T9526] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 414.092326][ T9526] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 414.096313][ T9526] ftdi_sio 13-1:0.0: GPIO initialisation failed: -71 [ 414.097984][ T9173] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 414.108098][ T9526] usb 13-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 414.113250][ T9526] usb 13-1: USB disconnect, device number 21 [ 414.118320][ T9526] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 414.125049][ T9526] ftdi_sio 13-1:0.0: device disconnected [ 414.250474][ T9173] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.253631][ T9173] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.258896][ T9173] usb 11-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 414.262310][ T9173] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 414.264881][ T9173] usb 11-1: SerialNumber: syz [ 414.477477][ T55] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 414.486068][ T9173] usb 11-1: 0:2 : does not exist [ 414.515621][ T9173] usb 11-1: USB disconnect, device number 14 [ 414.553522][ T9411] udevd[9411]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.639858][ T55] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.644914][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 414.652156][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 414.656560][ T55] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 414.662847][ T55] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.666816][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.673730][ T55] usb 10-1: config 0 descriptor?? [ 414.873757][T12921] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 415.099880][ T55] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 415.277624][ T9173] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 415.392806][T12950] binder: 12914:12950 ioctl 4018620d 0 returned -22 [ 415.427431][ T9173] usb 13-1: Using ep0 maxpacket: 16 [ 415.430874][ T9173] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 415.437242][ T40] audit: type=1400 audit(5282262807.252:875): avc: denied { create } for pid=12951 comm="syz.6.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 415.449055][ T9173] usb 13-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 415.452058][ T9173] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.457469][ T9173] usb 13-1: Product: syz [ 415.459247][ T9173] usb 13-1: Manufacturer: syz [ 415.461132][ T9173] usb 13-1: SerialNumber: syz [ 415.471977][ T9173] usb 13-1: config 0 descriptor?? [ 415.478523][ T9173] ftdi_sio 13-1:0.0: FTDI USB Serial Device converter detected [ 415.487975][ T9173] usb 13-1: Detected FT232R [ 415.689656][ T9173] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 415.692209][ T9173] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 415.694727][ T9173] ftdi_sio 13-1:0.0: GPIO initialisation failed: -71 [ 415.698658][ T9173] usb 13-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.702378][ T9173] usb 13-1: USB disconnect, device number 22 [ 415.706843][ T9173] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 415.710150][ T9173] ftdi_sio 13-1:0.0: device disconnected [ 416.457407][ T2304] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 416.474745][T12973] syzkaller0: entered promiscuous mode [ 416.476974][T12973] syzkaller0: entered allmulticast mode [ 416.501110][ T40] audit: type=1400 audit(5282262808.322:876): avc: denied { create } for pid=12972 comm="syz.8.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 416.507864][ T40] audit: type=1400 audit(5282262808.322:877): avc: denied { setopt } for pid=12972 comm="syz.8.2083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 416.566972][T12975] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 416.610224][ T2304] usb 14-1: Using ep0 maxpacket: 8 [ 416.625972][ T2304] usb 14-1: unable to get BOS descriptor or descriptor too short [ 416.630974][ T2304] usb 14-1: config 4 interface 0 has no altsetting 0 [ 416.635619][ T2304] usb 14-1: string descriptor 0 read error: -22 [ 416.637963][ T2304] usb 14-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 416.640851][ T2304] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.647423][ T2304] usb 14-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 416.651149][ T2304] usb 14-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.654620][ T2304] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 416.656854][ T2304] usb 14-1: media controller created [ 416.668381][ T2304] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.787487][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2087'. [ 416.849549][ T2304] zl10353_read_register: readreg error (reg=127, ret==0) [ 416.872744][ T2304] usb 14-1: USB disconnect, device number 14 [ 417.177070][ T55] usb 10-1: USB disconnect, device number 16 [ 417.556831][T12993] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2090'. [ 418.012129][T12981] batadv0: entered promiscuous mode [ 418.015182][T12981] vlan0: entered promiscuous mode [ 418.430848][ T40] audit: type=1400 audit(5282262810.252:878): avc: denied { name_bind } for pid=13012 comm="syz.9.2098" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 418.511378][T13023] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2097'. [ 418.786436][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2100'. [ 419.497584][ T55] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 419.667702][ T55] usb 14-1: Using ep0 maxpacket: 32 [ 419.673397][ T55] usb 14-1: config 0 has an invalid interface number: 85 but max is 0 [ 419.679947][ T55] usb 14-1: config 0 has no interface number 0 [ 419.685346][ T55] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.692868][ T55] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 419.697219][ T55] usb 14-1: config 0 interface 85 has no altsetting 0 [ 419.705108][ T55] usb 14-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 419.709049][ T55] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.712832][ T55] usb 14-1: Product: syz [ 419.714658][ T55] usb 14-1: Manufacturer: syz [ 419.716666][ T55] usb 14-1: SerialNumber: syz [ 419.721822][ T55] usb 14-1: config 0 descriptor?? [ 419.946291][ T55] appletouch 14-1:0.85: Failed to read mode from device. [ 419.949557][ T55] appletouch 14-1:0.85: probe with driver appletouch failed with error -5 [ 419.960084][ T55] usb 14-1: USB disconnect, device number 15 [ 420.207654][ T9173] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 420.367518][ T9173] usb 10-1: Using ep0 maxpacket: 16 [ 420.372364][ T9173] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 420.378406][ T9173] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 