last executing test programs: 9m37.972358926s ago: executing program 1 (id=338): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) 9m37.902744462s ago: executing program 1 (id=339): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x3, 0x29, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x24, 0x31, 0x0, 0x5, [0x5, 0x6, 0x7fc, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0xd, [{@empty, 0x9}, {@loopback}]}, @end, @generic={0x89, 0xc, "dae4367bab72b4785c7d"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x3, 0x29, 0x0, @multicast1, @private=0xa010101, {[@timestamp={0x44, 0x24, 0x31, 0x0, 0x5, [0x5, 0x6, 0x7fc, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0xd, [{@empty, 0x9}, {@loopback}]}, @end, @generic={0x89, 0xc, "dae4367bab72b4785c7d"}]}}}}}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) (async) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) close(0x3) (async) close(0x3) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8e280, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000080)=0x7) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e21, 0x7, @remote, 0x9}}, [0x100, 0x2, 0x4, 0x8, 0x5, 0x8, 0x2748, 0x9, 0x0, 0xc97d, 0x1, 0x3, 0x5, 0x4, 0x8]}, &(0x7f00000003c0)=0x100) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f00000001c0)) (async) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f00000001c0)) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="34c004e395fbc5f3004700", @ANYRES16=r8, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000480)={'HL\x00'}, &(0x7f00000004c0)=0x1e) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) write$binfmt_misc(r0, 0x0, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$CDROMVOLCTRL(r10, 0x5392, &(0x7f0000000040)={0x8, 0x10, 0x2, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) mprotect(&(0x7f0000635000/0x2000)=nil, 0x2000, 0x2) 9m36.826850538s ago: executing program 1 (id=355): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000200)={0xa0, &(0x7f0000000100)="feed3831926516daafea7167520590e8950a7aa3bd5b53efb659663a1e1a495fa9014b48b1f4917f442431a389cd0da3df47eaa070dd83f3975b0ba2059ab1555c6138b6388779db8a2af8c858157cb7905db0fec139481058da323146d8b1d8243c3d44ff9578ab24929c6c7c58de7dfd32ecddfcf89c4106f93a661c362fb749ae0997d3e19b0cd64201009ad8e9be421321ae48b274851d6271db256a77c9"}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000b63000/0x1000)=nil, 0x800000, 0x1}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720af0fff8ffffff71a4f0ff0000000061100000000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 9m36.760707315s ago: executing program 1 (id=358): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x240, 0x258, 0x258, 0x240, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xb61af0b0d84fc9f1}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 'veth1_to_batadv\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 9m36.759003799s ago: executing program 1 (id=360): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x108, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x808}, 0x8010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r1, &(0x7f0000000300)) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) 9m36.672949102s ago: executing program 1 (id=361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001040000000000000080080001000000000008000200ac14143e080007400000000008000840000000000800154000000000"], 0x74}}, 0x0) 9m28.024145466s ago: executing program 32 (id=464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtclass={0x48, 0x28, 0xc, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x9, 0x2}, {0x10}, {0x0, 0xfff2}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xf8, 0xc4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9m21.664425083s ago: executing program 33 (id=361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001040000000000000080080001000000000008000200ac14143e080007400000000008000840000000000800154000000000"], 0x74}}, 0x0) 9m5.632456967s ago: executing program 5 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x0, 0x0, 0x8000}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x305082, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000400)={0x1, 