last executing test programs: 12m22.897955907s ago: executing program 32 (id=596): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)=""/217, &(0x7f0000000240)=0xd9) syz_emit_ethernet(0xe2, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a823008100230086dd6000200000a4110000000000000000000000000000000000ff020000000000000000000000000001000004000000000000000000009c90780100000000000000b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c77733846860829accf2af44c0e1aaaaf5324c9ae1cadd9e65f82310f80cf64f46c18a0a52e4dbc06d178761191fda0a250498ce1b5c603debf9e05d8de03dc5954339e1920f40747ff3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f6cde9c5018586db672628c1415233979ba3df3d8a8490bce9cafc2ab6acde4772ac98b284af830fbdcbfa010f1a75ce41ec8ee14ccaaff76c29811d3f81f52e48101b6dd5441ef40f40a6bdd915c67bd56ac3431dd16126230d753745cbe28505b4bf35cf61811335da6be7b893fdbef504bc49f579c6e6725dcee11ed97eb3e522877514851c77463f2d117b7d7fe0f581fcfc337c4e44bb6b9eb7eefd1210bcd74c6d59a5966578d85a962f18cf8d2401fca39d9b07b58a07911f221da314542c003f91a4587f606547041c24f11e086d9bcdf8094369b5631eaf8fbddc41fb86187542b5ebf097760e58ed72b0e26720a2988e9da8201"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 11m52.597700762s ago: executing program 33 (id=1061): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xb00, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x14000000}}}}}, 0x0) 11m40.870082218s ago: executing program 34 (id=1330): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x9}, 0x3}}}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m1.077067698s ago: executing program 35 (id=1892): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x800000001, 0x4) sendmmsg$inet6(r0, &(0x7f0000003840)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x1, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="880000000000000029000000040000005c0d0000000000ae0738000000010c06070001040000000000001cffffff00000000090000000000000000000000000000000600000000000000a7ffffffffffffffc20400000095c2040000000a32df04f3e00157e70000000000190000000000000101090000000000000000000001000000000000000014"], 0xa0}}], 0x1, 0x85) 10m49.653744945s ago: executing program 36 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000015000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m41.535241841s ago: executing program 37 (id=2200): r0 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000003c0)=0x800000001, 0x4) sendmmsg$inet6(r0, &(0x7f0000003840)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x1, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="880000000000000029000000040000005c0d0000000000ae0738000000010c0607000104000000000000ffffffff00000010090000000000000000000000000000000600000000000000a7ffffffffffffffc20400000095c2040000000a32df04f3e00157e70000000000190000000000000101090000000000000000000001000000000000000014"], 0xa0}}], 0x1, 0x85) 10m10.205917711s ago: executing program 38 (id=2739): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000001c0)="65660f38f6a1440066b9400101c066b800a0000066ba000000000f300f01322e0f32f367dcc566b8921f00000f23c00f21f8663500000d000f23f8b88c008ed8640fc79a000166b8010000000f01d9b82f000f00d0", 0x55}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e22, @loopback}}, 0x1, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e27, @empty}}, 0x100008, 0x5, 0x0, 0x1f4, 0x28, 0xfffffff5, 0x8}, 0x9c) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) fdatasync(r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 9m58.613163024s ago: executing program 39 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (fail_nth: 5) 9m2.181275761s ago: executing program 40 (id=3553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_eeprom={0x43, 0x7, 0x1000000}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002640), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000002680)={0xffffff7f, 0x2, 'client1\x00', 0x0, "2245941080736c1d", "db7895b88a8cfee74a15e0c3d0a55a5cb7f822ac34a3a29d6da58b5d00001000"}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x80000000000007, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m55.072820455s ago: executing program 41 (id=3670): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x144d, 0x51, 0x10001, 0x0, 0x884f, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000040)={0xa, 0x200000, 0x0, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xfffffffffffffe88) read(r2, &(0x7f00000000c0)=""/227, 0xe3) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) 8m44.920272251s ago: executing program 42 (id=3904): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210, 0x0, 0x16}, 0x94) 8m43.859346668s ago: executing program 43 (id=3767): r0 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 7m23.336015744s ago: executing program 44 (id=5166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 7m11.626208279s ago: executing program 45 (id=5280): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x4, 0x7ff}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x5000, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) fcntl$setlease(r5, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x600, 0x48) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@my=0x0, 0x4}, 0x2, 0x2, 0x40, 0xff}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff02000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6m53.608303209s ago: executing program 46 (id=5432): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42404}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) 6m43.030614541s ago: executing program 0 (id=5566): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r0, 0x127a, 0x8) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0xc}, {0x6, 0x0, 0x0, 0x7fff7ff7}]}) 6m43.029758496s ago: executing program 0 (id=5568): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040), 0x0) 6m42.968563738s ago: executing program 0 (id=5570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0xffffffffffffff9e) 6m42.968236434s ago: executing program 0 (id=5572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0x1]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m42.851380006s ago: executing program 0 (id=5573): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)='W', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 6m42.851263339s ago: executing program 0 (id=5574): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x800, 0x100, 0x551}}) 6m27.311872304s ago: executing program 47 (id=5574): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x800, 0x100, 0x551}}) 5m47.469383658s ago: executing program 6 (id=6222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000eeffffff00000000858c14000000000095d753bcfaf38af4e25793b23ff02c9856be98bcaf7d523f2a11ecca9e3cc3a0bcf479271605d7e00649abbd257de2f40b308e8ab0bee76f20dc405064ac788c10ac5a604b9073b8791e6abcc44c7e6d8cef0f7d5baf312b3407998b61d66f16c22490e150ecee454a7d8e17fe9f53bf8b1a372e7dd35667304712674ff07ef51024694223e08453a358040f16ddea122fe0ff6f97ed", @ANYBLOB="e686a8a53dab80c5acb8b49d84f8281d43faebf80aeac12bfd612587bd1c9231dba2e7e4d57d04b12153fcbda6554ad744ea91685d43730401ecad16b7edb122204ac71641d721ac7ffe1d651df23a5ee0e9a85c865ddb024603d76ed587468cd44e91", @ANYBLOB="a9b2e1132f0a5740a3ea9535e974ebc767fb32421d2b66076f6a9f2ebb201f4333f1176901c4d11d80d609040592ab59da1702b462096b9e043c9cb0c523db108abcb9935ed2231bcffc1cac1bba9094100600dd1c38a29db3c8c56e4742c0340eff000000000000003fa9b4d0fde516"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000b40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='qnx6\x00', 0x20000a, 0x0) r1 = socket$inet6(0xa, 0xa, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x3, @mcast1}}}, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @mcast1, 0x4}}}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m47.22051516s ago: executing program 6 (id=6225): r0 = socket(0x21, 0x2, 0x9) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xd}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) 5m47.17037826s ago: executing program 6 (id=6226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) ppoll(&(0x7f0000000240)=[{r3, 0x8210}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m46.800576475s ago: executing program 6 (id=6229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth0_to_bond\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700004dcdf25280000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0xdddd1000, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r10, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) 5m46.800456118s ago: executing program 6 (id=6230): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = eventfd2(0x95e, 0x800) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 5m46.173767615s ago: executing program 6 (id=6241): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x404c000) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) 5m46.173682627s ago: executing program 48 (id=6241): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES64=r0], 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x404c000) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) 3m38.699325615s ago: executing program 8 (id=8024): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0xc018480b, &(0x7f0000000080)={0x2, 0xffffffff}) 3m35.689413795s ago: executing program 8 (id=8084): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x800, 0xfffc, {0x4, 0x1}, {0x17, 0x2}, @cond=[{0x7, 0x4, 0x200, 0xde2d, 0xb, 0xfbfe}, {0xff, 0x3, 0xfffb, 0x801, 0x0, 0x529}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) (fail_nth: 96) 3m35.569141742s ago: executing program 8 (id=8088): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x5}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f14, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100}}}}}}}}}, 0x4a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="0300", 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r5 = fcntl$dupfd(r1, 0x0, r2) name_to_handle_at(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@OVL_FILEID_V1={0x28, 0xf8, {'\x00', {0x0, 0xfb, 0x25, 0x5, 0x6, "48cf8f9651a46a00", "6cf8f862ac739beae77c460b5f75ce47"}}}, 0x0, 0x1600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x5}, 0x1c) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f14, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100}}}}}}}}}, 0x4a) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="0300", 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r4}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={[{@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) (async) fcntl$dupfd(r1, 0x0, r2) (async) name_to_handle_at(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@OVL_FILEID_V1={0x28, 0xf8, {'\x00', {0x0, 0xfb, 0x25, 0x5, 0x6, "48cf8f9651a46a00", "6cf8f862ac739beae77c460b5f75ce47"}}}, 0x0, 0x1600) (async) 3m35.455821099s ago: executing program 8 (id=8090): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000300", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) 3m34.569147003s ago: executing program 8 (id=8095): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xf97f, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000300)=r8, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r10, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m34.29908801s ago: executing program 8 (id=8096): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004e41d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 3m34.257292738s ago: executing program 49 (id=8096): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004e41d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 3m14.113019603s ago: executing program 5 (id=8376): r0 = io_uring_setup(0x2f34, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 3m14.040562226s ago: executing program 5 (id=8377): r0 = io_uring_setup(0x2f34, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000180)={0x9280000000000000, 0x6000, 0x0, 0x7, 0xb}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m13.899292106s ago: executing program 5 (id=8381): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x705b02, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x800], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) (async) write$uinput_user_dev(r5, &(0x7f0000000500)={'syz1\x00', {0x7, 0x800, 0xcb2, 0x4}, 0x1e, [0x8, 0x9, 0x2, 0xdc, 0x800, 0x1, 0x3, 0x9, 0xf07, 0x1, 0x7fffffff, 0xfff, 0x7f, 0xfffffffb, 0x2, 0x3ff, 0x8, 0x2, 0x3, 0x9, 0x10000, 0x0, 0x10001, 0x100, 0x1, 0x3, 0x10000, 0x6, 0x3, 0x7fffffff, 0x7, 0x8, 0xdc3, 0x6, 0x7, 0x804, 0x5, 0xfffffff8, 0x7, 0xa33, 0x3, 0x6, 0x101, 0x5, 0x3ff, 0x9, 0x4, 0x0, 0x7, 0xffffff7f, 0x4, 0x5, 0xb, 0x4, 0x6, 0x5, 0x3, 0xf, 0x3, 0x401, 0x6, 0x2, 0xd, 0x46b1], [0x1ff, 0x10000, 0x1000, 0xd, 0x9, 0x0, 0x4118, 0xb, 0x4, 0xfffffffc, 0x4, 0x4, 0xecb, 0x3ff, 0x7, 0x1e, 0x263b, 0x8, 0x2bad511e, 0x7fff, 0x1, 0x10000, 0x1, 0x5, 0xa2, 0x3, 0x4, 0xaea, 0xfff, 0xffffffff, 0xe, 0x4, 0x5, 0x2, 0x4, 0x58, 0xfffffe01, 0x6, 0xfffffff8, 0x4f, 0x3, 0x7, 0x5, 0x4, 0x1, 0xc42, 0x2, 0x8, 0xfffffff9, 0x80, 0x3, 0xd832, 0x3f, 0x5, 0x8, 0x5, 0x2, 0x4, 0x4, 0x84d2, 0x8, 0x8, 0x7fff, 0x8], [0x0, 0x1, 0x7, 0x9, 0x2, 0xfffffc00, 0x4, 0xffff, 0x1, 0x6, 0xfffffffd, 0x480, 0x0, 0x4, 0x33668993, 0x80000001, 0x547f, 0x0, 0x2, 0x3, 0x6, 0x6, 0x5, 0x200, 0xbe0e, 0x4, 0x7, 0x5bec, 0x9, 0x10000, 0xb, 0x200, 0x2, 0x40000000, 0x8000, 0xfffffff2, 0x0, 0x6, 0x2, 0x7fff, 0x7, 0x10000, 0x10001, 0xffffffff, 0x1, 0x1, 0xa5, 0x9c, 0x2fe, 0x1, 0x80000000, 0x0, 0x6, 0x8, 0x4, 0x1000, 0x8, 0x3, 0x6, 0x7, 0x40, 0x200, 0x3, 0x5], [0xb8200000, 0x10001, 0x4, 0x7fff, 0x13, 0x9c89, 0x8, 0x0, 0x6, 0xfffffe01, 0x400, 0x0, 0x4, 0x2000000, 0x4, 0x0, 0x5, 0x0, 0x3b3, 0xe726, 0xfffffffd, 0x4, 0x2, 0x10000, 0x3, 0x471, 0x101, 0x5, 0x7, 0x1, 0x4, 0x800, 0x2, 0x4, 0x8, 0x9, 0x7ff, 0x5, 0xfffffffb, 0x94e, 0x7, 0x587, 0xd, 0x9, 0x1ff, 0xc, 0x0, 0x9e1, 0x7ff, 0x4, 0x5, 0x0, 0xb, 0xfffffffb, 0x5, 0xa, 0x4, 0x93f5, 0x8, 0x100, 0x2, 0x4, 0x5, 0x5]}, 0x45c) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRESHEX=r5, @ANYBLOB="26809feaec9cc9d6391fc4922e7c7433f3baee517ecf65fb9e866d8fdae8263cf0c073683622ad2a058c5c506280bc2d75a36be17489812a9e61c7ba161a80f960de5198f73827d00a75acb67f31242b287748dd3c53c3e1e8ed40e8aa59747117a20f2d9e432926969d1df5cf97cbe6a6d0518a307be0e7eba24359c26e3cadfa6cfc45f27026d86a197d4853249b7601ac63668f83d76b8bd88ab0c32766483c34c808475ea8ea7bb1db2f42c1e16886d2608da65a30d1f22288c1f05d595deec700"/222], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r8, 0xc02c5638, &(0x7f0000000080)={0x8b, 0x4, 0x5}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) accept4$llc(r1, 0x0, &(0x7f0000000240), 0x800) (async) r9 = accept4$rose(r1, &(0x7f0000000640)=@short={0xb, @dev, @bcast, 0x1, @default}, &(0x7f0000000680)=0x1c, 0x80000) getsockname(r9, &(0x7f00000003c0)=@nfc, &(0x7f00000006c0)=0x80) (async) getsockopt$inet6_udp_int(r7, 0x11, 0x67, 0x0, &(0x7f0000000080)=0x4f) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10300}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @macvlan={{0x27}, {0x44, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x40, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}, {0xa, 0x4, @local}, {0xa, 0x4, @remote}, {0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}]}, 0x90}}, 0x4040010) 3m13.819146584s ago: executing program 5 (id=8383): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000003f00", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) 3m12.957782607s ago: executing program 5 (id=8397): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff003f0700", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x50}}, 0x0) 3m12.659061902s ago: executing program 5 (id=8401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000fe1400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 3m12.569944727s ago: executing program 50 (id=8401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000fe1400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2m42.277496109s ago: executing program 3 (id=8921): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000cff500000000ffffffff00000760", @ANYRES32=0x0, @ANYBLOB="000000000140060030001280080001006873720024000280050007000100000008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x50}}, 0x0) 2m42.18130872s ago: executing program 3 (id=8925): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000001000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2m42.181227594s ago: executing program 3 (id=8926): syz_emit_ethernet(0x126b, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0) 2m42.106161852s ago: executing program 3 (id=8927): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000fe00", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "b6000000551265406c7f3004000000ef00"}}) 2m41.197711658s ago: executing program 3 (id=8933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="c05cae3494d6"}]}, 0x40}}, 0x8000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m40.845244991s ago: executing program 3 (id=8941): syz_emit_ethernet(0x34, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@generic={0x8906, "ed9e681963b59679626ced9af0b1af9db4b9ba44905bd8bb232ea0f04bdbf0904bc60fb5f75f"}}}, 0x0) 2m40.792066891s ago: executing program 51 (id=8941): syz_emit_ethernet(0x34, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@generic={0x8906, "ed9e681963b59679626ced9af0b1af9db4b9ba44905bd8bb232ea0f04bdbf0904bc60fb5f75f"}}}, 0x0) 1m10.656445233s ago: executing program 1 (id=10382): r0 = open(&(0x7f0000000000)='./file0\x00', 0x88c040, 0x59) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_OFLAGS={0x0, 0x3, 0x100}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) 1m10.594350752s ago: executing program 1 (id=10383): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x12}}) 1m10.527870527s ago: executing program 1 (id=10385): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x3d6b, 0x443f]}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}]}, 0x30}}, 0x40) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}]}, 0x30}}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf2525080000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r1, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c0002000000080001007063690011000200303030303a30303a31302e300000000008008c0000000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r3, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000044008c0004000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRES16=r6, @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000003c0)=0x8, 0x4) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1, 0xc, 0x0, "fbda6b21f1d7479797795318a9b4b19471c838f51ef5dfaee256e99c476c937d", 0x2036315a}) 1m10.527328841s ago: executing program 1 (id=10386): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r3}}}, 0x78) geteuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r0, &(0x7f00000001c0)={0x130, 0xfffffffffffffff5, r2, {0x101, 0x2, 0x0, '\x00', {0x100, 0x3, 0x5, 0x4, r4, r5, 0x2000, '\x00', 0x1, 0x100000004, 0x8001, 0x0, {0xf, 0x6}, {0x2, 0xfffffffd}, {0x4, 0x3}, {0x1, 0x5}, 0x9, 0x5, 0x7ff, 0x5}}}, 0x130) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x6, 0x11ec, [0x0, 0x2000000007c0, 0x200000000b26, 0x200000000db2], 0x0, &(0x7f00000003c0), &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x10, 0x88f8, 'veth0_to_hsr\x00', 'ip_vti0\x00', 'bond_slave_1\x00', 'team_slave_0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x2e6, 0x2e6, 0x336, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x13, [{0x0, 0x7, 0x9, 0x7ff}, {0x0, 0x0, 0x1, 0x650}, {0x9, 0x5, 0xd, 0xfffffff8}, {0x6, 0xff, 0x8e, 0x800}, {0x1, 0x7, 0x1, 0x6}, {0x5, 0x6, 0x1, 0xcd1}, {0x84, 0x0, 0x40, 0x7}, {0x8, 0x3, 0x7, 0xfffffffb}, {0x1, 0x8, 0x4, 0x1}, {0x87ff, 0x5, 0x7, 0x2}, {0x1, 0x6, 0x0, 0x7}, {0x8001, 0x3, 0xa, 0xa}, {0x1000, 0x2, 0x1, 0x3}, {0x7fff, 0x2, 0x7, 0x80000001}, {0x8, 0xd6, 0x6, 0x497213d4}, {0x2, 0xc, 0x1, 0xe7d}, {0x6, 0xe8, 0x35, 0x3}, {0x4db9, 0x6, 0x2, 0x10}, {0xc4e7, 0x8, 0x6, 0x653d0a90}, {0x400, 0x0, 0xfc, 0xfff}, {0x0, 0xa, 0x1}, {0x34, 0x2, 0x4, 0x7f}, {0x6, 0xd6, 0x0, 0x1}, {0x5, 0x2, 0xd7, 0xdc}, {0x800, 0x1, 0xf6, 0xfffffff5}, {0x8, 0xf9, 0x7, 0x2}, {0x9, 0x7a, 0xd, 0x7}, {0x3, 0x0, 0x7, 0x1}, {0x3, 0x6, 0x1, 0x2}, {0x1, 0x1, 0x9, 0x2}, {0x101, 0x14, 0x6, 0x3fb}, {0x100, 0x1, 0x5, 0x4}, {0x9, 0x6, 0x3, 0x7}, {0x1, 0xcc, 0xf, 0x4}, {0x341, 0x8, 0x1, 0x1}, {0xa, 0x9e, 0x5, 0x4}, {0xec8, 0x5a, 0x2}, {0x8, 0xfd, 0x6, 0x151}, {0x0, 0x2, 0x2, 0xfffffff8}, {0x800, 0x4, 0x6, 0xffffffff}, {0x40, 0x0, 0x4, 0x7fff}, {0x2, 0x1, 0x8, 0x8}, {0x77a6, 0xb, 0x0, 0x3}, {0x7f, 0xc5, 0x7, 0x1}, {0xff, 0xf9, 0x0, 0x5}, {0x81, 0x6, 0x7, 0x5}, {0x3, 0x7f, 0x6, 0x200}, {0xf3, 0x1, 0x3, 0xffffd307}, {0x0, 0x3, 0x0, 0x4}, {0x1, 0x5, 0x6}, {0x9, 0xf8, 0x7, 0x8}, {0x8, 0xfa, 0x4b, 0x6}, {0x844b, 0x8, 0x4, 0x3ff}, {0x6, 0x8, 0x0, 0x6}, {0x5, 0xf0, 0x0, 0x8}, {0x6, 0x6, 0x6, 0x819}, {0x5, 0xa0, 0x1, 0x4fba379a}, {0x7ff, 0x26, 0xd}, {0x4, 0x9, 0xd2, 0x2}, {0x5, 0x2, 0x40, 0x2}, {0x3, 0x1, 0x3, 0x8}, {0x5, 0x8, 0xf, 0x782}, {0xd, 0x2, 0x5, 