420.382406][ T9173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.385855][ T9173] usb 10-1: Product: syz [ 420.387783][ T9173] usb 10-1: Manufacturer: syz [ 420.389815][ T9173] usb 10-1: SerialNumber: syz [ 420.394187][ T9173] usb 10-1: config 0 descriptor?? [ 420.400057][ T9173] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 420.406781][ T9173] usb 10-1: Detected FT232R [ 420.622970][ T9173] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 420.623300][ T9173] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 420.623736][ T9173] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 420.626853][ T9173] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 420.633412][ T9173] usb 10-1: USB disconnect, device number 17 [ 420.643538][ T9173] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 420.644039][ T9173] ftdi_sio 10-1:0.0: device disconnected [ 421.897389][ T55] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 422.057374][ T55] usb 13-1: Using ep0 maxpacket: 16 [ 422.060786][ T55] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 422.074804][ T55] usb 13-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 422.078122][ T55] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.080714][ T55] usb 13-1: Product: syz [ 422.082125][ T55] usb 13-1: Manufacturer: syz [ 422.083640][ T55] usb 13-1: SerialNumber: syz [ 422.096092][ T55] usb 13-1: config 0 descriptor?? [ 422.103575][ T55] ftdi_sio 13-1:0.0: FTDI USB Serial Device converter detected [ 422.106456][ T55] usb 13-1: Detected FT232R [ 422.312882][ T55] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 422.321798][ T55] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 422.324378][ T55] ftdi_sio 13-1:0.0: GPIO initialisation failed: -71 [ 422.332729][ T55] usb 13-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 422.347653][ T55] usb 13-1: USB disconnect, device number 23 [ 422.356126][ T9411] udevd[9411]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 422.357719][ T55] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 422.364198][ T55] ftdi_sio 13-1:0.0: device disconnected [ 422.685640][T13174] pim6reg1: entered promiscuous mode [ 422.688690][T13174] pim6reg1: entered allmulticast mode [ 422.746930][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2161'. [ 422.761344][T13178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.069843][T13205] pim6reg1: entered promiscuous mode [ 423.072329][T13205] pim6reg1: entered allmulticast mode [ 423.523000][T13226] syzkaller0: entered promiscuous mode [ 423.525346][T13226] syzkaller0: entered allmulticast mode [ 424.033342][T13250] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2187'. [ 424.909255][T13250] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 425.033866][T13266] pim6reg1: entered promiscuous mode [ 425.044750][T13266] pim6reg1: entered allmulticast mode [ 425.049994][T13266] sock: sock_set_timeout: `syz.9.2193' (pid 13266) tries to set negative timeout [ 425.264157][T13287] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2203'. [ 425.265998][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2201'. [ 425.298337][T13285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 425.771184][T13321] pim6reg1: entered promiscuous mode [ 425.773078][T13321] pim6reg1: entered allmulticast mode [ 426.327803][ T55] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 426.477386][ T55] usb 10-1: Using ep0 maxpacket: 16 [ 426.482526][ T55] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 426.487217][ T55] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 426.492029][ T55] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.494749][ T55] usb 10-1: Product: syz [ 426.496163][ T55] usb 10-1: Manufacturer: syz [ 426.497870][ T55] usb 10-1: SerialNumber: syz [ 426.502691][ T55] usb 10-1: config 0 descriptor?? [ 426.505921][ T55] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 426.509039][ T55] usb 10-1: Detected FT232R [ 426.707489][ T2304] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 426.715371][ T55] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 426.721361][ T55] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 426.725794][ T55] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 426.730544][ T55] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 426.736323][ T55] usb 10-1: USB disconnect, device number 18 [ 426.742311][ T55] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 426.746654][ T55] ftdi_sio 10-1:0.0: device disconnected [ 426.877418][ T2304] usb 11-1: Using ep0 maxpacket: 8 [ 426.881686][ T2304] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.886304][ T2304] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.890819][ T2304] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.894912][ T2304] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.901570][ T2304] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.905342][ T2304] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.948573][T13374] ªªªªª»cw: renamed from bond_slave_1 [ 427.119119][ T2304] usb 11-1: usb_control_msg returned -32 [ 427.127580][ T2304] usbtmc 11-1:16.0: can't read capabilities [ 427.484295][ T40] audit: type=1400 audit(5282262819.302:879): avc: denied { write } for pid=13356 comm="syz.6.2229" name="usbtmc0" dev="devtmpfs" ino=3287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 427.537959][ C0] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 427.967447][ T840] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 428.147794][ T840] usb 14-1: Using ep0 maxpacket: 32 [ 428.160333][ T840] usb 14-1: config 0 has an invalid interface number: 85 but max is 0 [ 428.163275][ T840] usb 14-1: config 0 has no interface number 0 [ 428.165488][ T840] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.169796][ T840] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.173414][ T840] usb 14-1: config 0 interface 85 has no altsetting 0 [ 428.178037][ T840] usb 14-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 428.181357][ T840] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.184404][ T840] usb 14-1: Product: syz [ 428.185998][ T840] usb 14-1: Manufacturer: syz [ 428.188602][ T840] usb 14-1: SerialNumber: syz [ 428.192298][ T840] usb 14-1: config 0 descriptor?? [ 428.294491][T13458] pim6reg1: entered promiscuous mode [ 428.296245][T13458] pim6reg1: entered allmulticast mode [ 428.412938][ T840] appletouch 14-1:0.85: Failed to read mode from device. [ 428.415736][ T840] appletouch 14-1:0.85: probe with driver appletouch failed with error -5 [ 428.422321][ T840] usb 14-1: USB disconnect, device number 16 [ 429.478737][ T7203] usb 11-1: USB disconnect, device number 15 [ 430.313379][T13508] sit0: entered allmulticast mode [ 430.319067][T13509] sit0: entered promiscuous mode [ 430.513012][T13539] pim6reg1: entered promiscuous mode [ 430.515398][T13539] pim6reg1: entered allmulticast mode [ 430.627519][ T840] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 430.787490][ T840] usb 14-1: Using ep0 maxpacket: 8 [ 430.791745][ T840] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 430.795202][ T840] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 430.798409][ T840] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.801650][ T840] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.805623][ T840] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.808645][ T840] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.937612][ T7203] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 431.017430][ T840] usb 14-1: usb_control_msg returned -32 [ 431.019261][ T840] usbtmc 14-1:16.0: can't read capabilities [ 431.107522][ T7203] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 431.112935][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.117275][ T7203] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.122254][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.126750][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.132770][ T7203] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 431.135889][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.141019][ T7203] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.148190][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.152847][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.158829][ T7203] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 431.161987][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 431.166354][ T7203] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 431.171225][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 431.175696][ T7203] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 431.183210][ T7203] usb 10-1: string descriptor 0 read error: -22 [ 431.185798][ T7203] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 431.189532][ T7203] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.199907][ T7203] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 431.417107][T13543] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -71 [ 431.426485][ C3] usbtmc 14-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 431.431030][ T840] usb 10-1: USB disconnect, device number 19 [ 431.477086][ T2304] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 431.592075][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2317'. [ 431.649667][ T2304] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 431.652364][ T2304] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 431.655679][ T2304] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 431.658661][ T2304] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 431.662005][ T2304] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 431.666728][ T2304] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 431.670311][ T2304] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 431.673238][ T2304] usb 13-1: Product: syz [ 431.674657][ T2304] usb 13-1: Manufacturer: syz [ 431.680922][ T2304] cdc_wdm 13-1:1.0: skipping garbage [ 431.682576][ T2304] cdc_wdm 13-1:1.0: skipping garbage [ 431.685100][ T2304] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device [ 431.686983][ T2304] cdc_wdm 13-1:1.0: Unknown control protocol [ 431.885697][ T9526] usb 13-1: USB disconnect, device number 24 [ 431.887389][ T840] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 432.047465][ T840] usb 10-1: Using ep0 maxpacket: 16 [ 432.050773][ T840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.054305][ T840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.057560][ T840] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.062957][ T840] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.066813][ T840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.072388][ T840] usb 10-1: config 0 descriptor?? [ 432.486880][ T840] hid_parser_main: 5 callbacks suppressed [ 432.486893][ T840] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 432.492911][ T840] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 432.495197][ T840] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 432.501476][ T840] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.000F/input/input32 [ 432.613458][ T840] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 432.677419][ T2304] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 432.748945][ T7203] usb 10-1: USB disconnect, device number 20 [ 432.827392][ T2304] usb 13-1: Using ep0 maxpacket: 32 [ 432.841582][ T2304] usb 13-1: config 0 has an invalid interface number: 85 but max is 0 [ 432.844182][ T2304] usb 13-1: config 0 has no interface number 0 [ 432.846062][ T2304] usb 13-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.849500][ T2304] usb 13-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.852495][ T2304] usb 13-1: config 0 interface 85 has no altsetting 0 [ 432.856303][ T2304] usb 13-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 432.859248][ T2304] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.861724][ T2304] usb 13-1: Product: syz [ 432.863052][ T2304] usb 13-1: Manufacturer: syz [ 432.864489][ T2304] usb 13-1: SerialNumber: syz [ 432.867784][ T2304] usb 13-1: config 0 descriptor?? [ 433.088874][ T2304] appletouch 13-1:0.85: Failed to read mode from device. [ 433.091090][ T2304] appletouch 13-1:0.85: probe with driver appletouch failed with error -5 [ 433.095870][ T2304] usb 13-1: USB disconnect, device number 25 [ 433.406206][ T9526] usb 14-1: USB disconnect, device number 17 [ 433.867499][ T9526] usb 14-1: new low-speed USB device number 18 using dummy_hcd [ 434.028819][ T9526] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 434.031158][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.034297][ T9526] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.038576][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.042649][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.047930][ T9526] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 434.050802][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.054697][ T9526] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.058798][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.062852][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.069348][ T9526] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 434.072072][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.075907][ T9526] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.080419][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.084699][ T9526] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.092034][ T9526] usb 14-1: string descriptor 0 read error: -22 [ 434.094558][ T9526] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 434.098117][ T9526] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.109131][ T9526] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 434.301384][T13607] wg2: entered promiscuous mode [ 434.303357][T13607] wg2: entered allmulticast mode [ 434.316818][ T7203] usb 14-1: USB disconnect, device number 18 [ 434.367398][ T840] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 434.527549][ T840] usb 13-1: Using ep0 maxpacket: 8 [ 434.533071][ T840] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.536908][ T840] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.547331][ T840] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.550494][ T840] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.555035][ T840] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.560592][ T840] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.581519][T13620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=13620 comm=syz.5.2339 [ 434.774864][ T840] usb 13-1: usb_control_msg returned -32 [ 434.784653][ T840] usbtmc 13-1:16.0: can't read capabilities [ 435.164293][T13614] cgroup: fork rejected by pids controller in /syz9 [ 436.345364][T13688] cgroup: fork rejected by pids controller in /syz5 [ 437.114056][ T2304] usb 13-1: USB disconnect, device number 26 [ 438.546867][T13774] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2372'. [ 438.687410][ T7203] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 438.695491][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2373'. [ 438.838260][ T7203] usb 11-1: Using ep0 maxpacket: 8 [ 438.854288][ T7203] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 438.858064][ T7203] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 438.861252][ T7203] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.864836][ T7203] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.869553][ T7203] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.872424][ T7203] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.083695][ T7203] usb 11-1: usb_control_msg returned -32 [ 439.086591][ T7203] usbtmc 11-1:16.0: can't read capabilities [ 439.320080][T13788] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 440.217820][ T7203] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 440.369260][ T7203] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 440.372273][ T7203] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 440.375929][ T7203] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 440.379367][ T7203] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 440.383202][ T7203] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 440.387619][ T9173] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 440.389865][ T7203] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 440.394096][ T7203] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 440.396848][ T7203] usb 14-1: Product: syz [ 440.398825][ T7203] usb 14-1: Manufacturer: syz [ 440.405756][ T7203] cdc_wdm 14-1:1.0: skipping garbage [ 440.407848][ T7203] cdc_wdm 14-1:1.0: skipping garbage [ 440.411261][ T7203] cdc_wdm 14-1:1.0: cdc-wdm1: USB WDM device [ 440.413542][ T7203] cdc_wdm 14-1:1.0: Unknown control protocol [ 440.549923][ T9173] usb 13-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 440.553645][ T9173] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.559350][ T9173] usb 13-1: config 0 descriptor?? [ 440.566593][ T9173] input: bcm5974 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input34 [ 440.609263][ T9173] usb 14-1: USB disconnect, device number 19 [ 440.765043][ T40] audit: type=1400 audit(5282262832.582:880): avc: denied { set_context_mgr } for pid=13817 comm="syz.8.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 440.776113][ T40] audit: type=1400 audit(5282262832.592:881): avc: denied { call } for pid=13817 comm="syz.8.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 441.475227][ T9526] usb 11-1: USB disconnect, device number 16 [ 441.488096][T13829] sit0: left promiscuous mode [ 441.927401][ T2304] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 442.079702][ T2304] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.082740][ T2304] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 442.086399][ T2304] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.089566][ T2304] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 442.093313][ T2304] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 442.098642][ T2304] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.101737][ T2304] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.104486][ T2304] usb 11-1: Product: syz [ 442.106014][ T2304] usb 11-1: Manufacturer: syz [ 442.113266][ T2304] cdc_wdm 11-1:1.0: skipping garbage [ 442.114987][ T2304] cdc_wdm 11-1:1.0: skipping garbage [ 442.118293][ T2304] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 442.120276][ T2304] cdc_wdm 11-1:1.0: Unknown control protocol [ 442.317727][ T2304] usb 11-1: USB disconnect, device number 17 [ 442.853771][T13853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2402'. [ 442.875786][T13853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.897619][ T7203] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 443.067431][ T7203] usb 14-1: Using ep0 maxpacket: 8 [ 443.072022][ T7203] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.076876][ T7203] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.081737][ T7203] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.086184][ T7203] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.091854][ T7203] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.095864][ T7203] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.157662][ T9173] usb 13-1: USB disconnect, device number 27 [ 443.307855][ T7203] usb 14-1: usb_control_msg returned -32 [ 443.310459][ T7203] usbtmc 14-1:16.0: can't read capabilities [ 443.690925][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2411'. [ 443.721226][T13879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.881930][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2415'. [ 443.886199][T13890] tipc: Enabling of bearer rejected, failed to enable media [ 443.997542][ T9173] usb 13-1: new low-speed USB device number 28 using dummy_hcd [ 444.007611][ T9526] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 444.148812][ T9173] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 444.151317][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.154801][ T9173] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.159081][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.162634][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 444.167017][ T9173] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 444.169596][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.172936][ T9173] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.176650][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.179383][ T9526] usb 11-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 444.180333][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 444.184315][ T9526] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.188754][ T9173] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 444.193885][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 444.194548][ T9526] usb 11-1: config 0 descriptor?? [ 444.197462][ T9173] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 444.203452][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 444.206111][ T9526] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input35 [ 444.206861][ T9173] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 444.218306][ T9173] usb 13-1: string descriptor 0 read error: -22 [ 444.220403][ T9173] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 444.223261][ T9173] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.237627][ T9173] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 444.434887][T13886] usbtmc 14-1:16.0: send_request_dev_dep_msg_in returned -71 [ 444.441581][ T9173] usb 13-1: USB disconnect, device number 28 [ 444.862110][T13897] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2418'. [ 444.962643][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.964820][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.636356][ T9526] usb 14-1: USB disconnect, device number 20 [ 446.455751][T13937] syzkaller0: entered promiscuous mode [ 446.458211][T13937] syzkaller0: entered allmulticast mode [ 446.557536][ T9173] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 446.739098][ T9173] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.742435][ T9173] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 446.745704][ T9173] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.748628][ T9173] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 446.752090][ T9173] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 446.756988][ T9173] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.760034][ T9173] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.762657][ T9173] usb 13-1: Product: syz [ 446.764026][ T9173] usb 13-1: Manufacturer: syz [ 446.768731][ T9173] cdc_wdm 13-1:1.0: skipping garbage [ 446.770420][ T9173] cdc_wdm 13-1:1.0: skipping garbage [ 446.774654][ T9173] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 446.777140][ T9173] cdc_wdm 13-1:1.0: Unknown control protocol [ 446.782897][ T9173] usb 11-1: USB disconnect, device number 18 [ 446.889364][ T9526] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 446.970938][ T9101] usb 13-1: USB disconnect, device number 29 [ 447.047380][ T9526] usb 14-1: Using ep0 maxpacket: 32 [ 447.050433][ T9526] usb 14-1: config 0 has an invalid interface number: 85 but max is 0 [ 447.053265][ T9526] usb 14-1: config 0 has no interface number 0 [ 447.055612][ T9526] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.059442][ T9526] usb 14-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.063355][ T9526] usb 14-1: config 0 interface 85 has no altsetting 0 [ 447.067196][ T9526] usb 14-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 447.070523][ T9526] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.073128][ T9526] usb 14-1: Product: syz [ 447.074471][ T9526] usb 14-1: Manufacturer: syz [ 447.076082][ T9526] usb 14-1: SerialNumber: syz [ 447.079444][ T9526] usb 14-1: config 0 descriptor?? [ 447.295404][ T9526] appletouch 14-1:0.85: Failed to read mode from device. [ 447.298182][ T9526] appletouch 14-1:0.85: probe with driver appletouch failed with error -5 [ 447.306111][ T9526] usb 14-1: USB disconnect, device number 21 [ 447.942011][T13961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2438'. [ 447.956147][T13961] 8021q: adding VLAN 0 to HW filter on device bond6 [ 447.986355][T13965] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 448.253972][T13978] Cannot find del_set index 16384 as target [ 448.377510][ T7203] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 448.447459][ T6004] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 448.549669][ T7203] usb 10-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 448.552665][ T7203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.561490][ T7203] usb 10-1: config 0 descriptor?? [ 448.577507][ T7203] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input37 [ 448.598863][ T6004] usb 11-1: Using ep0 maxpacket: 32 [ 448.603193][ T6004] usb 11-1: config 0 has an invalid interface number: 85 but max is 0 [ 448.606806][ T6004] usb 11-1: config 0 has no interface number 0 [ 448.611728][ T6004] usb 11-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.616603][ T6004] usb 11-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.621591][ T6004] usb 11-1: config 0 interface 85 has no altsetting 0 [ 448.627521][ T6004] usb 11-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 448.631342][ T6004] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.634753][ T6004] usb 11-1: Product: syz [ 448.636589][ T6004] usb 11-1: Manufacturer: syz [ 448.638953][ T6004] usb 11-1: SerialNumber: syz [ 448.643224][ T6004] usb 11-1: config 0 descriptor?? [ 448.856018][ T6004] appletouch 11-1:0.85: Failed to read mode from device. [ 448.860262][ T6004] appletouch 11-1:0.85: probe with driver appletouch failed with error -5 [ 448.868178][ T6004] usb 11-1: USB disconnect, device number 19 [ 449.208368][ T40] audit: type=1400 audit(5282262841.032:882): avc: denied { append } for pid=13996 comm="syz.9.2451" name="pfkey" dev="proc" ino=4026533108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 449.527282][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2454'. [ 449.816878][T14013] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2455'. [ 451.117516][ T2304] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 451.127387][ T9526] usb 10-1: USB disconnect, device number 21 [ 451.277563][ T2304] usb 11-1: Using ep0 maxpacket: 8 [ 451.282475][ T2304] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 451.287214][ T2304] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 451.291764][ T2304] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.295874][ T2304] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.301591][ T2304] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.305100][ T2304] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.327380][ T7203] usb 14-1: new low-speed USB device number 22 using dummy_hcd [ 451.477582][ T9526] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 451.481453][ T7203] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 451.484641][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 451.489375][ T7203] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.494221][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 451.498918][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 451.504844][ T7203] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 451.508500][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 451.512919][ T7203] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.518072][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 451.519446][ T2304] usb 11-1: usb_control_msg returned -32 [ 451.522671][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 451.525154][ T2304] usbtmc 11-1:16.0: can't read capabilities [ 451.530837][ T7203] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 451.534298][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 451.537996][ T7203] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.541829][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 451.545419][ T7203] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 451.552156][ T7203] usb 14-1: string descriptor 0 read error: -22 [ 451.554275][ T7203] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 451.558331][ T7203] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.569234][ T7203] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 451.637488][ T9526] usb 10-1: Using ep0 maxpacket: 32 [ 451.641338][ T9526] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 451.644243][ T9526] usb 10-1: config 0 has no interface number 0 [ 451.646483][ T9526] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.650745][ T9526] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.654275][ T9526] usb 10-1: config 0 interface 85 has no altsetting 0 [ 451.658820][ T9526] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 451.662135][ T9526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.665074][ T9526] usb 10-1: Product: syz [ 451.666663][ T9526] usb 10-1: Manufacturer: syz [ 451.669388][ T9526] usb 10-1: SerialNumber: syz [ 451.673489][ T9526] usb 10-1: config 0 descriptor?? [ 451.765837][T14034] usbtmc 11-1:16.0: send_request_dev_dep_msg_in returned -71 [ 451.769672][ T55] usb 14-1: USB disconnect, device number 22 [ 451.890004][ T9526] appletouch 10-1:0.85: Failed to read mode from device. [ 451.892693][ T9526] appletouch 10-1:0.85: probe with driver appletouch failed with error -5 [ 451.904508][ T9526] usb 10-1: USB disconnect, device number 22 [ 452.477748][T14058] bridge0: entered allmulticast mode [ 452.483445][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2469'. [ 452.487503][T14058] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 452.490698][T14058] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 452.493997][T14058] bridge0: port 4(netdevsim0) entered disabled state [ 452.500264][T14058] syz_tun: left promiscuous mode [ 452.502153][T14058] bridge0: port 3(syz_tun) entered disabled state [ 452.505589][T14058] bridge_slave_1: left allmulticast mode [ 452.507559][T14058] bridge_slave_1: left promiscuous mode [ 452.509542][T14058] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.513011][T14058] bridge_slave_0: left allmulticast mode [ 452.514819][T14058] bridge_slave_0: left promiscuous mode [ 452.517046][T14058] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.532698][T14058] team0: Port device bridge0 removed [ 452.534753][T14058] bridge0 (unregistering): left allmulticast mode [ 453.439259][T14076] netlink: 'syz.5.2474': attribute type 1 has an invalid length. [ 453.458344][T14076] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.473845][T14076] bond7: (slave ip6erspan0): making interface the new active one [ 453.481911][T14076] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 453.896417][ T9526] usb 11-1: USB disconnect, device number 20 [ 453.902268][T14091] netlink: 'syz.5.2480': attribute type 1 has an invalid length. [ 453.905523][T14091] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2480'. [ 454.043484][T14095] netlink: 'syz.5.2480': attribute type 1 has an invalid length. [ 454.046601][T14095] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2480'. [ 454.420392][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2485'. [ 454.765241][ T40] audit: type=1400 audit(5282262846.582:883): avc: denied { audit_write } for pid=14116 comm="syz.5.2488" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 454.777979][ T40] audit: type=1107 audit(5282262846.582:884): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 455.214870][ T40] audit: type=1400 audit(5282262847.032:885): avc: denied { write } for pid=14131 comm="syz.8.2493" lport=44023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 455.271712][T14129] ================================================================== [ 455.274249][T14129] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 455.276541][T14129] Read of size 8 at addr ffff888037a9d408 by task syz.6.2492/14129 [ 455.280925][T14129] [ 455.282136][T14129] CPU: 1 UID: 0 PID: 14129 Comm: syz.6.2492 Not tainted syzkaller #0 PREEMPT(full) [ 455.282150][T14129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.282157][T14129] Call Trace: [ 455.282162][T14129] [ 455.282166][T14129] dump_stack_lvl+0x116/0x1f0 [ 455.282192][T14129] print_report+0xcd/0x630 [ 455.282208][T14129] ? __virt_addr_valid+0x81/0x610 [ 455.282219][T14129] ? __phys_addr+0xe8/0x180 [ 455.282230][T14129] ? __cpa_addr+0x1d3/0x220 [ 455.282243][T14129] kasan_report+0xe0/0x110 [ 455.282262][T14129] ? __cpa_addr+0x1d3/0x220 [ 455.282277][T14129] __cpa_addr+0x1d3/0x220 [ 455.282290][T14129] cpa_flush+0xec/0x8a0 [ 455.282305][T14129] ? __pfx_cpa_flush+0x10/0x10 [ 455.282319][T14129] ? pgprot2cachemode+0x9a/0x130 [ 455.282330][T14129] ? __pfx_pgprot2cachemode+0x10/0x10 [ 455.282342][T14129] set_pages_array_wb+0x238/0x280 [ 455.282358][T14129] ? __pfx_set_pages_array_wb+0x10/0x10 [ 455.282376][T14129] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 455.282397][T14129] drm_gem_shmem_vm_close+0x63/0xc0 [ 455.282411][T14129] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 455.282425][T14129] remove_vma+0x88/0x160 [ 455.282436][T14129] exit_mmap+0x50a/0xb90 [ 455.282452][T14129] ? __pfx_exit_mmap+0x10/0x10 [ 455.282472][T14129] ? arch_uprobe_clear_state+0x16/0x150 [ 455.282487][T14129] __mmput+0x12a/0x410 [ 455.282497][T14129] mmput+0x62/0x70 [ 455.282505][T14129] do_exit+0x7c7/0x2bf0 [ 455.282519][T14129] ? __pfx_do_exit+0x10/0x10 [ 455.282530][T14129] ? do_raw_spin_lock+0x12c/0x2b0 [ 455.282546][T14129] ? find_held_lock+0x2b/0x80 [ 455.282556][T14129] do_group_exit+0xd3/0x2a0 [ 455.282569][T14129] get_signal+0x2671/0x26d0 [ 455.282581][T14129] ? __pfx_get_signal+0x10/0x10 [ 455.282590][T14129] ? do_futex+0x122/0x350 [ 455.282604][T14129] ? __pfx_do_futex+0x10/0x10 [ 455.282618][T14129] arch_do_signal_or_restart+0x8f/0x7c0 [ 455.282635][T14129] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.282654][T14129] ? xfd_validate_state+0x61/0x180 [ 455.282668][T14129] exit_to_user_mode_loop+0x85/0x130 [ 455.282683][T14129] do_syscall_64+0x426/0xfa0 [ 455.282696][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.282707][T14129] RIP: 0033:0x7fbaa2b8efc9 [ 455.282716][T14129] Code: Unable to access opcode bytes at 0x7fbaa2b8ef9f. [ 455.282721][T14129] RSP: 002b:00007fbaa3abf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 455.282731][T14129] RAX: fffffffffffffe00 RBX: 00007fbaa2de5fa8 RCX: 00007fbaa2b8efc9 [ 455.282738][T14129] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbaa2de5fa8 [ 455.282745][T14129] RBP: 00007fbaa2de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 455.282751][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.282757][T14129] R13: 00007fbaa2de6038 R14: 00007fff59e8f710 R15: 00007fff59e8f7f8 [ 455.282767][T14129] [ 455.282771][T14129] [ 455.371302][T14129] Allocated by task 14129: [ 455.372706][T14129] kasan_save_stack+0x33/0x60 [ 455.374180][T14129] kasan_save_track+0x14/0x30 [ 455.375625][T14129] __kasan_kmalloc+0xaa/0xb0 [ 455.377375][T14129] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 455.379502][T14129] drm_gem_get_pages+0x144/0xa10 [ 455.381442][T14129] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 455.383971][T14129] drm_gem_shmem_mmap+0xc9/0x550 [ 455.386008][T14129] drm_gem_mmap_obj+0x1b5/0x560 [ 455.388049][T14129] drm_gem_mmap+0x40b/0x620 [ 455.389928][T14129] __mmap_region+0x1309/0x27a0 [ 455.391887][T14129] mmap_region+0x1ab/0x3f0 [ 455.393651][T14129] do_mmap+0xa3e/0x1210 [ 455.395362][T14129] vm_mmap_pgoff+0x29e/0x470 [ 455.397240][T14129] ksys_mmap_pgoff+0x32c/0x5c0 [ 455.399237][T14129] __x64_sys_mmap+0x125/0x190 [ 455.401103][T14129] do_syscall_64+0xcd/0xfa0 [ 455.402603][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.404618][T14129] [ 455.405428][T14129] The buggy address belongs to the object at ffff888037a9c000 [ 455.405428][T14129] which belongs to the cache kmalloc-8k of size 8192 [ 455.409873][T14129] The buggy address is located 0 bytes to the right of [ 455.409873][T14129] allocated 5128-byte region [ffff888037a9c000, ffff888037a9d408) [ 455.414498][T14129] [ 455.415287][T14129] The buggy address belongs to the physical page: [ 455.417254][T14129] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37a98 [ 455.420236][T14129] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 455.422952][T14129] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 455.425417][T14129] page_type: f5(slab) [ 455.426776][T14129] raw: 00fff00000000040 ffff88801b443180 ffffea0000f7ce00 0000000000000006 [ 455.429693][T14129] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 455.433242][T14129] head: 00fff00000000040 ffff88801b443180 ffffea0000f7ce00 0000000000000006 [ 455.436832][T14129] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 455.440531][T14129] head: 00fff00000000003 ffffea0000dea601 00000000ffffffff 00000000ffffffff [ 455.444067][T14129] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 455.447614][T14129] page dumped because: kasan: bad access detected [ 455.450276][T14129] page_owner tracks the page as allocated [ 455.452667][T14129] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 13500, tgid 13499 (syz.9.2291), ts 429000198131, free_ts 423670703769 [ 455.460677][T14129] post_alloc_hook+0x1c0/0x230 [ 455.462647][T14129] get_page_from_freelist+0x10a3/0x3a30 [ 455.464936][T14129] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 455.467368][T14129] alloc_pages_mpol+0x1fb/0x550 [ 455.469524][T14129] new_slab+0x24a/0x360 [ 455.471325][T14129] ___slab_alloc+0xdc4/0x1ae0 [ 455.473316][T14129] __slab_alloc.constprop.0+0x63/0x110 [ 455.475615][T14129] __kvmalloc_node_noprof+0x5aa/0x9c0 [ 455.477908][T14129] pfifo_fast_init+0x12a/0x3b0 [ 455.480087][T14129] qdisc_create_dflt+0x125/0x490 [ 455.482196][T14129] mq_init+0x345/0x490 [ 455.483960][T14129] qdisc_create_dflt+0x125/0x490 [ 455.486034][T14129] dev_activate+0xaae/0x12d0 [ 455.488002][T14129] __dev_open+0x432/0x7c0 [ 455.489842][T14129] __dev_change_flags+0x55d/0x720 [ 455.491967][T14129] netif_change_flags+0x8d/0x160 [ 455.494054][T14129] page last free pid 13233 tgid 13232 stack trace: [ 455.496798][T14129] __free_frozen_pages+0x7df/0x1160 [ 455.498927][T14129] __put_partials+0x130/0x170 [ 455.500974][T14129] qlist_free_all+0x4d/0x120 [ 455.502937][T14129] kasan_quarantine_reduce+0x195/0x1e0 [ 455.505211][T14129] __kasan_slab_alloc+0x69/0x90 [ 455.506913][T14129] __kvmalloc_node_noprof+0x35c/0x9c0 [ 455.508501][T14129] compute_postorder+0xf2/0x990 [ 455.509956][T14129] bpf_check+0x6593/0xb710 [ 455.511385][T14129] bpf_prog_load+0x112e/0x2850 [ 455.512887][T14129] __sys_bpf+0x3e72/0x4980 [ 455.514296][T14129] __x64_sys_bpf+0x78/0xc0 [ 455.515947][T14129] do_syscall_64+0xcd/0xfa0 [ 455.517804][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.520269][T14129] [ 455.521246][T14129] Memory state around the buggy address: [ 455.523548][T14129] ffff888037a9d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.526584][T14129] ffff888037a9d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 455.529848][T14129] >ffff888037a9d400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 455.533099][T14129] ^ [ 455.534902][T14129] ffff888037a9d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 455.537572][T14129] ffff888037a9d500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 455.540087][T14129] ================================================================== [ 455.544080][T14129] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 455.547160][T14129] CPU: 0 UID: 0 PID: 14129 Comm: syz.6.2492 Not tainted syzkaller #0 PREEMPT(full) [ 455.551079][T14129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 455.555507][T14129] Call Trace: [ 455.557015][T14129] [ 455.558215][T14129] dump_stack_lvl+0x3d/0x1f0 [ 455.560092][T14129] vpanic+0x640/0x6f0 [ 455.561803][T14129] panic+0xca/0xd0 [ 455.563426][T14129] ? __pfx_panic+0x10/0x10 [ 455.565360][T14129] ? __cpa_addr+0x1d3/0x220 [ 455.567325][T14129] ? preempt_schedule_common+0x44/0xc0 [ 455.569671][T14129] ? preempt_schedule_thunk+0x16/0x30 [ 455.571951][T14129] ? check_panic_on_warn+0x1f/0xb0 [ 455.574115][T14129] check_panic_on_warn+0xab/0xb0 [ 455.576232][T14129] end_report+0x107/0x170 [ 455.578110][T14129] kasan_report+0xee/0x110 [ 455.580038][T14129] ? __cpa_addr+0x1d3/0x220 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 455.581940][T14129] __cpa_addr+0x1d3/0x220 [ 455.583875][T14129] cpa_flush+0xec/0x8a0 [ 455.585694][T14129] ? __pfx_cpa_flush+0x10/0x10 [ 455.587769][T14129] ? pgprot2cachemode+0x9a/0x130 [ 455.589892][T14129] ? __pfx_pgprot2cachemode+0x10/0x10 [ 455.592176][T14129] set_pages_array_wb+0x238/0x280 [ 455.594328][T14129] ? __pfx_set_pages_array_wb+0x10/0x10 [ 455.596769][T14129] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 455.599408][T14129] drm_gem_shmem_vm_close+0x63/0xc0 [ 455.601833][T14129] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 455.604362][T14129] remove_vma+0x88/0x160 [ 455.606104][T14129] exit_mmap+0x50a/0xb90 [ 455.607931][T14129] ? __pfx_exit_mmap+0x10/0x10 [ 455.609960][T14129] ? arch_uprobe_clear_state+0x16/0x150 [ 455.612266][T14129] __mmput+0x12a/0x410 [ 455.613848][T14129] mmput+0x62/0x70 [ 455.615395][T14129] do_exit+0x7c7/0x2bf0 [ 455.617196][T14129] ? __pfx_do_exit+0x10/0x10 [ 455.619206][T14129] ? do_raw_spin_lock+0x12c/0x2b0 [ 455.621369][T14129] ? find_held_lock+0x2b/0x80 [ 455.623404][T14129] do_group_exit+0xd3/0x2a0 [ 455.625347][T14129] get_signal+0x2671/0x26d0 [ 455.627293][T14129] ? __pfx_get_signal+0x10/0x10 [ 455.629382][T14129] ? do_futex+0x122/0x350 [ 455.631283][T14129] ? __pfx_do_futex+0x10/0x10 [ 455.633321][T14129] arch_do_signal_or_restart+0x8f/0x7c0 [ 455.635691][T14129] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 455.638371][T14129] ? xfd_validate_state+0x61/0x180 [ 455.640567][T14129] exit_to_user_mode_loop+0x85/0x130 [ 455.642831][T14129] do_syscall_64+0x426/0xfa0 [ 455.644694][T14129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.647151][T14129] RIP: 0033:0x7fbaa2b8efc9 [ 455.649037][T14129] Code: Unable to access opcode bytes at 0x7fbaa2b8ef9f. [ 455.651914][T14129] RSP: 002b:00007fbaa3abf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 455.655443][T14129] RAX: fffffffffffffe00 RBX: 00007fbaa2de5fa8 RCX: 00007fbaa2b8efc9 [ 455.658786][T14129] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbaa2de5fa8 [ 455.662207][T14129] RBP: 00007fbaa2de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 455.665552][T14129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.668897][T14129] R13: 00007fbaa2de6038 R14: 00007fff59e8f710 R15: 00007fff59e8f7f8 [ 455.672284][T14129] [ 455.674448][T14129] Kernel Offset: disabled [ 455.676310][T14129] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:25:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a43b580 RCX=ffffffff81b14373 RDX=ffff88801d6d4900 RSI=ffffffff81b1434d RDI=0000000000000005 RBP=ffffc90000157cf8 RSP=ffffc90000157ba0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c79e5e R12=1ffff9200002af7c R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4876b1 RIP=ffffffff81b14353 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69d6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c24ed6d CR3=0000000063434000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a01307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a01315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a1b74a8 00007f300a1b74a0 00007f300a1b7498 00007f300a1b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300ad1d100 00007f300a1b7460 00007f300a1b7478 00007f300a1b74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a1b74b8 00007f300a1b74b0 00007f300a1b74a8 00007f300a1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8530e555 RDI=ffffffff9ae0a820 RBP=ffffffff9ae0a7e0 RSP=ffffc9000dd1f1c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3330383838666666 R12=0000000000000000 R13=000000000000006b R14=ffffffff9ae0a7e0 R15=ffffffff8530e4f0 RIP=ffffffff8530e57f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ad6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f823ffc CR3=000000000e182000 CR4=00352ef0 DR0=fffffffffffffff1 DR1=64cd6b2aec9cee78 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaa2c12fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaa2c12fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaa2c12fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaa2c12ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaa2c1307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbaa2c1315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000030647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000013475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffea000114f040 RCX=ffffffff8211d97a RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffff88803bc1aaf8 RSP=ffffc900243d7950 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=ffffea000114f040 R14=0000000000000000 R15=ffffea000114f070 RIP=ffffffff81bd339c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555570e20500 ffffffff 00c00000 GS =0000 ffff8880d6bd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2710e1 CR3=0000000063434000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a012ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a01307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a01315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a1b74a8 00007f300a1b74a0 00007f300a1b7498 00007f300a1b7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300ad1d100 00007f300a1b7460 00007f300a1b0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f300a1b74b8 00007f300a1b74b0 00007f300a1b74a8 00007f300a1b74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000080 RBX=ffff888029230810 RCX=0000000000000007 RDX=ffff88803b6ac900 RSI=ffffffff8639d28a RDI=0000000000000005 RBP=0000000000000007 RSP=ffffc900038ef260 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000007 R11=0000000000000001 R12=ffffc9000013d138 R13=ffff88802923086c R14=ffff888029230818 R15=0000000000000000 RIP=ffffffff8639d297 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cd6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f300ae47f98 CR3=0000000035db5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe096c9360 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ecd412fdb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ecd412fe8 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ecd412fe2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ecd412ff6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ecd41307c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0ecd41315a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000