0x5}, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xcb0a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m5.569171183s ago: executing program 5 (id=764): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4, 0x0) ioctl$CDROMSTART(r0, 0x5308) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x20400) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xfffffffc, 0x4, 0x6}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="00000001", @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf25250000000a0001007770616e3100000005002a0010000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24040000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250601f2800c0002000700000000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = io_uring_setup(0x25b4, &(0x7f00000002c0)={0x0, 0x1670, 0x400, 0x2, 0x3d3}) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) ftruncate(r7, 0x51a9497) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002020000102505a1a440000102030109025c"], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f0000000b40)=@physical={0x0, 0x2, [{0xb, 0x1, 0x2, 0x0, 0x9, 0x0, 0x2, 0x3, 0xb, 0x0, 0x806, 0x1c0, 0xfffffffd}, {0x1, 0xc, 0xd, 0x8, 0x7, 0x1, 0x2, 0x0, 0x7, 0x0, 0x9, 0x9, 0x6}, {0x0, 0x7, 0x9, 0x0, 0x8, 0x1, 0x2, 0x3, 0x4, 0x1, 0x4, 0x10, 0x2}, {0x4, 0x1, 0x4, 0x3, 0xf, 0x1, 0x2, 0x0, 0xc, 0x0, 0x9, 0xc, 0xf}]}) 9m4.064286346s ago: executing program 5 (id=776): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 9m4.061975359s ago: executing program 5 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000400)={0x0, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000400)={0x0, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) (async) 9m4.010518485s ago: executing program 5 (id=780): r0 = socket$nl_generic(0x11, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000004400000000000800450014142fffffffff117c90787f00000100"/42], 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xf}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x100) (async) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0xec, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0xd8, 0xce, 0x0, 0x1, [@typed={0x14, 0x35, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x37}}, @nested={0xb7, 0x12c, 0x0, 0x1, [@generic="0a004069be4cded5b42e230f983446085988aa8c7bab65ad21bc0fdc4c61674b9677c5ed17b016b341cb65c975929505c78b0c815abe075ec2f8a72481e5491a44d18ad82ae082ccb20efe40adbba74b123c9e2bcc5f6472ec01868aa9d6bb1793f59bcf15fd4184180c1a5bf4d9f024dea73a878cffb85cd94e09a78c15b4c776d7503449cab12c45f72fd5ea3c35f5d67c27c72fd4d54b23a890e85cdd6d92d084a0aecda32f344ea9bf0371256cdbfd228d"]}, @typed={0x8, 0x45, 0x0, 0x0, @pid=r3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40009}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r4, 0x93a790046c4f56b2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1437d42f39ef"}, @NL80211_ATTR_PMKID={0x14, 0x55, "8d2d186120a68fb587363a7887ef1b7b"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 9m3.950386782s ago: executing program 5 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x4) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x8000}, &(0x7f0000000100)=0xffffffffffffff9d) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000380)={0x4, 0xfffffffffffffffa, 0x3, 0x0, 0x0, [{{r1}, 0x3324}, {{r3}, 0xffffffffffffffff}, {{r0}, 0x6}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xbfa}) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) accept4$rose(r1, &(0x7f0000000240)=@short={0xb, @dev, @null, 0x1, @rose}, &(0x7f0000000280)=0x1c, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) lseek(r1, 0x1, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) 8m48.854639022s ago: executing program 34 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x4) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x8000}, &(0x7f0000000100)=0xffffffffffffff9d) (async) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000380)={0x4, 0xfffffffffffffffa, 0x3, 0x0, 0x0, [{{r1}, 0x3324}, {{r3}, 0xffffffffffffffff}, {{r0}, 