0x80000001}, {0x0, 0x7f, 0x4, 0x9}]}}}, @devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x4, 0x290, 0x8, 0x0, 0xfffffffd}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7e0, 'syz0\x00', {0x6}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x5, 0x20, 0xd, 'wlan0\x00', 'team_slave_1\x00', 'veth1_to_bond\x00', 'team0\x00', @empty, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0xae, 0xfe, 0x136, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x47}], 0x0, 0x2}}}], [@common=@log={'log\x00', 0x28, {{0x2, "e6a58c37d184fbfaec36a8ad8768e5f27a761fc0356bfe80c5a44ae1b2df", 0x6}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}, {0x3, 0x2e, 0x4305, 'bond_slave_1\x00', 'veth0\x00', 'veth1_virt_wifi\x00', 'ip6erspan0\x00', @random="890d7b139f69", [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xae, 0xde, 0x126, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x0, 0x0, 0x7, 0x6, 0x401}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x2, 0x0, {0xc55b}}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x18, 0x0, 0x8035, 'ip6gre0\x00', 'dvmrp1\x00', 'bridge0\x00', 'veth0_to_batadv\x00', @empty, [0x7f, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff], 0xde, 0x10e, 0x15e, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x5, 0xd, 0x4, 0xfff, 0x7}}}, @state={{'state\x00', 0x0, 0x8}, {{0x7}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', {0x10001}}}}}, {0x5, 0x0, 0x88fb, 'wg1\x00', 'team0\x00', 'pim6reg0\x00', 'bond_slave_0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x906, 0x906, 0x936, [@among={{'among\x00', 0x0, 0x870}, {{@zero, @zero, 0x3, {[0x4, 0x9, 0x4, 0x1, 0x1, 0xfff, 0x6, 0x9, 0x200, 0x1, 0x7fffffff, 0x6, 0x80000000, 0x8, 0x0, 0xfffff000, 0x76, 0x9, 0x8925, 0xfffffffb, 0x9, 0x8, 0x794, 0x2879, 0xd, 0x7, 0x40, 0x5, 0xfffff801, 0x7, 0xe, 0x5, 0x2, 0x10000, 0x5, 0x40, 0x1, 0x7, 0x9, 0x3f, 0xe1e9, 0x8, 0x800, 0x7f, 0x9, 0x5, 0x117, 0x3, 0x2, 0xce, 0x7, 0x1, 0x3, 0x2, 0x400, 0x10, 0x20000000, 0x1, 0x3, 0x2, 0x471, 0x0, 0x64, 0x100, 0x10, 0x3, 0xffff, 0x10000, 0x9, 0xe1, 0x2, 0xb, 0x9, 0xf6db, 0x6, 0x65d80000, 0x8, 0x10001, 0x1d1, 0x81, 0x3212, 0x7, 0x1, 0x5, 0xfffffffd, 0x1, 0x100, 0x81, 0x101, 0x6, 0x36b601c3, 0x5, 0x76f, 0x1, 0x9, 0x1, 0x4a, 0x9, 0x8, 0x100, 0x6, 0xb922, 0x80, 0x558, 0x81, 0xfffffff9, 0x8, 0x81, 0x5, 0x4d9, 0x8, 0x6, 0x12a4, 0x7, 0x3, 0x7, 0x9, 0x0, 0x0, 0xfffffffd, 0x254, 0x0, 0x2, 0x101, 0x5, 0x4, 0x0, 0x4, 0x5, 0x7fffffff, 0x24e8, 0xfffff756, 0x100, 0x57, 0x2, 0x4, 0xb93, 0x3, 0x4c, 0x5, 0x3, 0x5, 0x3, 0x2d, 0x5, 0x7, 0x870, 0xffffffff, 0xa, 0x1, 0x9, 0x0, 0x0, 0xf, 0x9, 0x4, 0x1eea, 0x6, 0x9, 0x3, 0x7, 0x80000000, 0x9, 0x9, 0x80000001, 0x3, 0x2b0a, 0xf, 0x2d, 0x2, 0x5, 0x10, 0x2, 0x1ff, 0x7, 0xe19, 0x4, 0x1, 0x800, 0x4, 0x7, 0x10000, 0x7fff, 0x40, 0xfff, 0x1, 0x400, 0x1, 0xa3, 0x2, 0x3, 0x400, 0x9, 0xb1, 0x4, 0x4f, 0x8001, 0x6, 0x71, 0x8000, 0x6, 0xa, 0x6, 0x7aa, 0xea6, 0x3, 0x101, 0x7, 0x0, 0x7, 0xc6, 0x7, 0x7fffffff, 0x80000000, 0x3d1, 0x4, 0x4e57b77, 0xfffffff8, 0x8, 0x4, 0x7, 0x7, 0x1000, 0x5, 0x5, 0xfffff6c8, 0xd, 0x2, 0x7f, 0x8, 0x8, 0x8000, 0x400, 0x5, 0x7f, 0xffff, 0x7, 0xa069, 0x0, 0x6, 0xe8e, 0x5, 0x3, 0x3, 0xa5af, 0x3a, 0x2, 0xe3b, 0xfffffffb, 0x1bf5, 0x1, 0x401, 0xff, 0x80, 0xffff, 0x5, 0x200], 0x4, [{[0x8, 0x5], @dev={0xac, 0x14, 0x14, 0x2f}}, {[0xe, 0x7], @local}, {[0x7, 0x2532], @rand_addr=0x64010102}, {[0x0, 0x2], @private=0xa010100}]}, {[0x7, 0x2, 0x1000, 0x8000, 0x8, 0x3, 0x2, 0x7ff, 0x7, 0x5, 0xc1, 0x0, 0xf6c5, 0x7f, 0x92, 0xb2, 0x0, 0x4, 0x8, 0x46, 0x81, 0x9, 0x7, 0xafd, 0x9, 0x66f2, 0x3, 0x1, 0xb, 0xf2, 0x3, 0xff, 0x1, 0x3, 0x6, 0xd8, 0x6, 0x5a9, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x1, 0x7, 0x1ab7, 0x9, 0x1, 0xb, 0x3, 0x3, 0x4, 0x10001, 0xd, 0x0, 0x4, 0x66, 0x78, 0x40000000, 0x200, 0x9, 0xfffff293, 0x10, 0xdc44, 0x6, 0xffff, 0x3, 0x5, 0x40, 0x4, 0x10, 0x5, 0x7, 0x3, 0x9, 0x5, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40, 0x1000, 0x7, 0xffffffff, 0x8, 0x401, 0x1, 0x0, 0x5, 0x8000, 0xc477, 0x1, 0x800, 0x2, 0xa, 0xd, 0x3ff, 0x1, 0x7, 0x7fffffff, 0x7e3, 0x3, 0x20000, 0x7c, 0xfff, 0x4, 0xf, 0x3ff, 0xe, 0x7, 0x80000001, 0x7235, 0x9, 0x1, 0xbd1, 0x81, 0x0, 0x8001, 0x6, 0x8, 0x3e, 0x6, 0x5, 0xf8, 0x41, 0x74, 0x5, 0xc7e, 0x7, 0x3, 0x40, 0x9, 0x4, 0x8, 0x3, 0x80, 0xe1, 0xfffffffa, 0x9, 0x1, 0x6, 0x7fff, 0x5, 0x199c, 0x8, 0x9, 0xfffff801, 0x8001, 0x3, 0xafa, 0x6, 0x3, 0x7, 0x6, 0x401, 0x4, 0xaac, 0xdf6e, 0xde0e, 0x5, 0x8, 0x9, 0x9, 0x8, 0xc2ab, 0xd, 0x51c6, 0x0, 0x0, 0x971c, 0x29e, 0x4, 0xa, 0x80000001, 0x6d, 0x6, 0x3, 0xff, 0xd74, 0x4, 0x10000, 0xfee1, 0x0, 0x80, 0x1ff, 0x5, 0x3, 0x4, 0x101, 0x8001, 0x8d1, 0xa1, 0x10001, 0x3ff, 0x8001, 0xb5ce, 0xfffffff8, 0x10001, 0xff, 0x1, 0x9, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3, 0x566cb787, 0x8, 0x2, 0x4be, 0x401, 0xffff8000, 0x4, 0x7, 0x8, 0xc, 0x7, 0x8, 0x7, 0x4, 0x401, 0x6, 0x5, 0xffff, 0x3, 0x40, 0x4, 0x6, 0x4, 0xff, 0x390f, 0x3, 0x0, 0x8, 0x1, 0x8, 0x5, 0x903, 0xfffffffe, 0x0, 0x2, 0x2, 0xddfb, 0x1, 0x1, 0x9, 0x5, 0x8001, 0x9, 0xc, 0x4, 0x200, 0x3, 0x9, 0x1], 0x3, [{[0x9, 0x40], @multicast1}, {[0xe2, 0x81], @multicast1}, {[0x1, 0x7], @rand_addr=0x64010101}]}}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x101}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe, 0x1, [{0x5, 0x2, 0x9, 'macvlan1\x00', 'team_slave_0\x00', 'team0\x00', 'bond_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xbe, 0xbe, 0x106, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'pptp\x00'}}}], [], @common=@ERROR={'ERROR\x00', 0x20, {"0583dca786cea48c8f64eff92c04ee520b659a3e734f2ef8a1c61df0eae7"}}}]}]}, 0x1264) r8 = syz_open_dev$hiddev(&(0x7f0000000300), 0x9, 0x10080) ioctl$HIDIOCGREPORTINFO(r8, 0xc00c4809, &(0x7f0000000380)={0x3, 0x3, 0x2}) syz_usb_control_io(r6, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000100), 0x1, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x2) ioctl$HIDIOCSREPORT(r9, 0xc018480b, &(0x7f0000000080)={0x2, 0xffffffff}) 1m9.920257404s ago: executing program 1 (id=10392): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6c7, 0x3}}, './file0\x00'}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xea, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5084}, 0x88010) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000240)={&(0x7f00000001c0)="898ff3606e8d68926c490f42e8f75fb1b316c35ccc38acce18314e012e1083a6cc1f5b4c5078a7c2", 0x28, &(0x7f0000000200)=""/20, 0x14}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000002c0)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000006c0)) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f0000000b00)={{&(0x7f0000000a80)={'KERNEL\x00', {&(0x7f00000007c0)=@adf_hex={@format={'Cy', '3', 'RingAsymTx\x00'}, {0x36f843ef}, {&(0x7f0000000700)=@adf_hex={@normal='NumberDcInstances\x00', {0x7}}}}}, {&(0x7f0000000a00)={'Accelerator0\x00', {&(0x7f0000000940)=@adf_dec={@bank={'Bank', '0', 'InterruptCoalescingTimerNs\x00'}, {0x10000}, {&(0x7f0000000880)=@adf_dec={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x3}}}}}}}}}, 0x5}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000b40)) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000b80)={0xc}) mmap$IORING_OFF_SQES(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x100000b, 0x10, r1, 0x10000000) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) write$binfmt_elf32(r0, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x9, 0xfe, 0x6, 0x7, 0x3, 0x6, 0x200, 0x180, 0x38, 0x2a6, 0xf9d, 0x7f, 0x20, 0x1, 0x9, 0x100, 0x5}, [{0x70000000, 0x5, 0x746, 0x5, 0x4, 0x4, 0x15e, 0xa4}], "c375a58cde34df517a8344e3e741e4cf62d0c87b0d8a6edb362e8d1d0503e857b602c5d064e141cb42d96658a1efdc103378c1f8d9593552e4ca2abc1d0cb01ed72695a17a76857b35be168f80bbb95672f1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9aa) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000001580)=0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000015c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001600), 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x20, 0x1401, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001740)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000001780)={0x48, 0x2, r4}) syz_emit_vhci(&(0x7f0000001800)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x75, 0x4}, {0x5, 0x7}}}}, 0x11) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001840)={0x28, 0x1, r4, 0x0, &(0x7f0000ee1000/0x3000)=nil, 0x3000, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001880)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000001980)={&(0x7f00000018c0)={0x1d, r5}, 0x10, &(0x7f0000001940)={&(0x7f0000001900)=@can={{0x4, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "71a76e55fd02f07e"}, 0x10}, 0x1, 0x0, 0x0, 0x24040080}, 0x4080) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x769a00, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000001a80)={0x1, &(0x7f0000001a40)=[{0x37, 0x1e, &(0x7f0000001a00)="de2f3c02e76ce44cc9038714efcb8e75f764555a3540fa9bd6f70f2f89b0"}]}) dup(r0) ioctl$int_in(r6, 0x5421, &(0x7f0000001ac0)=0x80000001) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000001b40)={0x4, 0x7fffffff, 0x0, 0x3, 0x7, "9a27412b3d02577f3f8ad69a76045b56579981", 0x6, 0x3}) 1m9.490752086s ago: executing program 1 (id=10404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000080fe300012800b00010067656e657665000020000280080001000100000014000700000000000000000500"], 0x58}}, 0x0) 1m9.38653215s ago: executing program 52 (id=10404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000080fe300012800b00010067656e657665000020000280080001000100000014000700000000000000000500"], 0x58}}, 0x0) 1.403895545s ago: executing program 2 (id=11326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c02000013002904000000000000220000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40105"], 0x27c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000102c0)={0x2020, 0x0, 0x0, 0x0}, 0xfffffe5d) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) stat(&(0x7f00000009c0)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x90, 0x0, 0x8, {0x5, 0x2, 0x80, 0x9e, 0x50, 0x7, {0x6, 0x6, 0x0, 0x8000000000000000, 0x8, 0x8, 0x100, 0xffff, 0x4, 0xa000, 0x9, r5, 0x0, 0xfffffffc, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08400000000004001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x234, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x17c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x59, 0x5, "cf8d28951d38cc056276ae8637229ba547ab8caf0f085ab6d68843733b72f795c1eb5c3659925c7d4e9f8ef8088b946e05df1bccab7f257f5d96fd89f9e2d6845d8da4a787cb5a4f85603048d23789a9486a9d550b"}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "baf25fc4c5c15411173900d1eed609a3a592e1c09c72fab274c5bb812fd57f1f6ef2cf715a1e1e4cf522e4790c7f5c0ae04caa9063b9bb08ccf53339654274d4bebae41159678892634c6c23afb1e15f036503e20bb84735884b0b0d10aa2fa0920fbba4598448eae8c764f217eccdcda0ab3e1fbe1ca7a0725665c37cd4321bc4f7c246362f8a4956c0dfc0f37709cf0cb357f5b7fd1c2cedb971588995960717d241ee379c2fc4129f363eb869a4c20426c7e4e9557f59b2a7c6be733b"}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "7abafb87cfcaffbd56424643d462a2691e4d63c03994ed6ba64152b0bc254136872759755b8d203dcb7e970563a9155b2236ffdd223e3152a5c4c8d5ce1b918888c71b89b7fc4b0215133eb6ed305ed6d8"}]}]}, 0x234}}, 0x44090) 520.160425ms ago: executing program 4 (id=11351): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6, 0xc}, 0x1d, [0x7f, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0x1, 0x2, 0x6, 0xf, 0xfffffff2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x3, 0x9, 0x2, 0xfffffffe, 0x0, 0x2, 0x727, 0x4, 0x3, 0x0, 0x107fff, 0x4e74, 0x9, 0x0, 0xd, 0x8, 0x0, 0x2, 0x7, 0x2000007, 0x107, 0x0, 0x9, 0x39, 0x2, 0x6, 0x81, 0x3, 0x5, 0x0, 0x43, 0x20000e1, 0x7f, 0x9, 0x5, 0x5, 0xa, 0x7, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x1, 0x10, 0x129432e6, 0xcb, 0x7, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xb842, 0x7ffffffc, 0x4, 0x0, 0x8000, 0x800, 0x400, 0xd9, 0x3, 0x401, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x2009, 0x106, 0x2, 0x1ff, 0x27, 0x9, 0x800008, 0x9, 0x8000, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x10000, 0x652, 0xfffffdfe, 0xd, 0x8ce, 0x7, 0x387d, 0x7fff, 0x0, 0x8, 0xc, 0x4, 0x5, 0x76, 0x0, 0x1ef, 0x1, 0x7, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0xb7, 0x2, 0xf, 0xffff, 0x4, 0x6d01, 0xcfa, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x8001, 0x0, 0x54fe12d5, 0xbf, 0x200, 0x5, 0x400002, 0xfffffff9, 0x0, 0x5, 0x10800005, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x9, 0x9, 0x8, 0x3], [0x10009, 0xbb31, 0x4, 0xb, 0x5, 0x938, 0x40001f1c, 0x5, 0x6, 0x10000009, 0xce5, 0x1fd, 0x7669b26e, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x9, 0xa620, 0x2, 0x0, 0xffffffff, 0x2, 0x8, 0x60a3, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x1, 0x8, 0xc8, 0x1, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0x5, 0x9]}, 0x45c) ioctl$SIOCNRDECOBS(r0, 0x89e2) (async) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3f, 0x0, 0x1, 0x3e, 0x0, 0x0, {}, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000a9b8f1f2"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) read$alg(r2, &(0x7f0000000000)=""/46, 0x2e) (async) read$alg(r2, &(0x7f0000000000)=""/46, 0x2e) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9aadb94c85b8b2cef2aa30048ce0b0d4cb0f95051dbd0000028009000100626f6e64000000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9aadb94c85b8b2cef2aa30048ce0b0d4cb0f95051dbd0000028009000100626f6e64000000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 519.602644ms ago: executing program 2 (id=11352): socket$inet6(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r3, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10a}]}], {0x14}}, 0x64}}, 0x0) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_expedited', 0x40000, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 461.024749ms ago: executing program 9 (id=11354): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1e, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 460.20161ms ago: executing program 4 (id=11355): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) 408.919332ms ago: executing program 4 (id=11357): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x34324152, 0x3, 0xc, [{0x6, 0x4}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac2723c5250978f8779dae01ce40ccf6c40062b44aec0cffb4792cd8000080", 0x41, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000040)=0x4, 0x2) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000ffff2dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000631803001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="753f65a71190dd572092ce375ea8596855c5"], 0x4c}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 408.51063ms ago: executing program 9 (id=11358): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local, 0x40}, 0xfffffffffffffe77) (async, rerun: 64) r0 = gettid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r1, 0x0, 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xfffffffe, @vifc_lcl_addr=@loopback, @private=0xffffffff}, 0x10) (async, rerun: 32) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x6) (rerun: 32) 344.945728ms ago: executing program 9 (id=11360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 64) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) write$P9_RSYMLINK(r5, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x0, 0x1, 0x1}}, 0x14) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "4c3aaadb1d8c61fa0403aee537da3dc2"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20000884) (async, rerun: 32) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99) (async) creat(&(0x7f0000000180)='./file0\x00', 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r9 = syz_open_dev$radio(&(0x7f0000002040), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r9, 0xc0445636, &(0x7f00000001c0)={0x0, "c1e3c6e9d4e0668be33dfa93c2a82cbbd334b5351b615cf0fac06b6babfa8bf6", 0x2, 0xffffc7d7, 0x4, 0x2, 0x3}) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='gid_map\x00') write$cgroup_int(r10, 0x0, 0x0) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x1a, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000300)=0x1) 281.204314ms ago: executing program 2 (id=11361): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x4}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x1e, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xffffffff}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cb7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42849725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc400"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="06f2248140af698ddaeb05a129674f9d12cccd557e88b908f8428447e4161e3d6943c6a977f9bdb2ac09d8944041e89f7e76d6ea8b491d5723be7d34060564545377f027d197257e54044bc24786513abac283b89384437be224c615e8b96cb4ccb3168fe8529394f83eba612b897b57da1549af71f0eb8a5da5719840a9061a16694483cb498b60eeb908014ff44e8bb31c9f3260539aeb92b59ecfd30a2b1674bb8c009c6de0e8cdcf849f42aa68291c365d6f462abff1feb2c0dc2b2cfae783d0db039cf1615bb1b1ce5547b86b8a788b052721761615db9645ee56b18f2e1ff8b99f03bd0d172c", 0xe9}, {&(0x7f0000000100)="3943d6059f8aa9284f466012d89afa031edc89198ccf25ad10018e909b5e2a657ef9362eeb579553489b6ee22e625b9b7030cc2523ec2a837335f0461e4d737d2e2a469d3dd28b5f305912ba287a8f9166713f179272f73292073cbdc6f904766ed2469431956138bf7c1ba15a81fe4fcf5f47ec7a7df46e9cb88d", 0x7b}, {&(0x7f0000000180)="97d3286b21b98b42ec4d8a8534d2c2d7b9b9abae7338605a71d02767348abf0509", 0x21}, {&(0x7f00000001c0)="19b3e6345edd09adda2dab070452befe8b3669fade9178871a3e5304ae4b1dc20d7c2112c5caa038388ef046b162719611b3a7b543f01eb9791b00aeb19aafda533c4e3481d5592c7c6d4b9c70c0a552f707b2673ab46fd0b6f99a98c3a8b362311357c898cc7d58e404117b64b434936d30fed0d2893007b5a2cbdc6617e118d39fde3d02bf8792af522694282a0a62eed0d5", 0x93}, {&(0x7f0000000280)="4459e237b4e549b4b556a452c9994b40e3e598673758a369bf5d437d499b1e322db2a6dc458b9536d8bc75dc85d3c5772cd85adf4ff3197e1c82bb4c875517a1e8280af58d602227b71ffd5ab847d372f655c086cd8d697ce947a88afc52ec64464738e1dc9a6cf9fb944df2af3745fc1945bf57483c3a0f9c5fe86c2ad75c30752f2c2e31f6c94cd9103946f9ecb27216bb03fc631a1996048a76da2f38a1ad1c34cd30cdaa", 0xa6}], 0x5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "23f39b62b1578fcd9033f17737021338"}]}}}}}}}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 280.878543ms ago: executing program 2 (id=11362): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000ba7000/0x400000)=nil) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x100000, 0x11e000, 0x8}) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0xb04, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x14) (rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000014c0)={0xf}) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000170a0108000000000000000002000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x5e1c173289228a75}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20) (rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x627, r2, 'id0\x00'}) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000002c0)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000001500)=[{0x78, 0x3a, 0x7, "85168bf1e4b4a481f19886e1a074a54ad7c46143247dca8d6e0efcf2eba0218bcd16c03f2ed8700f4be60c5088d516af164558a5a3f92f16b5822476dbdb08a2b52ff6790ebd3b8e2d1a94823f091ff6cf5ea13b213ff641a600363eabc910cd751ddea5a7b3458a"}, {0xd8, 0x104, 0x9, "c8bfbfcb9fff39acdb7b017672ef05d5acdf83f0a88844701bccd22a6f1106c92b468c34b9653d4486f944f514149a9914f8130981eb3890702e204974c82e3c6a3f8712ddad3275a669cdf2d66838d815d0ea3a135d938f15778588728b1b9abb513969a17ca453e3c9c5cf0d849b4d3b2f2c347aa64e2d362f84048e2d18fc9f4ffafb37a18235ac037ab76ea0cf0228d65bc32a6e20838153f08f09683857a6d644b0145fa9d2c941af332254d3b1caba0fef6c6bd622b3314a63520e0ddf326ef0e9"}, {0x110, 0x119, 0x101, "fd53a70b59a5a67103120aa60a1525d9052b46cfe132bdddc8de50a7c5f5498df3b26a980d98ffc1f532f2faadf81c7b4135d62b8af81b8dac37df8a417a6f934505aaab0f04bc87fb83794b9f27d85b944a56d4b085516d8a70daed32c56cd7e7a3f1ea9ce0e748667f7ac430d2e00e7bcf5ae8b2a773d9a8c97134a698fed80f4c92b126550ad66ffee4b2545c79aad034ba94a5a2892f46f85df7c78f75cf7aedd6b4e86970768144dc4108ddfbdbaa08b96284dedb88bcfa7b5a078e0f1cc4277d105ff96defa7cbf8ab3312e572ab9f9a140adc5191a9ab6752aa4639a4e778d44aa5409224e15dfec3c5ec939293043a14942fb551a6"}, {0x1010, 0x10d, 0x6, "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"}], 0x1270}, 0x20040010) 273.669115ms ago: executing program 4 (id=11363): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000004c0)=0x69) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2000000, 0x0, 0x0, 0x6}, 0x2}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) 206.462761ms ago: executing program 9 (id=11364): syz_io_uring_setup(0x1d8d, &(0x7f0000000240)={0x0, 0xa9f2, 0x200, 0x1, 0x24b}, &(0x7f00000029c0)=0x0, &(0x7f0000000380)=0x0) r2 