0x6}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000000c0)={0x0, 'batadv_slave_1\x00', {0x4}, 0xbfa}) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) accept4$rose(r1, &(0x7f0000000240)=@short={0xb, @dev, @null, 0x1, @rose}, &(0x7f0000000280)=0x1c, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) lseek(r1, 0x1, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) 7m49.710333771s ago: executing program 4 (id=1507): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xf}, {0x7, 0xffe6}, {0x10, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r4 = dup2(r1, r0) close_range(r4, 0xffffffffffffffff, 0x0) 7m49.709833349s ago: executing program 4 (id=1509): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1159e4047a6348de, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb0000fffe000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400200000000000fdffffffffffffff00000000000000000000000000000000022000000000000000000000000000000000004b45b675000000000000000000000000000000002000000000000000000000feffffff000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x108) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m48.711534689s ago: executing program 4 (id=1517): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) write$rfkill(r0, &(0x7f0000000640)={0x401, 0x0, 0x2, 0x0, 0x1}, 0x8) 7m48.631568514s ago: executing program 4 (id=1520): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065"], 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) 7m48.631396639s ago: executing program 4 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 7m48.292013408s ago: executing program 4 (id=1522): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xfffffffffffffffe]}, 0x8, 0x80800) 7m48.203665489s ago: executing program 35 (id=1522): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xfffffffffffffffe]}, 0x8, 0x80800) 3m38.517904616s ago: executing program 2 (id=4344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010003000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 3m38.398955443s ago: executing program 2 (id=4345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x0, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) 3m38.359149584s ago: executing program 2 (id=4346): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 3m38.228512953s ago: executing program 2 (id=4347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 3m38.0076529s ago: executing program 2 (id=4349): io_setup(0x0, 0xffffffffffffffff) io_setup(0xb, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'caif0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef) 3m37.793734679s ago: executing program 2 (id=4354): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 3m22.33938658s ago: executing program 36 (id=4354): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 1m13.54705294s ago: executing program 6 (id=6312): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) 1m13.545084248s ago: executing program 6 (id=6314): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m13.177749618s ago: executing program 6 (id=6323): mkdir(&(0x7f0000000400)='./bus\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000c00)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455cc, 0x20000000008) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r2 = getpgrp(0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) faccessat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a) ioprio_set$pid(0x2, r2, 0x4000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10080b0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') 1m13.177350237s ago: executing program 6 (id=6325): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f0000000f80)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001180)={&(0x7f0000000240)={0x50, 0x0, 0xf6f5, {0x7, 0x2b, 0x1, 0x4000, 0x6, 0x4, 0x7, 0x1, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0xffffffffffffffda, 0x2, {0x0, 0x2}}, &(0x7f00000005c0)={0x78, 0xffffffffffffffda, 0x10, {0x7, 0x0, 0x0, {0x1, 0x1, 0x8a, 0x4294625a, 0x7, 0x2, 0x6, 0xed3, 0x0, 0xc000, 0x2, 0x0, 0x0, 0x1, 0x5}}}, &(0x7f0000000780)={0x90, 0xfffffffffffffffe, 0x8, {0x4, 0x1, 0xffffffff, 0x8, 0xc68, 0x8, {0x6, 0x6, 0x100, 0x80000000, 0x6, 0x3, 0x80000001, 0xf3, 0x1, 0x2000, 0xcdc, 0x0, 0x0, 0x6, 0x2}}}, &(0x7f0000000840)={0xd0, 0xfffffffffffffffe, 0x8, [{0x0, 0x1, 0x7, 0x9, '*^\'.^.{'}, {0x5, 0xfffffffffffffffd, 0x2, 0x2, 'fd'}, {0x5, 0xfff, 0x8, 0x3, 'group_id'}, {0x6, 0x5, 0x6, 0xffffffff, '!).]\x89\xec'}, {0x1, 0x77, 0x5, 0x3ac1, 'fuse\x00'}, {0x0, 0x5f, 0x8, 0xc0b, 'rootmode'}]}, &(0x7f0000000b40)={0x150, 0x0, 0x9, [{{0x0, 0x1, 0x1, 0x6, 0x5, 0xfffffffe, {0x3, 0x6, 0x1000, 0xb1bd, 0xec, 0x4, 0x400, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10}}, {0x5, 0x0, 0x2, 0x5, '$!'}}, {{0x1, 0x0, 0x1000, 0x3, 0x1, 0x4, {0x1, 0x9, 0x6f6, 0xfc, 0x7, 0x3, 0x2, 0x6, 0x1, 0x2000, 0x8000, 0x0, 0x0, 0x6, 0x2}}, {0x3, 0x8a, 0x1, 0x5, '\x00'}}]}, &(0x7f0000000e80)={0xa0, 0xfffffffffffffff5, 0x8, {{0x4, 0x3, 0x4, 0x8000000000000000, 0x0, 0x4, {0x0, 0xfffffffffffffffe, 0xff, 0x9, 0x7fffffff, 0x3, 0x1ff, 0x4, 0x81, 0x2000, 0x8001, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x4}}}, &(0x7f0000000f40)={0x20, 0xfffffffffffffffe, 0x9, {0x9c1, 0x4, 0x7fff, 0x7f1}}, &(0x7f0000001040)={0x130, 0x0, 0xfffffffffffffff7, {0x1b, 0x7ff, 0x0, '\x00', {0x200, 0x4, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x6000, '\x00', 0x2, 0x3, 0x3, 0x2, {0x40, 0x6}, {0x7, 0x7fffffff}, {0x433, 0x5}, {0x0, 0x4}, 0xaa62, 0x6, 0x80000001, 0x81}}}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r1, &(0x7f0000000080)=@xfs_parent={0x1c, 0x82, {0x40, 0xb, 0x3, 0x7}}, 0x8082) 1m12.27777545s ago: executing program 6 (id=6334): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, r3}, 0xc) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x8000, 0x14c0348, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r5, 0x80140912, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m12.27734826s ago: executing program 6 (id=6335): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "45448c13"}, @global=@item_012={0x1, 0x1, 0x4, '`'}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r2, 0x0, r1, &(0x7f0000000300)=0x87ffffe, 0x6, 0x7) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000140)=[0x9, 0x5]) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_ERR_DATA_REPORTING={{0x8}, 0xf}}}, 0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x845) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x218001, 0x1b6, 0x19}, 0x18) readlinkat(r6, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)=""/10, 0xa) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 56.994098583s ago: executing program 37 (id=6335): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "45448c13"}, @global=@item_012={0x1, 0x1, 0x4, '`'}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) (async) splice(r2, 0x0, r1, &(0x7f0000000300)=0x87ffffe, 0x6, 0x7) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000140)=[0x9, 0x5]) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_DEF_ERR_DATA_REPORTING={{0x8}, 0xf}}}, 0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x845) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x218001, 0x1b6, 0x19}, 0x18) readlinkat(r6, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)=""/10, 0xa) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1}, 0x6e) 50.235128731s ago: executing program 3 (id=6561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010010dbdf250300000008"], 0x1c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4088800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x13}, 0x48) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x119, 0x1b, 0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x0, 0xfffffff7, 0x1, {0x0, @sdr={0x33363248, 0xfffffff7}}, 0x3}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @private, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x4, 0x1, 0x2}}, 0x1c}}, 0x8880) 50.167816966s ago: executing program 3 (id=6562): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) recvmmsg(r0, &(0x7f000000b900)=[{{0x0, 0x0, 0x0, 0x27}, 0x7}], 0x1, 0x8140, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x114}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x180, 