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(r2, &(0x7f0000002780)={&(0x7f0000002000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002240)}, {&(0x7f00000022c0)="81ab6ee52d120762822868480b65124674807d5c2e6f48360f16d9b5fd1e3cc78e4f8510189e0b46546460a339f182d03d607fa1b69e03f736751e52bd42f29842626e4874cf0a403bd22f7279eb31d25780ec5c5616ae55fce818005f3ac6ab4a8c5b37a250a5e4d9b7b569067ec50d9b0d9849d0e00381316e60bded2aeb668812a7adc56c8d2111cc3ca558d946af107c287a8faa0a50781bc37837381703aa501957b9c66a87a7ca9fcd8825280cd7", 0xb1}, {&(0x7f0000002380)="2a7a1ef89208d28d2e15df47b8d8df9be8405423ae5b981029460b4ef445b7ad831b25ec5ea57d474d4763562023f873d8971991b4bf", 0x36}, {0x0}, {&(0x7f0000002500)="2e8d84dabe29", 0x6}, {&(0x7f0000002540)="54642cc151f6767e89c3812a69a3be71f5e0434600fcf226b8", 0x19}, {0x0}, {0x0}], 0x8, &(0x7f0000002700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2fd9}}], 0x18}, 0x80) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a00)=ANY=[@ANYBLOB="9976018d9b9dc759b1a4a8674797bd6878cf43d617f56a5c6b2b8316e259489d9d9c271e798e3b34313ca2a3158764c564a24e2c0828b396541e803a3bf67b79e43a4dfa531d4c5cd1ee59d770725fd3b27868deaf8b7e5ab5190f226e5b3aa42ab103feeaac35c492f6bb493e7d85d10ba53a01b3eebf65dbcd64744f9ba5de567e794bc46f087b5cfd128478ed5fdd2736fd81bf5ee7c02f30e486db22377218e9ba3691f4aafc87dd305447ed95a5cfe6bc2cd4b193fff845da0d2451d6829b1d546b18c5ee8545b494b8375e071055a834", @ANYRESOCT=r1, @ANYRESDEC=r0], 0xb8}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair(0x1e, 0x800, 0x40088, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x81}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x22, &(0x7f0000002940)=ANY=[@ANYBLOB="bbbbb5bbbbbbaaaaaaaaaabb080045dd00140067000007064135fd6bc99d933e349078ac141412ac1e0101"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x36) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x8) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1800000000000000}) 205.756445ms ago: executing program 4 (id=11365): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000002c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa0, r9, 0x405, 0x74bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40044c0}, 0x440d4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40002}, 0x0) 153.17984ms ago: executing program 7 (id=11366): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x603) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) (async) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0) 152.448478ms ago: executing program 2 (id=11367): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800, 0x66840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) 152.106587ms ago: executing program 7 (id=11368): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r0], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 86.792723ms ago: executing program 2 (id=11369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe80000000002b0000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 86.416233ms ago: executing program 7 (id=11370): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x32d000, 0x800, 0x0, 0x1}, 0xfffffffffffffebe) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) (async) flock(r3, 0x1) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000140)={0xa, 0x0, 0x4, @rand_addr=' \x01\x00', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}, 0x24004800) madvise(&(0x7f0000677000/0x4000)=nil, 0x4000, 0x13) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x20000, 0x4) (async, rerun: 32) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (async, rerun: 32) connect$inet(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) 86.101803ms ago: executing program 7 (id=11371): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@broadcast, @random="0000060000ff", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettaction={0x1c8, 0x32, 0x422, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb5e}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb4}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}]}, 0x1c8}}, 0x0) 85.819237ms ago: executing program 9 (id=11372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="f78d9ca38fff48f3be52163434412ba8c855326d06915ebc59e1c7732d6ecb8928dbf5aa1a7cadddc37b05c79d7e08507e369c7bf401a383005b676037c7e8c748ec6531028bd31a94ddf2864901386b5411760f46dc5c08309d070000008f2882b005aaa42a2d955034d9f29b37ea69d73a0dc8a39671b8290d206f14b1305eef3dac010f1ee5e4750bacebc72dda3be1757913a353580815da13509d119270f63c25b135ca16e9e476503d742060bcbe257e8fae967bb6edf4c64e6f0b0504860f7c7e9d6b992849884126549ff9aaea14e2a8d22988ce318a492ea593f161", 0xe0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69358404000000884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x40800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$nfc_llcp(r1, &(0x7f00000008c0)={&(0x7f0000000300)={0x27, r2, 0xffffffffffffffff, 0x3, 0x1, 0x1, "a7227e33d455f8e8d270838f232c903dfe4681a27f1ca678ab3600eeb83263c5bb84668e868bfc027be3d7f12aecdedd760adc85401ee80677c360452a184c", 0x2d}, 0x60, &(0x7f0000000800)=[{&(0x7f0000000600)="bd4da66fb972b947fc71d65279207b8f9903aa8b87194cba0b3c6cb0640695a2696a3ef1e5eb5001901de34ea7b78908ea358efe91e9acc61c3e7fb6bfd1c6615162a0d22368b85c5b9634d6adadc2500e58d5eba7e7452c88dc36ddf66213b58f05cca6cf51804eb16fc7246a2b3fcd8734c436596ad588de8c0d7be4a8a7fc04927c24b6f48850b983eb2417d8ea1ddfbc9789694548f31032e82e7ba801c38072e6afe7bb069565dc5375f1b92aa794af3422bdee9ff6b42a6af258da0dc032de55c85b90efef9642a599bbaef2", 0xcf}, {&(0x7f0000000540)="21b12db34c1e272524640b426702d23b581435892d3c2df5479faeb7a5ad7434a31a0ef86d744f8cfbf79136471f85fe54b63338042747c712f74b38b70a6bb5cea56b4888bd4b247c4329f13f21e98af633d2ca870bdc0b00ff5662820108d663153d373de24ae36b899ddabb795882b646a949bcbca299aab2", 0x7a}, {&(0x7f0000000700)="ece4c1f25239286e3968349a4b07b1099a72d6875242a0d22c6b33473e0deb31ead5de0446e165bdd582512a8d0cbd78f7a1648eea7f6eeeee1eba1858ef0c45b223cec779ab4d023f765fc6fad7073109bb4708830189a499493b9cfcb00b0dacda6b923f193a026a31dd54d966fdad659ad279cd90f8600684a9f0b9770ab5733bbb4638decbd81728271b7cd0d5cd9d24e028f325170e2057fa4acd9bf08d6f9251f57046630da90047b6f9cafbca4a484c0418c7d4f61d4ece5ff69559aab7c5ffa67734670d591f2f99837ada5be49aa8b314260ec7a564c4d0b34318aa7285ae467b9a615013", 0xe9}], 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="000b00000000000068800a90c5dea9b98121ba70585dc63e573c70a73a8b31acc4f2706bab3e8f136b8340a29e1d610f6b8f5ade69d7e4ab45a28e9b5514cfe93132664df2659fd14596c6622d2f6220d42b340b2d9e71d82ab66e9715c3a1eae264a95dd5aa3574a79a574062910000"], 0x80, 0x4000810}, 0x4040811) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xca, 0x9, 0x35315258, 0x5, 0x7, 0x10001, 0x5, 0x8, 0x1, 0x8, 0x2, 0x4}}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/78, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x1}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x1000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x2, 0x0, 0x5, 0xa, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000000a00)='syzkaller\x00', 0x1, 0xef, &(0x7f0000000a40)=""/239, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0x6, 0x7fffffff, 0x200}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000c00)=[{0x0, 0x1, 0x2, 0x2}, {0x3, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x8}, {0x3, 0x4, 0xa, 0xb}, {0x0, 0x1, 0x1, 0xd}, {0x4, 0x2, 0x80000000, 0x2}, {0x4, 0x1, 0x2}], 0x10, 0x5}, 0x94) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000d40)) 1.42154ms ago: executing program 7 (id=11373): r0 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x14500) (async) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x2}, 0xc) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) (async) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0x6) (async, rerun: 32) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 1.203866ms ago: executing program 9 (id=11374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='totmaps\x00') (async) r2 = syz_open_procfs(r1, &(0x7f0000000080)='totmaps\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 441.459µs ago: executing program 4 (id=11375): r0 = creat(0x0, 0x124) r1 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000300000001000000000000000100000024000010000000004100000005000000800000000000332185c98e2091fadcd0e494002fb88df7bf1775d18040ceec62706762a28ef2dbfe2a8e7a741e35b3d2b3ce00bb0f42def47fa5698252c604ab39"], 0x71) socket$packet(0x11, 0xa, 0x300) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x420001) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/253, 0xfd}], 0x1, 0x7, 0x800) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x5}, @TCA_MPLS_PROTO={0x0, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000100000000000000000000480000", @ANYRES32=r5, @ANYBLOB="c41e020107c0d9b3"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) 0s ago: executing program 7 (id=11376): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x100000c2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x16, 0x2, 0x1, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=0x189) epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x200, 0x1, 0x2000000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) epoll_wait(r2, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) inotify_init1(0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000780)={'\x00', 0x2, 0x401, 0x5, 0x7, 0x51ef2a64, r9}) r12 = syz_open_procfs(r11, &(0x7f0000000440)='net/nfsfs\x00') write$tcp_mem(r12, 0x0, 0x0) accept4(r12, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x80800) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x8000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) kernel console output (not intermixed with test programs): .10327'. [ 765.919315][ T40] audit: type=1400 audit(1756417505.257:26906): avc: denied { perfmon } for pid=2947 comm="syz.9.10336" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 765.929856][ T40] audit: type=1400 audit(1756417505.276:26907): avc: denied { mounton } for pid=2947 comm="syz.9.10336" path="/365/file0" dev="tmpfs" ino=1934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 766.018773][ T2952] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10330'. [ 766.021563][ T40] audit: type=1400 audit(1756417505.360:26908): avc: denied { create } for pid=2955 comm="syz.7.10331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 766.022238][ T2958] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10331'. [ 766.028104][ T40] audit: type=1400 audit(1756417505.360:26909): avc: denied { write } for pid=2955 comm="syz.7.10331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 766.038005][ T40] audit: type=1400 audit(1756417505.360:26910): avc: denied { nlmsg_write } for pid=2955 comm="syz.7.10331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 766.070294][ T2965] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10332'. [ 766.101993][ T63] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 766.130050][ T6024] usbhid 7-1:1.0: can't add hid device: -71 [ 766.131947][ T6024] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 766.136661][ T6024] usb 7-1: USB disconnect, device number 13 [ 766.193262][ T2971] netlink: 'syz.9.10335': attribute type 1 has an invalid length. [ 766.214903][ T40] audit: type=1400 audit(1756417505.538:26911): avc: denied { write } for pid=2970 comm="syz.9.10335" name="/" dev="9p" ino=35913828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.224972][ T2971] bond2: (slave geneve3): making interface the new active one [ 766.228848][ T2971] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 766.232697][ T1144] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 766.236388][ T1144] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 766.240162][ T1144] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 766.244075][ T1144] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 766.388368][ T2983] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 766.394186][ T40] audit: type=1400 audit(1756417505.706:26912): avc: denied { read write } for pid=2978 comm="syz.9.10337" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 766.402273][ T40] audit: type=1400 audit(1756417505.706:26913): avc: denied { open } for pid=2978 comm="syz.9.10337" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 766.413064][ T40] audit: type=1400 audit(1756417505.706:26914): avc: denied { ioctl } for pid=2978 comm="syz.9.10337" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 766.675121][ T5377] Dev loop2: unable to read RDB block 7 [ 766.677711][ T5377] loop2: unable to read partition table [ 766.680506][ T5377] loop2: partition table beyond EOD, truncated [ 766.709329][ T5377] Dev loop2: unable to read RDB block 7 [ 766.711952][ T5377] loop2: unable to read partition table [ 766.714337][ T5377] loop2: partition table beyond EOD, truncated [ 766.833551][ T5377] Dev loop2: unable to read RDB block 7 [ 766.835868][ T5377] loop2: unable to read partition table [ 766.838440][ T5377] loop2: partition table beyond EOD, truncated [ 767.291753][ T3030] __nla_validate_parse: 2 callbacks suppressed [ 767.291764][ T3030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10354'. [ 767.294160][ T3027] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 767.301542][ T3027] overlayfs: missing 'lowerdir' [ 767.311290][ T3027] netlink: 'syz.9.10353': attribute type 14 has an invalid length. [ 767.444042][ T3034] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10356'. [ 767.661095][ T63] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 767.718747][ T3041] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 767.718747][ T3041] The task syz.7.10359 (3041) triggered the difference, watch for misbehavior. [ 767.750002][ T6045] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 767.808408][ T5377] Dev loop2: unable to read RDB block 7 [ 767.810851][ T5377] loop2: unable to read partition table [ 767.813729][ T5377] loop2: partition table beyond EOD, truncated [ 767.867069][ T5377] Dev loop2: unable to read RDB block 7 [ 767.869464][ T5377] loop2: unable to read partition table [ 767.872003][ T5377] loop2: partition table beyond EOD, truncated [ 767.888836][ T3049] delete_channel: no stack [ 767.890746][ T3049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10362'. [ 767.904001][ T3051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10363'. [ 767.921837][ T6045] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.925985][ T6045] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 767.929442][ T6045] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 767.933057][ T6045] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 767.937016][ T6045] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 767.939853][ T6045] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.944415][ T6045] usb 14-1: config 0 descriptor?? [ 767.946763][ T3036] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 768.022541][ T3054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10364'. [ 768.025882][ T3054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10364'. [ 768.386380][ T6045] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 768.393047][ T6045] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 768.660108][ T840] usb 14-1: USB disconnect, device number 6 [ 768.716369][ T3073] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 769.020363][ T3081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10372'. [ 769.155780][ T3084] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10373'. [ 769.180917][ T3049] Set syz1 is full, maxelem 65536 reached [ 769.211799][ T5377] Dev loop2: unable to read RDB block 7 [ 769.215301][ T5377] loop2: unable to read partition table [ 769.217561][ T5377] loop2: partition table beyond EOD, truncated [ 769.243713][ T3093] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 769.246481][ T3095] netlink: 184 bytes leftover after parsing attributes in process `syz.9.10376'. [ 769.272371][ T5377] Dev loop2: unable to read RDB block 7 [ 769.274770][ T5377] loop2: unable to read partition table [ 769.277902][ T5377] loop2: partition table beyond EOD, truncated [ 769.372663][ T3095] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10376'. [ 769.376592][ T3095] netlink: 'syz.9.10376': attribute type 7 has an invalid length. [ 769.380154][ T5377] Dev loop2: unable to read RDB block 7 [ 769.382452][ T5377] loop2: unable to read partition table [ 769.385767][ T5377] loop2: partition table beyond EOD, truncated [ 769.486394][ T5377] Dev loop2: unable to read RDB block 7 [ 769.488231][ T5377] loop2: unable to read partition table [ 769.490126][ T5377] loop2: partition table beyond EOD, truncated [ 769.564166][ T5377] Dev loop2: unable to read RDB block 7 [ 769.567366][ T5377] loop2: unable to read partition table [ 769.570359][ T5377] loop2: partition table beyond EOD, truncated [ 769.692504][ T5377] Dev loop2: unable to read RDB block 7 [ 769.695292][ T5377] loop2: unable to read partition table [ 769.697866][ T5377] loop2: partition table beyond EOD, truncated [ 769.783106][ T5377] Dev loop2: unable to read RDB block 7 [ 769.785424][ T5377] loop2: unable to read partition table [ 769.787840][ T5377] loop2: partition table beyond EOD, truncated [ 769.889816][ T5377] Dev loop2: unable to read RDB block 7 [ 769.892414][ T5377] loop2: unable to read partition table [ 769.894851][ T5377] loop2: partition table beyond EOD, truncated [ 769.911632][ T3143] program syz.2.10391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 770.205472][ T5377] Dev loop2: unable to read RDB block 7 [ 770.208231][ T5377] loop2: unable to read partition table [ 770.210937][ T5377] loop2: partition table beyond EOD, truncated [ 770.246534][ T5377] Dev loop2: unable to read RDB block 7 [ 770.248918][ T5377] loop2: unable to read partition table [ 770.251993][ T5377] loop2: partition table beyond EOD, truncated [ 770.306215][ T5377] Dev loop2: unable to read RDB block 7 [ 770.309423][ T5377] loop2: unable to read partition table [ 770.312051][ T5377] loop2: partition table beyond EOD, truncated [ 770.461256][ T3158] 0: renamed from hsr0 [ 770.465897][ T3158] 0: entered allmulticast mode [ 770.467645][ T3158] hsr_slave_0: entered allmulticast mode [ 770.469693][ T3158] hsr_slave_1: entered allmulticast mode [ 770.474785][ T3158] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 770.502307][ T5377] Dev loop2: unable to read RDB block 7 [ 770.504698][ T5377] loop2: unable to read partition table [ 770.508123][ T5377] loop2: partition table beyond EOD, truncated [ 770.527149][ T5377] Dev loop2: unable to read RDB block 7 [ 770.529121][ T5377] loop2: unable to read partition table [ 770.531298][ T5377] loop2: partition table beyond EOD, truncated [ 770.540604][ T3164] openvswitch: netlink: Flow actions attr not present in new flow. [ 770.544176][ T3164] binder: BC_ACQUIRE_RESULT not supported [ 770.546322][ T3164] binder: 3163:3164 ioctl c0306201 2000000003c0 returned -22 [ 770.564549][ T5377] Dev loop2: unable to read RDB block 7 [ 770.567486][ T5377] loop2: unable to read partition table [ 770.570604][ T5377] loop2: partition table beyond EOD, truncated [ 770.742691][ T3168] /dev/sr0: Can't open blockdev [ 770.790546][ T5377] Dev loop2: unable to read RDB block 7 [ 770.792918][ T5377] loop2: unable to read partition table [ 770.796156][ T5377] loop2: partition table beyond EOD, truncated [ 770.817603][ T3174] tipc: Enabled bearer , priority 0 [ 770.845031][ T5377] Dev loop2: unable to read RDB block 7 [ 770.846691][ T5377] loop2: unable to read partition table [ 770.850327][ T5377] loop2: partition table beyond EOD, truncated [ 770.888361][ T5980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 770.894088][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 770.898987][ T5980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 770.903913][ T5980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 770.908007][ T5980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 770.962021][ T3177] lo speed is unknown, defaulting to 1000 [ 771.055339][ T3177] chnl_net:caif_netlink_parms(): no params data found [ 771.182359][ T40] kauditd_printk_skb: 192 callbacks suppressed [ 771.182375][ T40] audit: type=1400 audit(1756417510.187:27107): avc: denied { mount } for pid=3206 comm="syz.9.10417" name="/" dev="9p" ino=35913828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 771.197022][ T40] audit: type=1400 audit(1756417510.187:27108): avc: denied { append } for pid=3206 comm="syz.9.10417" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 771.204158][ T40] audit: type=1400 audit(1756417510.187:27109): avc: denied { associate } for pid=3206 comm="syz.9.10417" name="blkio.bfq.avg_queue_size" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 771.206545][ T3205] tipc: Enabling of bearer rejected, already enabled [ 771.211516][ T40] audit: type=1400 audit(1756417510.187:27110): avc: denied { read append } for pid=3206 comm="syz.9.10417" name="blkio.bfq.avg_queue_size" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 771.214837][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.223436][ T40] audit: type=1400 