0x111000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x40816) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) 47.107574173s ago: executing program 3 (id=6575): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "d0913096152f5ce0b93c6517428ad50d2f6b54ed39d054bec9cf9e83b5cd52de", "4232154ae74b33fb0bdc18f4adfe4d645be0119886724721f7c1fb5a266b2e23", "bd3269486684774235e4ecc689af4579a64d81140a17da9c4ce0eaf50dcef5c5", "7c0c28c1506ca435efa044f4645ecd20db8cb50cf69e2dedac905fe88b23a859", "dc146c13a1a05d946b5890de5baf53d02d2c3bfa4316aacb7173032105601dfa", "dd82f9f2320c7eef72b33019", 0xfffffffa, 0x8001, 0x10, 0x9, 0x7f}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000140)={r3, r4, 0x2, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000007c0), 0x0, 0x2, 0x0, 0x0, r2}) socketpair(0x22, 0x2, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x64, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40890}, 0x4040000) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001400)={0x3eb, 0xff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 46.858149916s ago: executing program 3 (id=6579): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x87d92000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) 45.637624998s ago: executing program 3 (id=6596): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) (async) rmdir(&(0x7f0000000000)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={0x20881, 0x10, 0x12}, 0x18) getdents(r0, &(0x7f0000000580)=""/209, 0xd1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) socket$netlink(0x10, 0x3, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x87382, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000440)={0x9, 0xe, 0xe, 0x4, 0x5, "45f741bc0552c381752b6133484d24cab3ee28"}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1f8, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2, 0x24}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x68e], 0x3}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x376a, 0xdf8, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000480), 0x6) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x84}}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000004c0)=0x5) 45.58626909s ago: executing program 3 (id=6599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000050000007d01ff020000000000000000000000000001000088be"], 0xfdef) 30.418269449s ago: executing program 38 (id=6599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000050000007d01ff020000000000000000000000000001000088be"], 0xfdef) 3.34565589s ago: executing program 9 (id=7048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r0, 0x0, 0x6}, 0x18) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'dt2814\x00', [0x6f04, 0x80008000, 0x9, 0x2, 0x1000000, 0x1f, 0x7, 0x3, 0x1, 0xe, 0x7, 0x1, 0x1004, 0x28000000, 0xeb0, 0xa, 0xfdffffa7, 0x40000009, 0x400006, 0x4, 0x5, 0x10000, 0x8382, 0xe2df, 0x2, 0xa6, 0x1, 0x3, 0x7, 0x5, 0x2]}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440)=r4, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0xc004) 2.370707253s ago: executing program 7 (id=7066): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r0, &(0x7f00000002c0)=""/238, 0xee) 2.250085294s ago: executing program 7 (id=7069): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_subtree(r0, 0x0, 0x9) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8010aebb, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=@flushpolicy={0x2fc, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0x3}, @algo_comp={0x147, 0x3, {{'lzjh\x00'}, 0x7f8, "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"}}, @tmpl={0x184, 0x5, [{{@in=@private=0xa010101, 0x4d3, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3507, 0x2, 0x2, 0x81, 0x101, 0xd, 0x7}, {{@in=@remote, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3502, 0x2, 0x1, 0x28, 0x0, 0x4f0, 0x3}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0x2, @in6=@private2, 0x0, 0x2, 0x0, 0x5, 0x3}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0xa, @in=@remote, 0x3500, 0x3, 0x0, 0x8, 0x5, 0x5, 0x3ff}, {{@in6=@loopback, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x3503, 0x1, 0x1, 0x2, 0xfffffff7, 0x18, 0x100}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x32}, 0xa, @in=@broadcast, 0x3504, 0x3, 0x0, 0x4, 0x0, 0x2ce, 0x4}]}, @etimer_thresh={0x8, 0xc, 0xfffffffa}]}, 0x2fc}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.095214646s ago: executing program 7 (id=7073): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001900010929bd70008000000002181000000097826a196fd737fd010000080005000a0101021800168014000308fc0000000000000000000800000400000663a59b2130a3590ea13248747bc8b561cfb192d9be79e68bc5dd3bfb3af7ae48e071bf880adc047733e7298d5dc00c20023aa4f39141c1ddf688e8d9c4aca7ed823cde899003bdf024741d815d1d3ff3c9e5dbcb1594418c86b2b1213257639d42e01902c72dd8b6cc6a9b34274d910664c2ce09bda17a0285281aeb0d1dc63d83255b4bc5da0c7f6503981d671e0a89a2cde62a7c1abb115b9cd0fbc519d28e5d9cd3"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mremap(&(0x7f0000260000/0x1000)=nil, 0x1000, 0x13000, 0x3, &(0x7f000007e000/0x13000)=nil) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r4 = gettid() r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000240)={[0x7ff]}, 0x8) chmod(&(0x7f0000000040)='./file0\x00', 0xc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000)) 1.737275977s ago: executing program 9 (id=7082): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="00000086ddffff00000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 1.65407047s ago: executing program 9 (id=7084): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_team\x00', 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfd, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(0xffffffffffffffff, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES16=r4], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000040850000007a000080000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x25, 0x1, @thr={&(0x7f0000000140)="d52b238cff30f491ec7443cf635901cc2093dce7457e3a3b5b8c12fc9f7c2766421bc7e340078fa88c4ceaf4085c6e9d35a4ff83eac9e165dcacd5ac44fdedc7bfb3ba6dde02a761", &(0x7f00000003c0)="020d2fdbaaf3e70df7a58dd8f36d7d1c02a82b9dbde26d12b930135dd47ce4a9c7722297dc71d5c2af80210dd17525c4ad5ca6f8b8fc643c05638539688422561b59624bbb1ea10b482c67cf735802524ed2511c9e4cd66a3e5df60eb4244253fec080d8e771a1603a9465e4536cce72cd717137ada54836c4039e5c3ab773fe8169ff99091ba51302697efb5b18daf0109d59762ef42d793ac0c464eed24ebc016f419588185857400557f41d088a3c55036d35b6194aa9dfaf79db19172b8e99f78feaa5d36f0a48074ddd69217577657aa4de03f2544e03157a7bf6c763288323e950b8"}}, &(0x7f0000000200)=0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f00000005c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) timer_delete(r8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 1.577841921s ago: executing program 9 (id=7086): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9321000000d000001c0012800b00010062726964676500002300028008001b00030000005e5ddd56610454508695301617d3769a343e3e88b0da0e92b400074b1fc684ee2de5dcac319af6718e0ce2b94bd77f2ce6a5ac8cf8a05ce559faa904313bde3554de9d3a696e3c05a3d393c8c222f5a44fe6a5ebb7ac117f79e91ae05d551da390fdc61883f614b6d4d6b330467e412e0c935b67baebc27facf2862f3fb1a4a1d28c04805dd499cc691fca6aacc41acf69f8bd4b83e9bde2063744bd9e529d699e73cc2fe3ab3871bc482d955c816d144479c4ae168898e0f2c10cf8df1cd587f03a0bad6f318e6dba69b100"/255, @ANYBLOB="9a2a29aaa8f0db7ad5938c3949c567032574037cda6cf975d9b60866b5f8a8cd332518c5334d8ddf09f4fd362b57a28c59c12b0149d1fedbf6ddb89d68dc5e2b2bbd749b4fb5998fefb5240d6a0f939b8a4f0e8b2e65cada7d82c48d667cf820bdbc80d7975fa489c344229a54bd50f9f487cb337910f0e257fbbbbee092cc942b49de41e84e", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) 1.518004408s ago: executing program 9 (id=7087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 892.298738ms ago: executing program 7 (id=7088): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}, 0x4000c840) write$6lowpan_enable(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0xeffd) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x8, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b13aa9aed3e923ad05392be7124f3883a973ec229f5fab90b052c3572c8e868f4f1ff8e2f4bff94f46103f6fb8ed729eed0700000000000000de127097"}, 