audit(1756417510.187:27111): avc: denied { open } for pid=3206 comm="syz.9.10417" path="/389/file0/blkio.bfq.avg_queue_size" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 771.224852][ T3177] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.233614][ T40] audit: type=1400 audit(1756417510.187:27112): avc: denied { write } for pid=3206 comm="syz.9.10417" name="blkio.bfq.avg_queue_size" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 771.235767][ T3177] bridge_slave_0: entered allmulticast mode [ 771.251788][ T3177] bridge_slave_0: entered promiscuous mode [ 771.256795][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.259218][ T3177] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.261362][ T3177] bridge_slave_1: entered allmulticast mode [ 771.263970][ T3177] bridge_slave_1: entered promiscuous mode [ 771.266634][ T40] audit: type=1400 audit(1756417510.271:27113): avc: denied { read } for pid=3208 comm="syz.7.10418" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 771.275041][ T40] audit: type=1400 audit(1756417510.271:27114): avc: denied { open } for pid=3208 comm="syz.7.10418" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 771.283379][ T40] audit: type=1400 audit(1756417510.271:27115): avc: denied { ioctl } for pid=3208 comm="syz.7.10418" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 771.286737][ T6037] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 771.292835][ T40] audit: type=1400 audit(1756417510.271:27116): avc: denied { allowed } for pid=3208 comm="syz.7.10418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 771.322941][ T3177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.331278][ T3177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.384875][ T3177] team0: Port device team_slave_0 added [ 771.389721][ T3177] team0: Port device team_slave_1 added [ 771.435278][ T3177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.438265][ T3177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.449570][ T3177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.456206][ T3177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.459060][ T3177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.461046][ T6037] usb 7-1: not running at top speed; connect to a high speed hub [ 771.468833][ T3177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.476957][ T6037] usb 7-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.482296][ T6037] usb 7-1: config 1 interface 0 has no altsetting 0 [ 771.487249][ T6037] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.40 [ 771.491464][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.494900][ T6037] usb 7-1: Product: 㣗㟁Ӎ삖堐褼⓭̽矂៹᩠ᙐ蓎䷭桙싽鍦⸉ẅݘ枣槼⹎奭窥곕缻ৃヵ쁰뉨교助珴樅꟯吖䞎쟰窭쑲늾쯱㡡뚜潏繉䅗ꁕ䈖嗿릲嘱寄⢆酲怊肾⁒䈫譄싅㉛珙㥩얱ᝫ߯닸쯭⛉芟㲼흰᝷Ǣ烙뤍꛸쫄擂친뇋⪯␱侱┋궱 [ 771.508760][ T6037] usb 7-1: Manufacturer: 它䧙ꘫ㠓唨给怉甿셕쮢ꎹ烑硭Ǜค䓮琈ⵉᗚ࣎摜뉋惰Ƣ뵍퉣Ḝ쿳㇍璪꪿✉졪ﲽ﫹貏什틪ꐳ槀圑ෆ㞿듃ᡞꞝ㶞閍豗䟣䞧믵ᬹ㊿㦍挊䧢佗ꕎ䢆ꞗ඗듦狆◙顠㦖 [ 771.519284][ T6037] usb 7-1: SerialNumber: syz [ 771.553986][ T3177] hsr_slave_0: entered promiscuous mode [ 771.557256][ T3177] hsr_slave_1: entered promiscuous mode [ 771.560779][ T3177] debugfs: 'hsr0' already exists in 'hsr' [ 771.563277][ T3177] Cannot create hsr debugfs directory [ 771.618896][ T3221] ptm ptm31: ldisc open failed (-12), clearing slot 31 [ 771.680017][ T5980] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 771.713002][ T5980] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 771.896545][ T3226] mkiss: ax0: crc mode is auto. [ 772.178676][ T3177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 772.184352][ T3177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 772.190199][ T3177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 772.195461][ T3177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.245967][ T3241] bond0: (slave syz_tun): Releasing backup interface [ 772.259068][ T3241] bridge_slave_0: left allmulticast mode [ 772.262198][ T3241] bridge_slave_0: left promiscuous mode [ 772.265447][ T3241] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.274016][ T3241] bridge_slave_1: left allmulticast mode [ 772.276432][ T3241] bridge_slave_1: left promiscuous mode [ 772.279881][ T3241] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.288510][ T3241] bond0: (slave bond_slave_0): Releasing backup interface [ 772.294649][ T3241] bond0: (slave bond_slave_1): Releasing backup interface [ 772.305069][ T3241] team0: Port device team_slave_0 removed [ 772.312068][ T3241] team0: Port device team_slave_1 removed [ 772.315647][ T3241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.319216][ T3241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.323928][ T3241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.327124][ T3241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.341199][ T3241] bond2: (slave geneve3): Releasing active interface [ 772.362987][ T3244] team0: Mode changed to "roundrobin" [ 772.365158][ T3241] tipc: Enabled bearer , priority 0 [ 772.370320][ T1144] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.375645][ T1144] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.381557][ T1144] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.401840][ T1144] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 772.422071][ T3177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.440067][ T3177] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.450880][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.453996][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.469800][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.472829][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.652740][ T3177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.719258][T12015] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 772.840644][ T3177] veth0_vlan: entered promiscuous mode [ 772.850753][ T3177] veth1_vlan: entered promiscuous mode [ 772.879626][T12015] usb 12-1: Using ep0 maxpacket: 16 [ 772.883700][ T3177] veth0_macvtap: entered promiscuous mode [ 772.883790][T12015] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.890040][T12015] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.890660][ T3177] veth1_macvtap: entered promiscuous mode [ 772.895507][T12015] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 772.901462][T12015] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 772.904345][T12015] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.909479][T12015] usb 12-1: config 0 descriptor?? [ 772.910242][ T3177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.925675][ T3177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.935875][T14730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.938701][T14730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.942322][T14730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.946201][T14730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.004695][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.007575][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.034788][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.037417][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.080186][ T3267] netlink: 'syz.4.10405': attribute type 10 has an invalid length. [ 773.090397][ T3267] team0: Cannot enslave team device to itself [ 773.104358][ T5980] Bluetooth: hci3: command tx timeout [ 773.151256][ T3267] __nla_validate_parse: 10 callbacks suppressed [ 773.151267][ T3267] netlink: 5096 bytes leftover after parsing attributes in process `syz.4.10405'. [ 773.348878][T12015] microsoft 0003:045E:07DA.002C: item fetching failed at offset 0/34 [ 773.351778][T12015] microsoft 0003:045E:07DA.002C: parse failed [ 773.353800][T12015] microsoft 0003:045E:07DA.002C: probe with driver microsoft failed with error -22 [ 773.510875][ T3280] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 773.583813][ T3248] netlink: 'syz.7.10429': attribute type 4 has an invalid length. [ 773.593053][ T3287] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 773.632233][ T3248] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10429'. [ 773.688692][ T6045] usb 12-1: USB disconnect, device number 33 [ 773.812977][ T3300] bridge_slave_0: left allmulticast mode [ 773.815427][ T3300] bridge_slave_0: left promiscuous mode [ 773.817996][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.826024][ T3300] bridge_slave_1: left allmulticast mode [ 773.828480][ T3300] bridge_slave_1: left promiscuous mode [ 773.831832][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.839934][ T3300] bond0: (slave bond_slave_0): Releasing backup interface [ 773.849145][ T3300] bond0: (slave bond_slave_1): Releasing backup interface [ 773.855590][ T3300] team0: Port device team_slave_0 removed [ 773.862472][ T3300] team0: Port device team_slave_1 removed [ 773.866293][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.870197][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.873824][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.876301][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.900525][ T3303] team0: Mode changed to "roundrobin" [ 773.934374][ T3300] tipc: Started in network mode [ 773.936350][ T3300] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 773.939291][ T3300] tipc: Enabled bearer , priority 0 [ 774.105595][ T6037] usbhid 7-1:1.0: can't add hid device: -71 [ 774.107568][ T6037] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 774.111559][ T6037] usb 7-1: USB disconnect, device number 14 [ 774.112446][ T5377] Dev loop2: unable to read RDB block 7 [ 774.115714][ T5377] loop2: unable to read partition table [ 774.117979][ T5377] loop2: partition table beyond EOD, truncated [ 774.637581][ T3333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10453'. [ 774.676111][ T3335] QAT: Device 2 not found [ 775.035387][ T3337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=3337 comm=syz.4.10455 [ 775.104116][ T5377] Dev loop2: unable to read RDB block 7 [ 775.105931][ T5377] loop2: unable to read partition table [ 775.107748][ T5377] loop2: partition table beyond EOD, truncated [ 775.130718][ T5377] Dev loop2: unable to read RDB block 7 [ 775.132579][ T5377] loop2: unable to read partition table [ 775.134467][ T5377] loop2: partition table beyond EOD, truncated [ 775.146973][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10459'. [ 775.156681][ T840] tipc: Node number set to 11578026 [ 775.201768][ T3346] netlink: 'syz.2.10459': attribute type 10 has an invalid length. [ 775.213468][ T3345] batadv_slave_1 (unregistering): left promiscuous mode [ 775.299254][ T3346] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 775.327735][ T5980] Bluetooth: hci3: command tx timeout [ 775.349067][ T6037] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 775.358562][ T5377] Dev loop2: unable to read RDB block 7 [ 775.360402][ T5377] loop2: unable to read partition table [ 775.362252][ T5377] loop2: partition table beyond EOD, truncated [ 775.511409][ T6037] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 775.515165][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 775.519705][ T6037] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 775.524764][ T6037] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 775.529866][ T6037] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 775.533893][ T6037] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.537865][ T6037] usb 9-1: config 0 descriptor?? [ 775.539903][ T3341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 775.654061][ T3358] netlink: 'syz.7.10463': attribute type 4 has an invalid length. [ 775.734210][ T3366] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 775.968379][ T5377] Dev loop2: unable to read RDB block 7 [ 775.972758][ T5377] loop2: unable to read partition table [ 775.975271][ T5377] loop2: partition table beyond EOD, truncated [ 775.984128][ T6037] usbhid 9-1:0.0: can't add hid device: -71 [ 775.986400][ T6037] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 775.992421][ T6037] usb 9-1: USB disconnect, device number 8 [ 776.017616][ T3376] team0: Port device vlan0 removed [ 776.026642][T14730] tipc: Resetting bearer [ 776.052016][ T3376] team0: Unable to change to the same mode the team is in [ 776.058698][ T3376] tipc: Enabling of bearer rejected, already enabled [ 776.073406][ T5377] Dev loop2: unable to read RDB block 7 [ 776.075770][ T5377] loop2: unable to read partition table [ 776.078548][ T5377] loop2: partition table beyond EOD, truncated [ 776.226370][ T5377] Dev loop2: unable to read RDB block 7 [ 776.228637][ T5377] loop2: unable to read partition table [ 776.231040][ T5377] loop2: partition table beyond EOD, truncated [ 776.267163][ T5377] Dev loop2: unable to read RDB block 7 [ 776.269916][ T5377] loop2: unable to read partition table [ 776.270355][ T3383] fuse: Bad value for 'user_id' [ 776.272300][ T5377] loop2: partition table beyond EOD, truncated [ 776.273877][ T3383] fuse: Bad value for 'user_id' [ 776.386821][ T5377] Dev loop2: unable to read RDB block 7 [ 776.388617][ T5377] loop2: unable to read partition table [ 776.390430][ T5377] loop2: partition table beyond EOD, truncated [ 776.395596][ T3391] netlink: 'syz.2.10475': attribute type 21 has an invalid length. [ 776.399017][ T3391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10475'. [ 776.404439][ T3391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10475'. [ 776.408439][ T3391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10475'. [ 776.411712][ T3391] netlink: 'syz.2.10475': attribute type 7 has an invalid length. [ 776.433654][ T5377] Dev loop2: unable to read RDB block 7 [ 776.435905][ T5377] loop2: unable to read partition table [ 776.438233][ T5377] loop2: partition table beyond EOD, truncated [ 776.561400][ T5377] Dev loop2: unable to read RDB block 7 [ 776.561636][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 776.561650][ T40] audit: type=1400 audit(1756417515.219:27334): avc: denied { mounton } for pid=3394 comm="syz.4.10477" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 776.561737][ T3395] 9pnet_virtio: no channels available for device syz [ 776.563851][ T5377] loop2: unable to read partition table [ 776.564021][ T5377] loop2: partition table beyond EOD, [ 776.566580][ T40] audit: type=1400 audit(1756417515.219:27335): avc: denied { create } for pid=3394 comm="syz.4.10477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 776.575525][ T5377] truncated [ 776.593967][ T40] audit: type=1400 audit(1756417515.219:27336): avc: denied { setopt } for pid=3394 comm="syz.4.10477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 776.602121][ T40] audit: type=1400 audit(1756417515.219:27337): avc: denied { create } for pid=3394 comm="syz.4.10477" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 776.606719][ T3397] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10479'. [ 776.610144][ T40] audit: type=1400 audit(1756417515.229:27338): avc: denied { unlink } for pid=3177 comm="syz-executor" name="file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 776.622401][ T40] audit: type=1400 audit(1756417515.257:27339): avc: denied { create } for pid=3398 comm="syz.2.10478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 776.639015][ T40] audit: type=1400 audit(1756417515.285:27340): avc: denied { getopt } for pid=3400 comm="syz.4.10480" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 776.684905][ T3405] 9pnet_virtio: no channels available for device syz [ 776.691726][ T40] audit: type=1400 audit(1756417515.341:27341): avc: denied { read append } for pid=3404 comm="syz.4.10481" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 776.694671][ T3405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10481'. [ 776.703818][ T40] audit: type=1400 audit(1756417515.341:27342): avc: denied { open } for pid=3404 comm="syz.4.10481" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 776.713698][ T40] audit: type=1400 audit(1756417515.341:27343): avc: denied { ioctl } for pid=3404 comm="syz.4.10481" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 776.723086][ T3405] raw_sendmsg: syz.4.10481 forgot to set AF_INET. Fix it! [ 776.856463][ T6037] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 777.007268][ T3422] mkiss: ax0: crc mode is auto. [ 777.018396][ T6037] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 777.021943][ T6037] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 777.025419][ T6037] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 777.029933][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.035097][ T3399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 777.040131][ T6037] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.092194][ T3424] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10488'. [ 777.190531][ T840] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 777.292516][ T6239] usb 7-1: USB disconnect, device number 15 [ 777.373011][ T840] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.377051][ T840] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 777.380549][ T840] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 777.383968][ T840] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 777.387838][ T840] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.393120][ T840] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.397975][ T840] usb 14-1: config 0 descriptor?? [ 777.400502][ T3419] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 777.551557][ T5980] Bluetooth: hci3: command tx timeout [ 777.805950][ T3452] 9pnet_virtio: no channels available for device syz [ 777.814639][ T3452] 9pnet_virtio: no channels available for device syz [ 777.834960][ T840] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd [ 777.840345][ T840] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 777.864896][ T5377] Dev loop2: unable to read RDB block 7 [ 777.867050][ T5377] loop2: unable to read partition table [ 777.869497][ T5377] loop2: partition table beyond EOD, truncated [ 777.986750][ T5377] Dev loop2: unable to read RDB block 7 [ 777.989086][ T5377] loop2: unable to read partition table [ 777.992363][ T5377] loop2: partition table beyond EOD, truncated [ 778.013183][ T3461] lo speed is unknown, defaulting to 1000 [ 778.163960][ T5377] Dev loop2: unable to read RDB block 7 [ 778.165829][ T5377] loop2: unable to read partition table [ 778.167720][ T5377] loop2: partition table beyond EOD, truncated [ 778.171779][ T3474] fuse: Unknown parameter 'rode' [ 778.231653][ T5377] Dev loop2: unable to read RDB block 7 [ 778.233526][ T5377] loop2: unable to read partition table [ 778.235628][ T5377] loop2: partition table beyond EOD, truncated [ 778.316482][ T5377] Dev loop2: unable to read RDB block 7 [ 778.318302][ T5377] loop2: unable to read partition table [ 778.320128][ T5377] loop2: partition table beyond EOD, truncated [ 778.477447][ T5377] Dev loop2: unable to read RDB block 7 [ 778.479291][ T5377] loop2: unable to read partition table [ 778.481199][ T5377] loop2: partition table beyond EOD, truncated [ 778.539733][ T5377] Dev loop2: unable to read RDB block 7 [ 778.541597][ T5377] loop2: unable to read partition table [ 778.543536][ T5377] loop2: partition table beyond EOD, truncated [ 778.552514][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.558412][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.562531][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.566472][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.643870][ T3500] tipc: Resetting bearer [ 778.661182][ T3500] team0: Unable to change to the same mode the team is in [ 778.664675][ T3500] tipc: Enabling of bearer rejected, already enabled [ 778.682142][ T839] usb 14-1: USB disconnect, device number 7 [ 778.790074][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.795370][ T3509] __nla_validate_parse: 5 callbacks suppressed [ 778.795388][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.795455][ T3496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.796318][ T3509] netlink: 72 bytes leftover after parsing attributes in process `syz.7.10516'. [ 778.807729][ T3496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.812962][T11992] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 778.861193][ T3514] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10517'. [ 778.999884][T11992] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 779.004272][T11992] usb 7-1: can't read configurations, error -71 [ 779.303600][ T3535] tipc: Resetting bearer [ 779.319504][ T3535] team0: Unable to change to the same mode the team is in [ 779.322175][ T3535] tipc: Enabling of bearer rejected, already enabled [ 779.415068][ T3541] netlink: 'syz.9.10527': attribute type 4 has an invalid length. [ 779.417599][ T3541] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10527'. [ 779.424696][ T3541] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 779.440585][T14814] usb 12-1: new high-speed USB device number 34 using dummy_hcd [ 779.527644][ T3547] tmpfs: Unknown parameter ';+W' [ 779.551706][ T5377] Dev loop2: unable to read RDB block 7 [ 779.553845][ T5377] loop2: unable to read partition table [ 779.555842][ T5377] loop2: partition table beyond EOD, truncated [ 779.596770][ T5377] Dev loop2: unable to read RDB block 7 [ 779.598675][ T5377] loop2: unable to read partition table [ 779.600971][ T5377] loop2: partition table beyond EOD, truncated [ 779.608046][T14814] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.611932][T14814] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 779.616459][T14814] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 779.620694][T14814] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.625054][T14814] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.629214][T14814] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.633693][T14814] usb 12-1: config 0 descriptor?? [ 779.635897][ T3533] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 779.662281][ T3553] kvm: MWAIT instruction emulated as NOP! [ 779.675430][ T3560] tipc: Resetting bearer [ 779.690509][ T3560] team0: Unable to change to the same mode the team is in [ 779.693998][ T3560] tipc: Enabling of bearer rejected, already enabled [ 779.720894][ T3568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10535'. [ 779.776983][ T3569] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 779.779444][ T3569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 779.787768][ T3569] vhci_hcd vhci_hcd.0: Device attached [ 780.053050][ T10] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 780.115358][T14814] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd [ 780.127512][T14814] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 780.387073][ T6037] usb 12-1: USB disconnect, device number 34 [ 780.493792][ T3570] vhci_hcd: connection reset by peer [ 780.496359][ T1150] vhci_hcd: stop threads [ 780.498165][ T1150] vhci_hcd: release socket [ 780.500194][ T1150] vhci_hcd: disconnect device [ 780.521956][ T5377] Dev loop2: unable to read RDB block 7 [ 780.523651][ T5377] loop2: unable to read partition table [ 780.525370][ T5377] loop2: partition table beyond EOD, truncated [ 780.630370][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 780.720355][ T5377] Dev loop2: unable to read RDB block 7 [ 780.722231][ T5377] loop2: unable to read partition table [ 780.724094][ T5377] loop2: partition table beyond EOD, truncated [ 780.828885][ T3593] IPVS: sed: FWM 3 0x00000003 - no destination available [ 780.841873][ T5377] Dev loop2: unable to read RDB block 7 [ 780.844549][ T5377] loop2: unable to read partition table [ 780.847022][ T5377] loop2: partition table beyond EOD, truncated [ 780.936379][ T3598] overlay: filesystem on ./bus not supported as upperdir [ 780.940057][ T3598] overlay: filesystem on ./bus not supported as upperdir [ 780.946794][ T3598] overlay: filesystem on ./bus not supported as upperdir [ 780.967093][ T5377] Dev loop2: unable to read RDB block 7 [ 780.968873][ T5377] loop2: unable to read partition table [ 780.970819][ T5377] loop2: partition table beyond EOD, truncated [ 781.018105][ T3606] tipc: Resetting bearer [ 781.038881][ T3606] team0: Unable to change to the same mode the team is in [ 781.042242][ T3606] tipc: Enabling of bearer rejected, already enabled [ 781.134051][ T5377] Dev loop2: unable to read RDB block 7 [ 781.135932][ T5377] loop2: unable to read partition table [ 781.137830][ T5377] loop2: partition table beyond EOD, truncated [ 781.162578][ T5377] Dev loop2: unable to read RDB block 7 [ 781.164321][ T5377] loop2: unable to read partition table [ 781.168275][ T5377] loop2: partition table beyond EOD, truncated [ 781.261766][ T5377] Dev loop2: unable to read RDB block 7 [ 781.263506][ T5377] loop2: unable to read partition table [ 781.265308][ T5377] loop2: partition table beyond EOD, truncated [ 781.300780][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10554'. [ 781.396962][ T3640] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10557'. [ 781.428475][ T5980] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 781.488911][ T5377] Dev loop2: unable to read RDB block 7 [ 781.492995][ T5377] loop2: unable to read partition table [ 781.494912][ T5377] loop2: partition table beyond EOD, truncated [ 781.503347][ T3651] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 781.525656][ T5377] Dev loop2: unable to read RDB block 7 [ 781.527805][ T5377] loop2: unable to read partition table [ 781.531400][ T5377] loop2: partition table beyond EOD, truncated [ 781.539035][ T3654] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10564'. [ 781.567042][ T5377] Dev loop2: unable to read RDB block 7 [ 781.568806][ T5377] loop2: unable to read partition table [ 781.570724][ T5377] loop2: partition table beyond EOD, truncated [ 781.611156][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10567'. [ 781.744369][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 781.763569][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 781.774953][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 781.778966][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 781.782533][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.848090][ T3673] lo speed is unknown, defaulting to 1000 [ 781.952681][ T3673] chnl_net:caif_netlink_parms(): no params data found [ 781.988193][ T6045] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 782.009275][ T40] kauditd_printk_skb: 263 callbacks suppressed [ 782.009287][ T40] audit: type=1400 audit(1756417520.308:27607): avc: denied { allowed } for pid=3689 comm="syz.7.10574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 782.020164][ T40] audit: type=1400 audit(1756417520.317:27608): avc: denied { create } for pid=3689 comm="syz.7.10574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 782.030661][ T40] audit: type=1400 audit(1756417520.327:27609): avc: denied { create } for pid=3689 comm="syz.7.10574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 782.066164][ T40] audit: type=1400 audit(1756417520.364:27610): avc: denied { ioctl } for pid=3689 comm="syz.7.10574" path="socket:[219516]" dev="sockfs" ino=219516 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 782.099249][ T40] audit: type=1400 audit(1756417520.392:27611): avc: denied { write } for pid=3694 comm="syz.9.10575" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 782.116211][ T40] audit: type=1400 audit(1756417520.392:27612): avc: denied { open } for pid=3694 comm="syz.9.10575" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 782.149227][ T6045] usb 9-1: Using ep0 maxpacket: 8 [ 782.151023][ T40] audit: type=1400 audit(1756417520.448:27613): avc: denied { write } for pid=3694 comm="syz.9.10575" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 782.162642][ T6045] usb 9-1: config 0 has no interfaces? [ 782.166100][ T6045] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 782.169039][ T6045] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.172945][ T6045] usb 9-1: Product: syz [ 782.174403][ T6045] usb 9-1: Manufacturer: syz [ 782.175939][ T6045] usb 9-1: SerialNumber: syz [ 782.178529][T14751] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.188506][T14751] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 782.190781][ T6045] usb 9-1: config 0 descriptor?? [ 782.192492][T14751] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.204415][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.206968][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.209494][ T3673] bridge_slave_0: entered allmulticast mode [ 782.213278][ T3673] bridge_slave_0: entered promiscuous mode [ 782.218757][ T40] audit: type=1400 audit(1756417520.504:27614): avc: denied { mount } for pid=3697 comm="syz.9.10576" name="/" dev="9p" ino=35913828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 782.228312][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.230639][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.233149][ T3673] bridge_slave_1: entered allmulticast mode [ 782.237939][ T40] audit: type=1400 audit(1756417520.523:27615): avc: denied { unmount } for pid=31452 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 782.240040][ T3673] bridge_slave_1: entered promiscuous mode [ 782.293070][T14751] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.297418][T14751] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 782.302968][T14751] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.340309][ T3673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.351931][ T3673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.381900][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10578'. [ 782.399427][ T3673] team0: Port device team_slave_0 added [ 782.403007][ T3673] team0: Port device team_slave_1 added [ 782.453681][T14751] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.457468][T14751] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 782.461452][T14751] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.490104][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.492769][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.502480][ T3673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.508695][ T3673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.511754][ T3673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.519964][ T3673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.577944][T12015] usb 9-1: USB disconnect, device number 9 [ 782.603503][T14751] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.607647][T14751] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 782.612443][T14751] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.618738][ T6045] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 782.626917][ T3673] hsr_slave_0: entered promiscuous mode [ 782.632695][ T3673] hsr_slave_1: entered promiscuous mode [ 782.635579][ T3673] debugfs: 'hsr0' already exists in 'hsr' [ 782.637910][ T3673] Cannot create hsr debugfs directory [ 782.650825][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10580'. [ 782.658700][ T40] audit: type=1400 audit(1756417520.916:27616): avc: denied { mounton } for pid=3708 comm="syz.7.10580" path="/223/file0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 782.781374][ T6045] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 782.786564][ T6045] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 782.789862][ T6045] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.792511][ T6045] usb 14-1: Product: syz [ 782.793885][ T6045] usb 14-1: Manufacturer: syz [ 782.795376][ T6045] usb 14-1: SerialNumber: syz [ 782.799098][ T6045] usb 14-1: config 0 descriptor?? [ 783.350607][ T6024] usb 14-1: USB disconnect, device number 8 [ 783.480433][T14751] bond0 (unregistering): Released all slaves [ 783.498604][T14751] bond1 (unregistering): Released all slaves [ 783.595385][T14751] tipc: Disabling bearer [ 783.597637][T14751] tipc: Disabling bearer [ 783.610522][T14751] tipc: Left network mode [ 783.786336][T14751] batman_adv: batadv0: Interface deactivated: macvtap1 [ 783.790545][T14751] mac80211_hwsim hwsim303 wlan0 (unregistering): left allmulticast mode [ 783.815841][T14751] batman_adv: batadv0: Removing interface: macvtap1 [ 783.895709][T14751] macvlan0: left promiscuous mode [ 783.903034][T14751] hsr_slave_0: left promiscuous mode [ 783.905608][T14751] hsr_slave_1: left promiscuous mode [ 783.913269][T14751] veth1_macvtap: left promiscuous mode [ 783.915219][T14751] veth0_macvtap: left promiscuous mode [ 783.917712][T14751] veth0_vlan: left promiscuous mode [ 783.966159][ T63] Bluetooth: hci0: command tx timeout [ 785.498478][ T10] vhci_hcd: vhci_device speed not set [ 785.715565][ T3735] tipc: Resetting bearer [ 785.727672][ T3743] team0: Port device vlan0 added [ 785.738994][ T3746] tipc: Enabling of bearer rejected, already enabled [ 785.825140][ T3673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 785.832756][ T3673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 785.844871][ T3673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.853608][ T3673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 785.886138][ T3761] netlink: 'syz.9.10593': attribute type 2 has an invalid length. [ 785.947972][ T3673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.961053][ T3673] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.971293][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.973627][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.981899][T14730] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.984270][T14730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.124989][ T3782] mac80211_hwsim hwsim319 wlan1: entered allmulticast mode [ 786.131031][ T3782] netlink: 'syz.4.10597': attribute type 10 has an invalid length. [ 786.133590][ T3782] mac80211_hwsim hwsim319 wlan1: left allmulticast mode [ 786.143097][ T3782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.153465][ T3782] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 786.166093][ T3673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.189699][ T63] Bluetooth: hci0: command tx timeout [ 786.194498][ T3673] veth0_vlan: entered promiscuous mode [ 786.204182][ T3673] veth1_vlan: entered promiscuous mode [ 786.227654][ T3673] veth0_macvtap: entered promiscuous mode [ 786.233850][ T3673] veth1_macvtap: entered promiscuous mode [ 786.247509][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.254983][ T3673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.262155][T14730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.269931][T14730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.272779][T14730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.276677][T14730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.317934][ T3793] bond0: (slave wlan1): Releasing backup interface [ 786.327165][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10600'. [ 786.330565][ T3795] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10600'. [ 786.336103][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10600'. [ 786.337822][ T3793] vlan0: entered promiscuous mode [ 786.339241][ T3795] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10600'. [ 786.347104][ T3793] team0: Port device vlan0 added [ 786.364889][ T3793] tipc: Enabling of bearer rejected, already enabled [ 786.445438][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.449121][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.472245][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.474907][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.533864][ T3816] QAT: Invalid ioctl -2114415556 [ 786.535855][ T3816] QAT: Invalid ioctl -805268450 [ 786.539174][ T3816] QAT: Stopping all acceleration devices. [ 786.551414][ T3818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10605'. [ 786.565843][ T3818] bridge1: entered promiscuous mode [ 786.810348][T12015] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 786.982030][T12015] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 786.985873][T12015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 786.989336][T12015] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 786.993362][T12015] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 786.997478][T12015] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.000244][T12015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.004615][T12015] usb 9-1: config 0 descriptor?? [ 787.007020][ T3820] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.068481][ T3865] binder: 3864:3865 ioctl c018620c 200000000240 returned -22 [ 787.449428][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 787.449446][ T40] audit: type=1400 audit(1756417525.396:27753): avc: denied { create } for pid=3882 comm="syz.9.10629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 787.455515][T12015] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 787.456703][ T3887] netlink: 146780 bytes leftover after parsing attributes in process `syz.7.10628'. [ 787.459427][ T40] audit: type=1400 audit(1756417525.396:27754): avc: denied { bind } for pid=3882 comm="syz.9.10629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 787.472665][T12015] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 787.486779][ T40] audit: type=1400 audit(1756417525.434:27755): avc: denied { mounton } for pid=3888 comm="syz.9.10630" path="/453/file0" dev="tmpfs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 787.497408][ T40] audit: type=1400 audit(1756417525.434:27756): avc: denied { mount } for pid=3888 comm="syz.9.10630" name="/" dev="9p" ino=35913828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 787.506352][ T40] audit: type=1400 audit(1756417525.434:27757): avc: denied { append } for pid=3888 comm="syz.9.10630" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.514958][ T40] audit: type=1400 audit(1756417525.434:27758): avc: denied { add_name } for pid=3888 comm="syz.9.10630" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 787.522962][ T40] audit: type=1400 audit(1756417525.434:27759): avc: denied { create } for pid=3888 comm="syz.9.10630" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 787.530914][ T40] audit: type=1400 audit(1756417525.434:27760): avc: denied { associate } for pid=3888 comm="syz.9.10630" name="blkio.bfq.avg_queue_size" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 787.538881][ T40] audit: type=1400 audit(1756417525.453:27761): avc: denied { read append } for pid=3888 comm="syz.9.10630" name="blkio.bfq.avg_queue_size" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 787.546874][ T40] audit: type=1400 audit(1756417525.453:27762): avc: denied { open } for pid=3888 comm="syz.9.10630" path="/453/file0/blkio.bfq.avg_queue_size" dev="9p" ino=35913970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 787.730451][ T3820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.734043][ T3820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.796355][ T839] usb 9-1: USB disconnect, device number 10 [ 788.324496][ T3894] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 788.346423][ T3895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10631'. [ 788.425007][ T63] Bluetooth: hci0: command tx timeout [ 788.545772][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10637'. [ 788.549671][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10637'. [ 788.553912][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10637'. [ 788.644731][ T3928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 788.719902][ T3932] bridge_slave_0: left allmulticast mode [ 788.721725][ T3932] bridge_slave_0: left promiscuous mode [ 788.726111][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.728862][ T3934] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 788.735720][ T3932] bridge_slave_1: left allmulticast mode [ 788.737619][ T3932] bridge_slave_1: left promiscuous mode [ 788.739605][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.747674][ T3932] bond0: (slave bond_slave_0): Releasing backup interface [ 788.752321][ T3932] bond0: (slave bond_slave_1): Releasing backup interface [ 788.759607][ T3932] team0: Port device team_slave_0 removed [ 788.766644][ T3932] team0: Port device team_slave_1 removed [ 788.768949][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.771311][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.774629][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.777848][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.812886][ T3935] vlan0: entered promiscuous mode [ 788.818534][ T3935] team0: Port device vlan0 added [ 788.826120][ T3932] tipc: Started in network mode [ 788.827949][ T3932] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 788.830706][ T3932] tipc: Enabled bearer , priority 0 [ 788.884149][ T839] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 789.016534][ T3948] macvlan0: entered promiscuous mode [ 789.020415][ T3948] batadv_slave_1: entered promiscuous mode [ 789.025135][ T3948] debugfs: 'hsr1' already exists in 'hsr' [ 789.028479][ T3948] Cannot create hsr debugfs directory [ 789.051812][ T839] usb 14-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 789.055997][ T839] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 789.059605][ T839] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 789.063230][ T839] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 789.068388][ T839] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 789.071350][ T839] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.075391][ T839] usb 14-1: config 0 descriptor?? [ 789.078167][ T3926] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 789.216648][ T3963] random: crng reseeded on system resumption [ 789.317974][ T3968] team0: Port device vlan0 removed [ 789.323012][ T1150] tipc: Resetting bearer [ 789.328371][ T3968] team0: Port device vlan0 added [ 789.330976][ T3968] tipc: Enabling of bearer rejected, already enabled [ 789.422436][ T3976] macvlan0: entered promiscuous mode [ 789.425116][ T3976] batadv_slave_1: entered promiscuous mode [ 789.428036][ T3976] debugfs: 'hsr1' already exists in 'hsr' [ 789.432160][ T3976] Cannot create hsr debugfs directory [ 789.515090][ T839] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 789.522587][ T839] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 789.795249][ T3926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.798971][ T3926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.804985][ T10] usb 14-1: USB disconnect, device number 9 [ 789.920574][ T6239] tipc: Node number set to 11578026 [ 789.948052][ T4021] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 789.950951][ T4021] SELinux: failed to load policy [ 790.460084][ T4036] overlayfs: failed to resolve './file1': -2 [ 790.460475][ T4037] overlayfs: failed to resolve './file1': -2 [ 790.647385][ T63] Bluetooth: hci0: command tx timeout [ 790.789749][ T4057] ntfs3(sr0): Primary boot signature is not NTFS. [ 790.792751][ T4057] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 790.923254][ T4073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 791.071285][ T4086] overlayfs: conflicting options: userxattr,redirect_dir=on [ 791.265766][ T4098] netlink: 'syz.4.10706': attribute type 22 has an invalid length. [ 791.273318][ T1150] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.273422][ T4098] netlink: 'syz.4.10706': attribute type 22 has an invalid length. [ 791.277004][ T1150] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.283466][ T1150] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.287130][ T1150] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.442143][ T4106] vxcan1: entered promiscuous mode [ 791.444739][ T4106] team0: Device vxcan1 failed to enter team mode [ 791.446601][ T4106] team0: Device vxcan1 failed to enter team mode [ 791.448433][ T4107] team0: Device vxcan1 failed to enter team mode [ 791.451642][ T4107] team0: Device vxcan1 failed to enter team mode [ 792.307403][ T4143] __nla_validate_parse: 11 callbacks suppressed [ 792.307413][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10722'. [ 792.419818][ T4150] tipc: Resetting bearer [ 792.439000][ T4150] team0: Unable to change to the same mode the team is in [ 792.441867][ T4150] tipc: Enabling of bearer rejected, already enabled [ 792.512543][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10727'. [ 792.554261][ T1150] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.557113][ T1150] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.601786][ T4161] fuse: Unknown parameter '' [ 792.603890][ T4161] fuse: Unknown parameter '' [ 792.605837][ T4161] fuse: Unknown parameter '' [ 792.607544][ T4161] fuse: Unknown parameter '' [ 792.609161][ T4161] fuse: Unknown parameter '' [ 792.610867][ T4161] fuse: Unknown parameter '' [ 792.612538][ T4161] fuse: Unknown parameter '' [ 792.614261][ T4161] fuse: Unknown parameter '' [ 792.623661][ T4161] fuse: Unknown parameter '' [ 792.626929][ T4161] fuse: Unknown parameter '' [ 792.628564][ T4161] fuse: Unknown parameter '' [ 792.630180][ T4161] fuse: Unknown parameter '' [ 792.631787][ T4161] fuse: Unknown parameter '' [ 792.633458][ T4161] fuse: Unknown parameter '' [ 792.635146][ T4161] fuse: Unknown parameter '' [ 792.637559][ T4161] fuse: Unknown parameter '' [ 792.639206][ T4161] fuse: Unknown parameter '' [ 792.641838][ T4161] fuse: Unknown parameter '' [ 792.643462][ T4161] fuse: Unknown parameter '' [ 792.645080][ T4161] fuse: Unknown parameter '' [ 792.647012][ T4161] fuse: Unknown parameter '' [ 792.648696][ T4161] fuse: Unknown parameter '' [ 792.650572][ T4161] fuse: Unknown parameter '' [ 792.652244][ T4161] fuse: Unknown parameter '' [ 792.653991][ T4161] fuse: Unknown parameter '' [ 792.655610][ T4161] fuse: Unknown parameter '' [ 792.657788][ T4161] fuse: Unknown parameter '' [ 792.779053][ T4176] overlayfs: missing 'workdir' [ 792.792294][ T4176] QAT: Stopping all acceleration devices. [ 792.848569][ T4178] team0: Port device vlan0 removed [ 792.860119][ T4178] team0: Unable to change to the same mode the team is in [ 792.867020][ T4178] team0: Port device vlan0 added [ 792.869840][ T4178] tipc: Enabling of bearer rejected, already enabled [ 792.980412][ T40] kauditd_printk_skb: 308 callbacks suppressed [ 792.980429][ T40] audit: type=1400 audit(1756417786.574:28071): avc: denied { name_bind } for pid=4179 comm="syz.4.10738" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 792.991228][ T40] audit: type=1400 audit(1756417786.574:28072): avc: denied { node_bind } for pid=4179 comm="syz.4.10738" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 793.000718][ T40] audit: type=1400 audit(1756417786.574:28073): avc: denied { allowed } for pid=4179 comm="syz.4.10738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 793.077927][ T40] audit: type=1400 audit(1756417786.668:28074): avc: denied { read write } for pid=3177 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.088872][ T40] audit: type=1400 audit(1756417786.668:28075): avc: denied { open } for pid=3177 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.098025][ T40] audit: type=1400 audit(1756417786.668:28076): avc: denied { ioctl } for pid=3177 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 793.216648][ T40] audit: type=1400 audit(1756417786.799:28077): avc: denied { unmount } for pid=628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 793.338282][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10741'. [ 793.472273][ T4201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.477566][ T4201] tmpfs: Unknown parameter 'm<@pol' [ 793.479696][ T40] audit: type=1400 audit(1756417787.032:28078): avc: denied { write } for pid=4200 comm="syz.7.10745" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 793.529811][ T40] audit: type=1400 audit(1756417787.089:28079): avc: denied { read write } for pid=4207 comm="syz.9.10748" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 793.537794][ T40] audit: type=1400 audit(1756417787.089:28080): avc: denied { open } for pid=4207 comm="syz.9.10748" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 793.590041][ T4215] 9pnet_virtio: no channels available for device syz [ 793.738872][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10754'. [ 793.899087][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.901690][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.904243][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.910472][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.912999][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.915490][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.918005][ T4255] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 793.943656][ T4259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10763'. [ 794.026212][ T4260] team0: No ports can be present during mode change [ 794.080529][ T1150] tipc: Resetting bearer [ 794.087008][ T4260] tipc: Enabling of bearer rejected, already enabled [ 794.183264][ T4267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10766'. [ 794.216852][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10767'. [ 794.295567][ T4267] lo speed is unknown, defaulting to 1000 usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 794.712860][ T4293] efs: device does not support 512 byte blocks [ 794.714842][ T4293] device does not support 512 byte blocks [ 794.714842][ T4293] [ 794.894258][ T4307] tmpfs: Bad value for 'huge' [ 794.953840][ T4311] team0: Unable to change to the same mode the team is in [ 794.957607][ T4311] tipc: Enabling of bearer rejected, already enabled [ 795.159705][ T4325] FAULT_INJECTION: forcing a failure. [ 795.159705][ T4325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.164195][ T4325] CPU: 0 UID: 0 PID: 4325 Comm: syz.9.10786 Not tainted syzkaller #0 PREEMPT(full) [ 795.164211][ T4325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 795.164218][ T4325] Call Trace: [ 795.164223][ T4325] [ 795.164228][ T4325] dump_stack_lvl+0x16c/0x1f0 [ 795.164267][ T4325] should_fail_ex+0x512/0x640 [ 795.164286][ T4325] _copy_from_user+0x2e/0xd0 [ 795.164302][ T4325] memdup_user+0x6b/0xe0 [ 795.164316][ T4325] hidraw_send_report+0x1d8/0x4d0 [ 795.164334][ T4325] ? __pfx_hidraw_write+0x10/0x10 [ 795.164347][ T4325] hidraw_write+0x98/0xe0 [ 795.164362][ T4325] vfs_writev+0x5df/0xde0 [ 795.164377][ T4325] ? __pfx_vfs_writev+0x10/0x10 [ 795.164397][ T4325] ? __fget_files+0x20e/0x3c0 [ 795.164410][ T4325] ? __fget_files+0x1b0/0x3c0 [ 795.164425][ T4325] ? do_writev+0x132/0x340 [ 795.164434][ T4325] do_writev+0x132/0x340 [ 795.164444][ T4325] ? __pfx_do_writev+0x10/0x10 [ 795.164459][ T4325] do_syscall_64+0xcd/0x4c0 [ 795.164473][ T4325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.164485][ T4325] RIP: 0033:0x7ff67778ebe9 [ 795.164495][ T4325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.164506][ T4325] RSP: 002b:00007ff6785ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 795.164517][ T4325] RAX: ffffffffffffffda RBX: 00007ff6779b5fa0 RCX: 00007ff67778ebe9 [ 795.164524][ T4325] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 795.164531][ T4325] RBP: 00007ff6785ea090 R08: 0000000000000000 R09: 0000000000000000 [ 795.164538][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.164544][ T4325] R13: 00007ff6779b6038 R14: 00007ff6779b5fa0 R15: 00007ffea67549c8 [ 795.164558][ T4325] [ 795.230919][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10789'. [ 795.480466][ T4342] team0: No ports can be present during mode change [ 795.484216][ T4342] tipc: Enabling of bearer rejected, already enabled [ 795.558982][ T4344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.603512][ T4346] tmpfs: Bad value for 'mpol' [ 795.630131][ T4344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10795'. [ 795.908181][ T840] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 795.993918][ T4362] netlusb_generic_handle_packet: ctrl buffer too small (16384 > 4096) ink: 8 bytes leftover after parsing attributes in process `syz.7.10801'. [ 796.092826][ T840] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 796.095695][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.101038][ T840] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 796.103993][ T840] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 796.106716][ T840] usb 7-1: Manufacturer: syz [ 796.111565][ T840] usb 7-1: config 0 descriptor?? [ 796.163680][ T840] rc_core: IR keymap rc-hauppauge not found [ 796.165682][ T840] Registered IR keymap rc-empty [ 796.168397][ T840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 796.172468][ T840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input89 [ 796.333681][T12015] usb 7-1: USB disconnect, device number 18 [ 809.742127][ T40] kauditd_printk_skb: 132 callbacks suppressed [ 809.742138][ T40] audit: type=1400 audit(1756417802.261:28213): avc: denied { write } for pid=4371 comm="syz.4.10805" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 809.751739][ T40] audit: type=1400 audit(1756417802.261:28214): avc: denied { open } for pid=4371 comm="syz.4.10805" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 809.787193][ T40] audit: type=1400 audit(1756417802.298:28215): avc: denied { create } for pid=4382 comm="syz.9.10808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 809.794718][ T40] audit: type=1400 audit(1756417802.298:28216): avc: denied { ioctl } for pid=4382 comm="syz.9.10808" path="socket:[222630]" dev="sockfs" ino=222630 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 809.803883][ T40] audit: type=1400 audit(1756417802.308:28217): avc: denied { write } for pid=4375 comm="syz.2.10807" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 809.812671][ T40] audit: type=1326 audit(1756417802.317:28218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.4.10805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ce98ebe9 code=0x7ffc0000 [ 809.812703][ T40] audit: type=1326 audit(1756417802.317:28219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=437usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) 1 comm="syz.4.10805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ce98ebe9 code=0x7ffc0000 [ 809.812737][ T40] audit: type=1326 audit(1756417802.317:28220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.4.10805" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f31ce98ebe9 code=0x7ffc0000 [ 809.812760][ T40] audit: type=1326 audit(1756417802.317:28221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.4.10805" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ce98ebe9 code=0x7ffc0000 [ 809.812782][ T40] audit: type=1326 audit(1756417802.317:28222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.4.10805" exe="/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f31ce98ebe9 code=0x7ffc0000 [ 809.825319][ T4379] hid-generic 0003:0627:0001.0001: pid 4379 passed too large report [ 810.068966][ T4400] netlink: 276 bytes leftover after parsing attributes in process `syz.9.10813'. [ 810.130166][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10813'. [ 810.133379][ T4401] netlink: 31 bytes leftover after parsing attributes in process `syz.9.10813'. [ 810.137035][ T4401] netlink: 'syz.9.10813': attribute type 3 has an invalid length. [ 810.139604][ T4401] netlink: 'syz.9.10813': attribute type 2 has an invalid length. [ 810.142146][ T4401] netlink: 31 bytes leftover after parsing attributes in process `syz.9.10813'. [ 810.379157][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10815'. [ 810.635204][ T4409] team0: Port device vlan0 removed [ 810.641190][T14730] tipc: Resetting bearer [ 810.649632][ T4409] team0: Unable to change to the same mode the team is in [ 810.657503][ T4409] team0: Port device vlan0 added [ 810.663167][ T4409] tipc: Enabling of bearer rejected, already enabled [ 810.864102][ T4423] 9pnet_virtio: no channels available for device syz [ 810.911392][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10824'. [ 811.011103][ T4433] tipc: Resetting bearer [ 811.037631][ T4433] team0: Unable to change to the same mode the team is in [ 811.041483][ T4433] tipc: Enabling of bearer rejected, already enabled [ 811.245605][ T4456] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 811.254807][ T4456] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10833'. [ 811.321103][ T4462] net_ratelimit: 58 callbacks suppressed [ 811.321121][ T4462] openvswitch: netlink: Key type 151 is out of range max 32 [ 811.410746][ T4461] infiniband syz1: set down [ 811.412331][ T4461] infiniband syz1: added macvlan1 [ 811.436633][ T4461] RDS/IB: syz1: added [ 811.438457][ T4461] smc: adding ib device syz1 with port count 1 [ 811.451799][ T4461] smc: ib device syz1 port 1 has pnetid [ 811.703890][ T4474] tipc: Resetting bearer [ 811.713492][ T4474] team0: Port device vlan0 removed [ 811.722670][ T4474] team0: Mode changed to "roundrobin" [ 811.728470][ T4474] team0: Port device vlan0 added [ 811.731939][ T4474] tipc: Enabling of bearer rejected, already enabled [ 811.974248][ T4480] netlink: 'syz.7.10841': attribute type 21 has an invalid length. [ 812.044276][ T4486] 8021q: VLANs not supported on vcan0 [ 812.102177][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10842'. [ 812.418057][ T4519] could not open pipe file descriptor [ 812.594249][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10855'. [ 812.863510][ T4542] fuse: Bad value for 'fd' [ 812.894910][ T4544] sock: sock_timestamping_bind_phc: sock not bind to device [ 812.898171][ T4544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10856'. [ 812.932710][ T4548] openvswitch: netlink: Flow key attribute not present in set flow. [ 812.944037][ T4548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 812.974128][ T4546] openvswitch: netlink: Flow actions attr not present in new flow. [ 813.739110][ T10] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 813.924633][ T10] usb 14-1: Using ep0 maxpacket: 32 [ 813.927976][ T10] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 813.930705][ T10] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 813.934076][ T10] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 813.936926][ T10] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 813.940008][ T10] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 813.947420][ T10] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 813.951962][ T10] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 813.955949][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.959951][ T10] usb 14-1: config 0 descriptor?? [ 813.987849][ T4580] hid-generic 0003:0627:0001.0001: pid 4580 passed too large report [ 814.185996][ T10] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 814.191053][ T10] usb 14-1: USB disconnect, device number 10 [ 814.196003][ T10] usblp0: removed [ 814.241728][ T5980] Bluetooth: hci0: command 0x0405 tx timeout [ 814.385961][ T4595] netlink: 'syz.7.10879': attribute type 1 has an invalid length. [ 814.658544][ T7311] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 814.818826][ T7311] usb 14-1: Using ep0 maxpacket: 32 [ 814.823260][ T7311] usb 14-1: config index 0 descriptor too short (expected 29220, got 36) [ 814.826848][ T7311] usb 14-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 814.830888][ T7311] usb 14-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 814.834834][ T7311] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 814.838985][ T7311] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 814.843611][ T7311] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 814.849196][ T7311] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 814.853281][ T7311] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.859109][ T7311] usb 14-1: config 0 descriptor?? [ 814.956162][ T4633] team0: Port device vlan0 removed [ 814.963074][T14746] tipc: Resetting bearer [ 814.973307][ T4633] team0: Unable to change to the same mode the team is in [ 814.981683][ T4633] team0: Port device vlan0 added [ 814.985518][ T4633] tipc: Enabling of bearer rejected, already enabled [ 815.110544][ T40] kauditd_printk_skb: 240 callbacks suppressed [ 815.110560][ T40] audit: type=1400 audit(804.759:28463): avc: denied { create } for pid=4644 comm="syz.7.10899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 815.121580][ T40] audit: type=1400 audit(804.759:28464): avc: denied { getopt } for pid=4644 comm="syz.7.10899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 815.230793][ T40] audit: type=1400 audit(804.862:28465): avc: denied { mount } for pid=4651 comm="syz.2.10902" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 815.238206][ T40] audit: type=1400 audit(804.862:28466): avc: denied { create } for pid=4651 comm="syz.2.10902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 815.255787][ T40] audit: type=1400 audit(804.881:28467): avc: denied { unmount } for pid=3673 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 815.662665][ T4660] Malformed UNC in devname [ 815.662665][ T4660] [ 815.664957][ T4660] CIFS: VFS: Malformed UNC in devname [ 815.670601][ T5980] Bluetooth: to_multiplier 0 < 10 [ 815.676963][ T4661] __nla_validate_parse: 6 callbacks suppressed [ 815.676976][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10871'. [ 816.252591][ T40] audit: type=1400 audit(805.825:28468): avc: denied { allowed } for pid=4662 comm="syz.4.10906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 816.258640][ T40] audit: type=1400 audit(805.825:28469): avc: denied { create } for pid=4662 comm="syz.4.10906" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 816.265940][ T40] audit: type=1400 audit(805.825:28470): avc: denied { map } for pid=4662 comm="syz.4.10906" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=223780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 816.274273][ T40] audit: type=1400 audit(805.825:28471): avc: denied { read write } for pid=4662 comm="syz.4.10906" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=223780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 816.283183][ T40] audit: type=1400 audit(805.825:28472): avc: denied { execmem } for pid=4662 comm="syz.4.10906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 816.465383][ T5980] Bluetooth: hci0: command 0x0405 tx timeout [ 816.779377][ T7311] usblp 14-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 816.787836][ T4666] team0: Port device vlan0 removed [ 816.795432][ T4667] team0: Unable to change to the same mode the team is in [ 816.799614][ T7311] usb 14-1: USB disconnect, device number 11 [ 816.802012][ T4669] tipc: Enabling of bearer rejected, already enabled [ 816.810859][ T4668] team0: Port device vlan0 added [ 816.813955][ T7311] usblp0: removed [ 816.945176][ T4682] tipc: Enabling of bearer rejected, failed to enable media [ 816.986786][T14730] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.020546][ T4694] input: syz1 as /devices/virtual/input/input90 [ 817.037326][ T4702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.071652][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10920'. [ 