0xd8) openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000002, 0x6, 0x10007ffffe]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x4, 0x6, 0xdddd1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 700.064762ms ago: executing program 8 (id=7092): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000001000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 641.418361ms ago: executing program 8 (id=7093): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1803000000000000000000000000000085", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00f'], 0x0}, 0x94) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a"], 0x21c}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 641.272852ms ago: executing program 8 (id=7094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0), 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000080)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x70}, 0x1, 0xe00}, 0x0) 564.339855ms ago: executing program 8 (id=7095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x8) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000180)=r3, 0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES8=r1], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 491.827817ms ago: executing program 0 (id=7097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000000c0)=0xd9, &(0x7f0000000100)=0x4) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="6300000010000301fedc3eea778008136f7e0f219c9f05160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x4000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r8) sendmsg$IPVS_CMD_GET_DEST(r8, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xd0, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xd59656a0ffa0c579}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}]}, 0xd0}}, 0x4) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r10, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r10, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r10, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r10, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r10, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r10, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000940)=0x6, 0x6}], 0x1, 0x0, 0x0, 0x1) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x30, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0x4, 0x65}, @typed={0x8, 0x89, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r0, r5, 0x0) 491.237693ms ago: executing program 7 (id=7098): r0 = getpid() syz_pidfd_open(r0, 0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x2, 0x1, @tid=r0}, &(0x7f0000000040)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 490.933117ms ago: executing program 9 (id=7099): r0 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x70, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x4, 0x4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x7f, 0x4, 0x20, 0x1}, 0x41, &(0x7f0000000280)={0x5, 0xf, 0x41, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x6, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0xe25f, 0x0, 0x3, [0xff00c0, 0x392de3e12a242fa1, 0xffc0, 0xff0000, 0xa0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x6, 0x0, 0x9383, 0x6}]}, 0x2, [{0xdf, &(0x7f00000003c0)=@string={0xdf, 0x3, "99e5f1a673a2f584de142c8bbb46442b6cc386994df51dc2346f7d81f6f21cba650bf8c552fd5e746710e3857024ff94a95d074fb239d7540bcd2e505898d2d3819dc3164287686ee1d42171d2ef3bf362c5fc1766a7f2f6028512d77640fd880a239cfa41232d6d75d0af0ceec5a081cbdee7d587dc7d66bca91a9ed7f6931f9333ef075d17b59aed25a580503deef45c04b0c0cff3cdaf1e0ad5d9e4541539f000e81ff1a04e69b9c239a30d6dc88553b96f91f3e730ddae96956b67eb3df1af01824d6171014f41c342e1835ba381fef430bb6f9901c76a6513c4ad"}}, {0x16, &(0x7f0000000180)=@string={0x16, 0x3, "a121826dd5e7f6ac98380810bb39b3eb7e486786"}}]}) syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x0, 0x8, 0x99, {0x99, 0x5, "7e143c81f6c8e332cce46e54c0af79ac778d2b88c5c61ae17ace50f7d59d57fb33a45b88b8b2ed945cf7594a8d0e565ed510b2a7c57d70a474cfe93d867ea30004f4d53bbee13f7c47ce035e4ee9044cd13698fd9a096ac697102686fa39a73183683efdb00bd510df60357d092c4255b01e0ba11ae6d3c62375138b0ff6914c4d476adf0f1a61c24852cebdedf4bec0d55620fb142ccd"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x20, 