817.185427][ T4715] team0: Port device vlan0 removed [ 817.195659][ T4715] team0: Unable to change to the same mode the team is in [ 817.200986][ T4715] team0: Port device vlan0 added [ 817.205687][ T4715] tipc: Enabling of bearer rejected, already enabled [ 817.280864][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10926'. [ 817.321869][ T4732] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10928'. [ 817.324879][ T4732] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10928'. [ 817.328607][ T4732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4732 comm=syz.2.10928 [ 817.328689][ T4735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10928'. [ 817.329860][ T4733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10928'. [ 817.332854][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10930'. [ 817.339186][ T4739] sctp: [Deprecated]: syz.7.10929 (pid 4739) Use of int in max_burst socket option. [ 817.339186][ T4739] Use struct sctp_assoc_value instead [ 817.369292][ T4742] bridge2: entered promiscuous mode [ 817.433952][ T4746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10933'. [ 817.440510][ T4746] IPv6: sit1: Disabled Multicast RS [ 817.442897][ T4746] sit1: entered allmulticast mode [ 817.524017][ T4751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10932'. [ 817.833623][ T5980] Bluetooth: hci3: command tx timeout [ 817.913133][ T4769] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 817.916940][ T4769] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 818.310200][ T4793] sch_fq: defrate 4294967295 ignored. [ 818.325780][ T4782] 9pnet_fd: Insufficient options for proto=fd [ 818.330382][ T4782] comedi comedi0: comedi_bond: 3:2 3:3 attached, 48 channels from 2 devices [ 818.509141][ T4812] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 818.663226][ T4823] sch_fq: defrate 4294967295 ignored. [ 818.675344][ T4823] 9pnet_fd: Insufficient options for proto=fd [ 818.696893][ T4827] ptrace attach of "/syz-executor exec"[31452] was attempted by "/syz-executor exec"[4827] [ 818.948350][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.024372][ T5980] Bluetooth: hci1: unexpected event for opcode 0xe32f [ 819.103557][ T4856] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.123698][ T4856] ipvlan0: entered promiscuous mode [ 819.128453][ T4856] bridge0: port 1(ipvlan0) entered blocking state [ 819.131461][ T4856] bridge0: port 1(ipvlan0) entered disabled state [ 819.134968][ T4856] ipvlan0: entered allmulticast mode [ 819.137369][ T4856] bridge0: entered allmulticast mode [ 819.143048][ T4856] ipvlan0: left allmulticast mode [ 819.145109][ T4856] bridge0: left allmulticast mode [ 819.179776][ T4858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4858 comm=syz.4.10971 [ 820.355830][ T4889] 9pnet_fd: Insufficient options for proto=fd [ 820.359724][ T4888] dvmrp1: entered allmulticast mode [ 820.470576][ T40] kauditd_printk_skb: 164 callbacks suppressed [ 820.470588][ T40] audit: type=1400 audit(809.763:28637): avc: denied { read } for pid=4896 comm="syz.4.10984" dev="nsfs" ino=4026533002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 820.480555][ T40] audit: type=1400 audit(809.763:28638): avc: denied { open } for pid=4896 comm="syz.4.10984" path="net:[4026533002]" dev="nsfs" ino=4026533002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 820.490600][ T40] audit: type=1400 audit(809.763:28639): avc: denied { getopt } for pid=4896 comm="syz.4.10984" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 820.504893][ T40] audit: type=1400 audit(809.792:28640): avc: denied { sys_module } for pid=4896 comm="syz.4.10984" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 820.531667][ T40] audit: type=1400 audit(809.829:28641): avc: denied { ioctl } for pid=4896 comm="syz.4.10984" path="socket:[223215]" dev="sockfs" ino=223215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 820.552923][ T40] audit: type=1400 audit(809.848:28642): avc: denied { read } for pid=4901 comm="syz.7.10985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.692774][ T40] audit: type=1400 audit(809.979:28643): avc: denied { mount } for pid=4901 comm="syz.7.10985" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 820.699828][ T40] audit: type=1400 audit(809.979:28644): avc: denied { remount } for pid=4901 comm="syz.7.10985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 820.703802][ T4911] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 820.706638][ T40] audit: type=1400 audit(809.979:28645): avc: denied { create } for pid=4910 comm="syz.2.10987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 820.720159][ T40] audit: type=1400 audit(809.979:28646): avc: denied { write } for pid=4910 comm="syz.2.10987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 820.862243][ T4928] xt_limit: Overflow, try lower: 271964/0 [ 820.896134][ T4931] binder: 4930:4931 ioctl c0306201 200000000080 returned -14 [ 821.011270][ T4942] lo speed is unknown, defaulting to 1000 [ 821.160325][ T4947] vivid-004: disconnect [ 821.219031][ T4946] vivid-004: reconnect [ 821.267219][ T4952] netem: incorrect ge model size [ 821.269184][ T4952] netem: change failed [ 821.478445][ T4963] program syz.4.11005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 821.559780][ T4971] __nla_validate_parse: 9 callbacks suppressed [ 821.559837][ T4971] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11007'. [ 821.632920][ T4978] bond1: entered promiscuous mode [ 821.643697][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11009'. [ 821.666474][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11010'. [ 821.762947][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11013'. [ 821.766821][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11013'. [ 821.819927][ T4995] netlink: 64 bytes leftover after parsing attributes in process `syz.7.11014'. [ 821.857492][ T5000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11016'. [ 821.943817][ T5008] ufs: You didn't specify the type of your ufs filesystem [ 821.943817][ T5008] [ 821.943817][ T5008] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 821.943817][ T5008] [ 821.943817][ T5008] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 821.960209][ T5008] ufs: ufstype=old is supported read-only [ 821.963181][ T5008] ufs: ufs_fill_super(): bad magic number [ 822.102696][ T5017] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11023'. [ 822.191012][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11026'. [ 822.194578][ T5030] 9pnet: Unknown protocol version 9p20\++} [ 822.217300][ T5032] netlink: 'syz.2.11027': attribute type 10 has an invalid length. [ 822.220102][ T5032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11027'. [ 822.347569][ T5050] binder: 5049:5050 ioctl 40044591 0 returned -22 [ 822.350029][ T5050] binder: 5049:5050 ioctl c0306201 200000000640 returned -22 [ 822.390342][ T5053] veth1_to_batadv: entered promiscuous mode [ 822.420436][ T5057] NILFS (nullb0): couldn't find nilfs on the device [ 822.455233][ T5065] netlink: 'syz.9.11040': attribute type 1 has an invalid length. [ 822.457821][ T5065] netlink: 'syz.9.11040': attribute type 2 has an invalid length. [ 822.469308][ T5065] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 822.471398][ T5065] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 822.475092][ T5065] vhci_hcd vhci_hcd.0: Device attached [ 822.478448][ T5066] vhci_hcd: connection closed [ 822.478764][T14730] vhci_hcd: stop threads [ 822.481778][T14730] vhci_hcd: release socket [ 822.483274][T14730] vhci_hcd: disconnect device [ 822.496995][ T5064] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.593730][ T5064] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.726646][ T5064] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.974869][T14751] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.989008][T14730] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.008217][T14730] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.046716][T14730] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.077774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 823.080851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 823.083616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 823.146832][ T7311] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 823.280722][ T5085] mac80211_hwsim hwsim315 wlan1: entered allmulticast mode [ 823.293040][ T5085] netlink: 'syz.9.11048': attribute type 10 has an invalid length. [ 823.295896][ T5085] mac80211_hwsim hwsim315 wlan1: left allmulticast mode [ 823.303044][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.306709][ T5085] wlan1: mtu less than device minimum [ 823.309561][ T5085] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 823.381965][ T7311] usb 9-1: Using ep0 maxpacket: 32 [ 823.385251][ T7311] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 823.391266][ T7311] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 823.394499][ T7311] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 823.397094][ T7311] usb 9-1: Product: syz [ 823.398501][ T7311] usb 9-1: Manufacturer: syz [ 823.400083][ T7311] usb 9-1: SerialNumber: syz [ 823.405792][ T7311] usb 9-1: config 0 descriptor?? [ 823.407938][ T5073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 823.412289][ T7311] hub 9-1:0.0: bad descriptor, ignoring hub [ 823.416559][ T7311] hub 9-1:0.0: probe with driver hub failed with error -5 [ 823.487895][ T5096] program syz.2.11053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.581996][ T5112] vimc link validate: Scaler:src:16x16 (0x33524742, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 823.924360][ T5145] openvswitch: netlink: VXLAN extension message has 10 unknown bytes. [ 824.588106][ T10] usb 9-1: USB disconnect, device number 11 [ 824.610524][ T5189] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 824.790559][ T5196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5196 comm=syz.9.11086 [ 825.179181][ T5208] dlm: non-version read from control device 0 [ 825.316722][ T5220] netlink: 'syz.9.11095': attribute type 10 has an invalid length. [ 825.319990][ T5220] openvswitch: netlink: Flow key attr not present in new flow. [ 825.394533][ T5223] macvlan0: entered allmulticast mode [ 825.396783][ T5223] veth1_vlan: entered allmulticast mode [ 825.473487][ T5230] 9pnet_virtio: no channels available for device syz [ 825.897988][ T40] kauditd_printk_skb: 267 callbacks suppressed [ 825.898001][ T40] audit: type=1400 audit(814.843:28914): avc: denied { read } for pid=5263 comm="syz.2.11110" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 825.907853][ T40] audit: type=1400 audit(814.843:28915): avc: denied { open } for pid=5263 comm="syz.2.11110" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 825.918434][ T40] audit: type=1400 audit(814.843:28916): avc: denied { ioctl } for pid=5263 comm="syz.2.11110" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 825.976597][ T40] audit: type=1400 audit(814.918:28917): avc: denied { create } for pid=5258 comm="syz.9.11109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 825.983861][ T40] audit: type=1400 audit(814.918:28918): avc: denied { bind } for pid=5258 comm="syz.9.11109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 825.989945][ T40] audit: type=1400 audit(814.918:28919): avc: denied { name_connect } for pid=5258 comm="syz.9.11109" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 826.069995][ T40] audit: type=1400 audit(815.002:28920): avc: denied { create } for pid=5270 comm="syz.2.11112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 826.102022][ T40] audit: type=1400 audit(815.039:28921): avc: denied { read write } for pid=5272 comm="syz.2.11113" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 826.112348][ T40] audit: type=1400 audit(815.039:28922): avc: denied { open } for pid=5272 comm="syz.2.11113" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 826.127425][ T40] audit: type=1400 audit(815.039:28923): avc: denied { ioctl } for pid=5272 comm="syz.2.11113" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 826.479114][ T5294] tmpfs: Unknown parameter 'uota' [ 826.479126][ T5295] tmpfs: Unknown parameter 'uota' [ 827.497365][ T5342] __nla_validate_parse: 15 callbacks suppressed [ 827.497384][ T5342] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.11133'. [ 827.504374][ T5342] netlink: zone id is out of range [ 827.506690][ T5342] netlink: get zone limit has 8 unknown bytes [ 827.540617][ T5342] lo speed is unknown, defaulting to 1000 [ 827.604288][ T5345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11134'. [ 827.809906][ T5353] team0: No ports can be present during mode change [ 827.882005][ T5357] netlink: 2252 bytes leftover after parsing attributes in process `syz.9.11139'. [ 827.909781][ T5361] binder: 5360:5361 unknown command 0 [ 827.914100][ T5361] binder: 5360:5361 ioctl c0306201 200000000080 returned -22 [ 828.172489][ T5383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=5383 comm=syz.4.11145 [ 828.298594][ T5399] overlayfs: overlapping lowerdir path [ 828.341773][ T5403] program syz.9.11151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 828.467447][ T5424] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 828.627015][ T5443] macvlan2: entered promiscuous mode [ 828.629345][ T5443] macvlan2: entered allmulticast mode [ 828.705960][T29758] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 828.726027][ T5454] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 828.865420][ T5470] 9pnet_virtio: no channels available for device syz [ 828.879116][T29758] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.883325][T29758] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.887159][T29758] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 828.891702][T29758] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.892616][ T5472] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11175'. [ 828.896091][T29758] usb 14-1: config 0 descriptor?? [ 828.903502][ T5472] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 829.025320][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11181'. [ 829.029951][ T5487] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11181'. [ 829.034833][ T5487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5487 comm=syz.7.11181 [ 829.246888][ T5493] syz.2.11182 (5493): drop_caches: 2 [ 829.343075][T29758] hid_parser_main: 73 callbacks suppressed [ 829.343089][T29758] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 829.356892][T29758] cm6533_jd 0003:0D8C:0022.0031: unknown main item tag 0x0 [ 829.363777][T29758] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0D8C:0022.0031/input/input91 [ 829.374670][T29758] cm6533_jd 0003:0D8C:0022.0031: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 829.470148][ T5526] netlink: 'syz.4.11192': attribute type 4 has an invalid length. [ 829.569786][T29758] usb 14-1: USB disconnect, device number 12 [ 829.603995][T11992] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 829.766503][T11992] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 829.769034][T11992] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 829.772069][T11992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 829.775999][T11992] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 829.778981][T11992] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 829.782074][T11992] usb 7-1: Product: syz [ 829.783613][T11992] usb 7-1: Manufacturer: syz [ 829.788038][T11992] usb 7-1: SerialNumber: syz [ 829.791746][T11992] usb 7-1: config 0 descriptor?? [ 829.795233][T11992] hub 7-1:0.0: bad descriptor, ignoring hub [ 829.797950][T11992] hub 7-1:0.0: probe with driver hub failed with error -5 [ 829.802395][T11992] usb 7-1: selecting invalid altsetting 0 [ 829.835688][ T5556] team0: Port device vlan0 removed [ 829.844326][T14746] tipc: Resetting bearer [ 829.851179][ T5556] team0: Unable to change to the same mode the team is in [ 829.858105][ T5556] team0: Port device vlan0 added [ 829.862805][ T5556] tipc: Enabling of bearer rejected, already enabled [ 829.965296][ T5559] lo speed is unknown, defaulting to 1000 [ 830.039465][ T5554] lo speed is unknown, defaulting to 1000 [ 830.462315][ T5528] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 830.619975][ T5528] usb 7-1: device descriptor read/64, error -71 [ 830.661277][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11212'. [ 830.825635][ T5596] hid-generic 0003:0627:0001.0001: pid 5596 passed too large report [ 830.876370][ T5528] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 831.025849][ T5528] usb 7-1: device descriptor read/64, error -71 [ 831.293278][ T5528] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 831.315086][ T5528] usb 7-1: device descriptor read/8, error -71 [ 831.399989][ T840] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 831.560432][ T840] usb 14-1: Using ep0 maxpacket: 16 [ 831.563537][ T840] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 831.569224][ T840] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 831.572891][ T840] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.576234][ T840] usb 14-1: Product: syz [ 831.578073][ T840] usb 14-1: Manufacturer: syz [ 831.579632][ T840] usb 14-1: SerialNumber: syz [ 831.582472][ T5528] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 831.584209][ T840] usb 14-1: config 0 descriptor?? [ 831.590284][ T840] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 831.593855][ T840] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 831.603939][ T5528] usb 7-1: device descriptor read/8, error -71 [ 831.695865][ T5619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=5619 comm=syz.7.11219 [ 831.703741][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11219'. [ 831.723955][T11992] usb 7-1: USB disconnect, device number 19 [ 831.736274][ T5621] fuse: Bad value for 'fd' [ 831.764893][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 831.764911][ T40] audit: type=1400 audit(820.333:29215): avc: denied { setopt } for pid=5622 comm="syz.7.11221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 831.765829][ T5623] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11221'. [ 831.781816][ T40] audit: type=1400 audit(820.343:29216): avc: denied { bind } for pid=5622 comm="syz.7.11221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 831.781825][ T5623] netlink: 'syz.7.11221': attribute type 1 has an invalid length. [ 831.808941][ T40] audit: type=1400 audit(820.380:29217): avc: denied { unmount } for pid=3177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 831.809660][ T5623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.820672][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11221'. [ 831.822761][ T40] audit: type=1400 audit(820.380:29218): avc: denied { unlink } for pid=3177 comm="syz-executor" name="file0" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 831.871942][ T40] audit: type=1400 audit(820.436:29219): avc: denied { allowed } for pid=5629 comm="syz.7.11223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 831.879316][ T40] audit: type=1400 audit(820.436:29220): avc: denied { create } for pid=5629 comm="syz.7.11223" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 831.886605][ T40] audit: type=1400 audit(820.436:29221): avc: denied { map } for pid=5629 comm="syz.7.11223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=229265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 831.897013][ T40] audit: type=1400 audit(820.436:29222): avc: denied { read write } for pid=5629 comm="syz.7.11223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=229265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 831.904099][T11992] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 831.906121][ T40] audit: type=1400 audit(820.455:29223): avc: denied { sys_module } for pid=5627 comm="syz.4.11222" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 831.938421][ T5630] team0: Port device vlan0 removed [ 831.949612][ T40] audit: type=1400 audit(820.502:29224): avc: denied { ioctl } for pid=5629 comm="syz.7.11223" path="socket:[229268]" dev="sockfs" ino=229268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 831.950002][T14739] tipc: Resetting bearer [ 831.961511][ T5630] team0: Unable to change to the same mode the team is in [ 831.968854][ T5630] team0: Port device vlan0 added [ 831.972120][ T5630] tipc: Enabling of bearer rejected, already enabled [ 832.025325][ T5639] batadv_slave_1: Device is already in use. [ 832.052208][T11992] usb 7-1: device descriptor read/64, error -71 [ 832.238467][ T840] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 832.319429][T11992] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 832.396523][ T5653] netlink: 'syz.4.11232': attribute type 10 has an invalid length. [ 832.409486][ T5653] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 832.469322][T11992] usb 7-1: device descriptor read/64, error -71 [ 832.599064][T11992] usb usb7-port1: attempt power cycle [ 832.685407][ T840] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 832.694952][ T840] em28xx 14-1:0.0: board has no eeprom [ 832.789834][ T840] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 832.792395][ T840] em28xx 14-1:0.0: dvb set to bulk mode. [ 832.794970][T14814] em28xx 14-1:0.0: Binding DVB extension [ 832.805484][ T840] usb 14-1: USB disconnect, device number 13 [ 832.807995][ T840] em28xx 14-1:0.0: Disconnecting em28xx [ 832.839880][T14814] em28xx 14-1:0.0: Registering input extension [ 832.842122][ T840] em28xx 14-1:0.0: Closing input extension [ 832.900641][ T840] em28xx 14-1:0.0: Freeing device [ 832.953517][ T5641] uprobe: syz.7.11227:5641 failed to unregister, leaking uprobe [ 833.113225][ T5704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5704 comm=syz.7.11249 [ 833.544381][ T5714] __nla_validate_parse: 5 callbacks suppressed [ 833.544393][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11252'. [ 834.891149][ T5720] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11255'. [ 834.925602][ T5722] syz_tun: entered allmulticast mode [ 834.933377][ T5722] tmpfs: Too few inodes for current use [ 834.987285][ T5732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=5732 comm=syz.7.11260 [ 834.995158][ T5721] syz_tun: left allmulticast mode [ 835.024779][ T5729] hid-generic 0003:0627:0001.0001: pid 5729 passed too large report [ 835.066975][ T5743] bond0: (slave bridge0): Releasing backup interface [ 835.083793][ T5743] team0: Port device vlan0 removed [ 835.096517][ T5743] team0: Unable to change to the same mode the team is in [ 835.104317][ T5747] pim6reg: entered allmulticast mode [ 835.110621][ T5743] team0: Port device vlan0 added [ 835.113923][ T5748] pim6reg: left allmulticast mode [ 835.140874][ T5743] tipc: Enabling of bearer rejected, already enabled [ 835.220506][ T5751] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11266'. [ 835.250179][ T5755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5755 comm=syz.7.11268 [ 835.255935][ T5755] netlink: 'syz.7.11268': attribute type 1 has an invalid length. [ 835.283955][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11269'. [ 835.286955][ T5755] bond3: (slave bridge2): making interface the new active one [ 835.289671][ T5755] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 835.295533][ T5755] overlayfs: failed to resolve './cgroup': -2 [ 835.298527][ T5755] overlayfs: failed to clone lowerpath [ 835.350563][ T5762] kvm: Disabled LAPIC found during irq injection [ 835.384827][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11274'. [ 835.466040][ T5779] 9pnet_fd: p9_fd_create_unix (5779): problem connecting socket: ./file0: -111 [ 835.523709][T11992] IPVS: starting estimator thread 0... [ 835.531825][ T5774] team0: Port device vlan0 removed [ 835.619378][ T5774] macvlan0 (unregistering): left promiscuous mode [ 835.623155][ T5784] IPVS: using max 23 ests per chain, 55200 per kthread [ 835.639300][T14746] tipc: Resetting bearer [ 835.916855][ T5788] tipc: Resetting bearer [ 835.933506][ T5788] team0: Unable to change to the same mode the team is in [ 835.938004][ T5788] tipc: Enabling of bearer rejected, already enabled [ 836.086318][ T5794] netlink: 76 bytes leftover after parsing attributes in process `syz.7.11282'. [ 836.115678][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11283'. [ 836.161872][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11285'. [ 836.164986][ T5801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 836.253323][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11288'. [ 836.311500][ T5814] nbd: must specify at least one socket [ 836.502119][ T5827] netlink: 'syz.9.11295': attribute type 11 has an invalid length. [ 836.635924][ T5836] tipc: Resetting bearer [ 836.657034][ T5836] team0: Unable to change to the same mode the team is in [ 836.660803][ T5836] tipc: Enabling of bearer rejected, already enabled [ 836.957137][ T5868] block nbd4: Attempted send on invalid socket [ 836.960146][ T5868] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.963265][ T5868] block nbd4: Attempted send on invalid socket [ 836.965218][ T5868] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 836.968137][ T5868] Mount JFS Failure: -5 [ 836.969527][ T5868] jfs_mount failed w/return code = -5 [ 837.430216][T14814] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 837.589914][T14814] usb 14-1: Using ep0 maxpacket: 8 [ 837.594031][T14814] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.597488][T14814] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.601118][T14814] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.604700][T14814] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.608823][T14814] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.611995][T14814] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.646263][ T5880] netdevsim netdevsim2: Firmware load for './file0/file1/../file0' refused, path contains '..' component [ 837.660528][ T5880] netdevsim netdevsim2: Firmware load for './file0/file1/../file0' refused, path contains '..' component [ 837.832013][T14814] usb 14-1: GET_CAPABILITIES returned 0 [ 837.833920][T14814] usbtmc 14-1:16.0: can't read capabilities [ 837.932878][ T40] kauditd_printk_skb: 216 callbacks suppressed [ 837.932890][ T40] audit: type=1400 audit(826.105:29441): avc: denied { name_bind } for pid=5889 comm="syz.4.11319" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 837.941495][ T40] audit: type=1400 audit(826.105:29442): avc: denied { node_bind } for pid=5889 comm="syz.4.11319" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 837.992280][ T40] audit: type=1400 audit(826.152:29443): avc: denied { bpf } for pid=5889 comm="syz.4.11319" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.999924][ T40] audit: type=1400 audit(826.152:29444): avc: denied { prog_load } for pid=5889 comm="syz.4.11319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 838.007427][ T40] audit: type=1400 audit(826.152:29445): avc: denied { perfmon } for pid=5889 comm="syz.4.11319" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 838.020109][ T40] audit: type=1400 audit(826.189:29446): avc: denied { read write } for pid=5894 comm="syz.2.11320" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 838.028665][ T40] audit: type=1400 audit(826.189:29447): avc: denied { open } for pid=5894 comm="syz.2.11320" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 838.037768][ T40] audit: type=1400 audit(826.189:29448): avc: denied { ioctl } for pid=5894 comm="syz.2.11320" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 838.049062][ T40] audit: type=1400 audit(826.217:29449): avc: denied { write } for pid=5876 comm="syz.9.11315" name="usbtmc0" dev="devtmpfs" ino=4439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 838.050959][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.062407][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.065475][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.068450][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.071404][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.074374][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.077376][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.080337][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.083419][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.089158][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.092492][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.095342][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.098550][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.101387][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.104225][ C0] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.104259][ T5878] netlink: 52 bytes leftover after parsing attributes in process `syz.9.11315'. [ 838.108136][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.112578][ T40] audit: type=1400 audit(826.264:29450): avc: denied { read } for pid=5876 comm="syz.9.11315" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 838.114142][ C1] usbtmc 14-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 838.115418][ T5877] hid-generic 0003:0627:0001.0001: pid 5877 passed too large report [ 838.130415][ T6037] usb 14-1: USB disconnect, device number 14 [ 838.401769][ T5910] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 838.408661][ T5910] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 838.738386][ T5916] netlink: 'syz.2.11326': attribute type 1 has an invalid length. [ 838.759030][ T5916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.764341][ T5916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5916 comm=syz.2.11326 [ 838.778470][ T5921] i2c i2c-1: Invalid block write size 34 [ 838.948639][ T5932] sp0: Synchronizing with TNC [ 839.218757][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11337'. [ 839.221603][ T5945] netlink: 'syz.4.11337': attribute type 30 has an invalid length. [ 839.224096][ T5945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11337'. [ 839.252112][ T5947] netlink: 'syz.9.11338': attribute type 1 has an invalid length. [ 839.259451][ T5947] ip6gretap1: entered promiscuous mode [ 839.259465][ T5951] netlink: 'syz.4.11339': attribute type 1 has an invalid length. [ 839.261458][ T5947] ip6gretap1: entered allmulticast mode [ 839.265993][ T5951] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 839.301209][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11340'. [ 839.308425][ T5957] team0: invalid flags given to default FDB implementation [ 839.313180][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11340'. [ 839.328596][ T5960] Invalid source name [ 839.329940][ T5960] UBIFS error (pid: 5960): cannot open "/dev/sg0", error -22 [ 839.351606][ T5965] netlink: 10 bytes leftover after parsing attributes in process `syz.4.11343'. [ 839.561707][ T5996] sock: sock_set_timeout: `syz.4.11351' (pid 5996) tries to set negative timeout [ 839.637038][ T6011] team0: Device vlan2 is already an upper device of the team interface [ 839.646835][ T6013] pimreg: entered allmulticast mode [ 839.823948][ T6039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=6039 comm=syz.7.11359 [ 839.870027][ T6041] team0: Port device vlan0 removed [ 839.878879][ T6041] team0: Unable to change to the same mode the team is in [ 839.883498][ T6041] team0: Port device vlan0 added [ 839.885899][ T6041] tipc: Enabling of bearer rejected, already enabled [ 840.068061][ T6073] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 840.070762][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 840.075373][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 840.273991][T12015] vhci_hcd: vhci_device speed not set [ 840.338373][T29758] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 840.347951][T12015] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 840.446914][ T3531] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 840.450677][ T3531] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 840.453302][ T3531] CPU: 2 UID: 0 PID: 3531 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 840.457993][ T3531] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 840.461325][ T3531] RIP: 0010:klist_put+0x4d/0x1b0 [ 840.462910][ T3531] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 840.468851][ T3531] RSP: 0000:ffffc90007e2f9b0 EFLAGS: 00010202 [ 840.470752][ T3531] RAX: dffffc0000000000 RBX: ffff8880551e9060 RCX: ffffffff8261027d [ 840.473194][ T3531] RDX: 000000000000000b RSI: ffffffff8b892035 RDI: 0000000000000058 [ 840.475576][ T3531] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 840.477991][ T3531] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 840.480380][ T3531] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 840.482800][ T3531] FS: 0000000000000000(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 840.485533][ T3531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.487543][ T3531] CR2: 00007f0621a3b000 CR3: 000000000e380000 CR4: 0000000000352ef0 [ 840.489934][ T3531] Call Trace: [ 840.490939][ T3531] [ 840.491886][ T3531] device_del+0x1d8/0x9f0 [ 840.493247][ T3531] ? __pfx_device_del+0x10/0x10 [ 840.494747][ T3531] ? netdev_unregister_kobject+0x2da/0x540 [ 840.496547][ T3531] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 840.498632][ T3531] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 840.500730][ T3531] ? __pfx___mutex_lock+0x10/0x10 [ 840.502380][ T3531] unregister_netdevice_queue+0x305/0x3f0 [ 840.504171][ T3531] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 840.506128][ T3531] ? rtnl_net_dev_lock+0x28/0x360 [ 840.507701][ T3531] ? rtnl_net_dev_lock+0x146/0x360 [ 840.509354][ T3531] ? rtnl_lock+0x9/0x20 [ 840.510671][ T3531] ? rtnl_net_dev_lock+0x146/0x360 [ 840.512311][ T3531] unregister_netdev+0x1f/0x60 [ 840.513844][ T3531] bnep_session+0x224e/0x2d80 [ 840.515335][ T3531] ? __pfx_bnep_session+0x10/0x10 [ 840.516930][ T3531] ? do_raw_spin_lock+0x12c/0x2b0 [ 840.518533][ T3531] ? __pfx_woken_wake_function+0x10/0x10 [ 840.520274][ T3531] ? rcu_is_watching+0x12/0xc0 [ 840.521777][ T3531] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 840.523435][ T3531] ? lockdep_hardirqs_on+0x7c/0x110 [ 840.525077][ T3531] ? __kthread_parkme+0x19e/0x250 [ 840.526667][ T3531] ? __pfx_bnep_session+0x10/0x10 [ 840.528232][ T3531] kthread+0x3c5/0x780 [ 840.529513][ T3531] ? __pfx_kthread+0x10/0x10 [ 840.530912][ T3531] ? rcu_is_watching+0x12/0xc0 [ 840.532389][ T3531] ? __pfx_kthread+0x10/0x10 [ 840.533768][ T3531] ret_from_fork+0x5d7/0x6f0 [ 840.535196][ T3531] ? __pfx_kthread+0x10/0x10 [ 840.536707][ T3531] ret_from_fork_asm+0x1a/0x30 [ 840.538247][ T3531] [ 840.539212][ T3531] Modules linked in: [ 840.541016][ T3531] ---[ end trace 0000000000000000 ]--- [ 840.542895][ T3531] RIP: 0010:klist_put+0x4d/0x1b0 [ 840.544631][ T3531] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc 3e 0d [ 840.550960][ T3531] RSP: 0000:ffffc90007e2f9b0 EFLAGS: 00010202 [ 840.553159][ T3531] RAX: dffffc0000000000 RBX: ffff8880551e9060 RCX: ffffffff8261027d [ 840.555749][ T3531] RDX: 000000000000000b RSI: ffffffff8b892035 RDI: 0000000000000058 [ 840.558507][ T3531] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 840.561138][ T3531] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 840.563892][ T3531] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 840.566469][ T3531] FS: 0000000000000000(0000) GS:ffff8880d68b9000(0000) knlGS:0000000000000000 [ 840.569332][ T3531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.571502][ T3531] CR2: 00007f0621a3b000 CR3: 000000000e380000 CR4: 0000000000352ef0 [ 840.574452][ T3531] Kernel panic - not syncing: Fatal exception [ 840.577195][ T3531] Kernel Offset: disabled [ 840.578602][ T3531] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:46:27 Registers: info registers vcpu 0 CPU#0 RAX=00000000004bbcac RBX=0000000000000000 RCX=ffffffff8b93bc29 RDX=ffffed100d486656 RSI=ffffffff8c162880 RDI=ffffffff81913331 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab4c90 R15=0000000000000000 RIP=ffffffff8b93a78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563b7b370000 CR3=00000000304d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000010000000 Opmask02=0000000003ffffff Opmask03=0000000082000020 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46fc05bc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f491d3f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f491d3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326b71ccc9483 737326b240a9e359 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f120e4c1ca4f671 737373762f358f7a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78742f736575 6575712f3070656e 622f74656e2f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c617d3f6fd78502 000055c13386531b 00000000000000c1 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c617d3f6fd78502 000055c13386b91e 0000000000000221 0031397475706e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806a53b540 RCX=ffffffff81afa3c3 RDX=ffff88801de8c880 RSI=ffffffff81afa39d RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9816 R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4a76a9 RIP=ffffffff81afa3a9 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563cf07017a0 CR3=00000000304d2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc0d0 Opmask01=00000000fbfe0000 Opmask02=0000000003ffffff Opmask03=0000000082000020 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46fc05bc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f491d3f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f491d3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326b71ccc9483 737326b240a9e359 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f120e4c1ca4f671 737373762f358f7a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030323a33696368 2f336963682f6874 6f6f7465756c622f 6c6175747269762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c617d3f6fd78502 000055c13386531b 00000000000000c1 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c617d3f6fd78502 000055c13386b91e 0000000000000221 0031397475706e69 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3139312c3039312c 4638312c4538312c 4238312c3938312c 3838312c3538312c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3438312c3138312c 3937312c3737312c 3437312c4436312c 4336312c3636312c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643cf5 RDI=ffffffff9b1110a0 RBP=ffffffff9b111060 RSP=ffffc90007e2f320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=000000000000006e R14=ffffffff9b111060 R15=ffffffff85643c90 RIP=ffffffff85643d1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0621a3b000 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ff000000 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=049b92202df6c306 56a9cdb3344adacb 049b92202df6c306 56a9cdb3344adacb 049b92202df6c306 56a9cdb3344adacb 049b92202df6c306 56a9cdb3344adacb ZMM18=43e2e8cc464805a3 edd123008efa06c5 43e2e8cc464805a3 edd123008efa06c5 43e2e8cc464805a3 edd123008efa06c5 43e2e8cc464805a3 edd123008efa06c5 ZMM19=603b000000000000 0000000000000004 603b000000000000 0000000000000003 603b000000000000 0000000000000002 603b000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2a212d88eb1d936 7d6aba3f00000000 0000009500000000 000000b7000000d0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008500000000 000012bd00000003 000002b7fffffff8 0000010700000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000a1bf2100200c fff80a62468c0801 9b8003019b800402 9003100800028803 ZMM24=e2303a7de2303a7d e2303a7de2303a7d e2303a7de2303a7d e2303a7de2303a7d e2303a7de2303a7d e2303a7de2303a7d e2303a7de2303a7d e2303a7de2303a7d ZMM25=518169f5518169f5 518169f5518169f5 518169f5518169f5 518169f5518169f5 518169f5518169f5 518169f5518169f5 518169f5518169f5 518169f5518169f5 ZMM26=76ceca7276ceca72 76ceca7276ceca72 76ceca7276ceca72 76ceca7276ceca72 76ceca7276ceca72 76ceca7276ceca72 76ceca7276ceca72 76ceca7276ceca72 ZMM27=0fc658530fc65853 0fc658530fc65853 0fc658530fc65853 0fc658530fc65853 0fc658530fc65853 0fc658530fc65853 0fc658530fc65853 0fc658530fc65853 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=bf320000bf320000 bf320000bf320000 bf320000bf320000 bf320000bf320000 bf320000bf320000 bf320000bf320000 bf320000bf320000 bf320000bf320000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88805557fc78 RCX=ffffffff8198110c RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc9000767f5b8 RBP=1ffff92000ecfeb3 RSP=ffffc9000767f590 R8 =0000000000000001 R9 =fffff52000ecfeb7 R10=0000000000000003 R11=0000000000000001 R12=ffff88805557fc80 R13=ffff88805557fc88 R14=ffff88805557fc78 R15=ffff888057820d80 RIP=ffffffff8198111d RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f941ca50148 CR3=0000000054f83000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=000000000101003f Opmask03=0000000020400004 Opmask04=00000000ffdfffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46fc0d900 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f491d3f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f491d3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326b71ccc9483 737326b240a9e359 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f120e4c1ca4f671 737373762f358f7a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78742f736575 6575712f3070656e 622f74656e2f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46fc25af0 000055c46fbfb480 000055c46fc0be70 000055c46fdf13b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46fc048d0 000055c46fc0b6f0 000055c46fbfab10 000055c46fc20f40 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46f9c64b0 000055c46fbfcf60 000055c46fc0a9f0 000055c46f9c43b0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c46fbfba60 000055c46fc08fc0 000055c46fbff9c0 000055c46fc187b0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000