0x8, 0xf1, "a0d521f7f26802d90a56b53ab38744b2381684a6ed289ca2b171c3d8e96e4492839d0c26e71a1b134bf0aa7b7bcd440ff1889d8dfd64693931529ebba6d586c4f5b07c69f3697636e15978dc74b6a5d9db1a109fc20b24d4919157264c061f195e509e107a4a27f319971c7e0f2028d3c9465899db9bc7bd4476e27e56402ddde104163237e422d697e8f83ae8f0fa8c74eab76dce72430b328671b6d4dea37f5146c265a36ebe7ecb38b20bf20e162cc0aad2f1df882be66223b8e14e95335b97bfd4ef576965f2e6c0f3a3278f75eb58fbcf068bb7bdc00291123fe66870807c633e48cde6571b76ba37a7ec3544e616"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x0, 0x16, {0x14, "25cf2379d686d031001a47fa4f3c1a819a174425"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xf1}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x6}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000140)=0x2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000006e7ffffffffffff0100009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r1, r6, 0x0) 438.444597ms ago: executing program 7 (id=7100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140), 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5", 0x2}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) 438.167733ms ago: executing program 8 (id=7101): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000008000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 266.631669ms ago: executing program 8 (id=7102): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xc, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xffff0000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa72e34ab7e483ce3}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="6e0c9b6b38d8854d85727d43ce556eb22c5cb5fc81ee9f9941ba0c6c60c1ab528285e82284ed3c1478e8aea7dc02172e3a9755e16789af43f35444c503b905f0f48c295eead1cb90085023fb1d3546e33e6107011b1d3963eff1de242c4d51df88ffa9ef6dded54bd702fc891616a60466b0771476907653531caff22970069d23a621056e995789b2d6982d03f9c70ccf029dbb31868224a803744fe50b1497de47c94a58b49784ac42a2a16cb020fe53504bef26a4bc09df87bd132ff20d29544352f2ccc6ab2fb5ab1bbf820fec0af6b091e26d0f4af751a4cec7c5ec739b29aba620d4854355ad12b4177e4792b90c005f7b4fba056e5211236d95be73f601c5186ac23f672db56762cf54bcb034f8d485103661412189d5919fe63b0179465a5026cac8a590f6b49d35e2bce1876cef5625e99d3d5dbda46431f10a1e772465704e64d919ed70c0f085e74d9a9acb92dd0e85c66d1ef0681205b9b09ebec13b243bc18a0a912f3a511ada1d78030f8437f97674b02f3181b33d43cba3004bf9aa25d02bbbacec283716fd18773e3b75e431f340d11313c8689283501b78087f848ca54a3016ea180443e3e08c7fee7b1222bf36713d9468508086c8f6bef47fab5603321739203565512ff0c4d247673b6b7cb0a6644e13003fad2b8dd5db73676dd6864fe8fedbbe88ce48a52565cf476404238f4798c3464f45107a8ea93bf0c8b29bbe8c9ed55eb98891fadd2eece5c8e604472ea44a578aece6876980f880d431e5783a476ffbcadc4658f4761357333668ff890d8b33a583f61fe774cb05c93bc223742046832ac9de4f7e2f3dec915f1092174c7e1908bd155d08a666fd16e60b14f2906eace05a2763cb1b7638a52a60234c4c3ca6b2dc866ffa89f8a7bce7b3882918e028903f5bfadd98a1da11ae806faf0031ee3bcf02086bca65d3ce02bed0d96437c386c7ca345ad91080a0aadeae1f08c83c319134bf157f986a7f019581493f91f267972ccc5c6f6c9422e679866b56cf278ec2358ee779696caa04d439583be641043874375dd7782e98f359aaf7eb722aa393e3e0846c2f199f189ca83c8a3a64b3ff650fcedef52b366c6fa49e135ce98eac96ba4e2081dfb28e9234fdd9c00ad99ad9f07e1912dbede37cdccade1536c1b64f62321b40648faab1e282a01c342cb879bead9cc1a2b1ec15af2be7d34755834030768643b318e83cd4514448a8aed0c73e477eae4d6dc46e4a56e52c773377282c9dc7210e921b5ca0aa256c9d026ed0f11a00ea72896ebe0ddceae01d915a251045cd7c111a9a5ed31e4309ef3febc86ddf70f1b6d588699cd4fea874599570ddc142773c7c376688f696fd4c412bb570de5959e3174e0938cf99b791e1f4b1c5b3caf3ce36333a2d18561992644da22673938ee524a73974ca5d5d9b5fead6e84d20a479c45454ec40dc5c05d4e3236f950ff0b50d842062cfff7f51d9d68ad93ca5dbbbeb7bf624044d8a4b2e4a83a9c4d378ae187f706802b55ced5c6334f78210daffb70527aeccf1807fb2743264daa59d9e040a5c744851e880395048c15670e311e7c267a45966d89cf9f042cccf4be4fd3ca9e21a033d2a108fb318f5e392d5393a544cd7ca4e6500a819f062740cc3ecead9745116be7c9fd46b6e5afea5348ff5808ea582a8efa958537d99318c50a6dbf9eadd035c309a4f4f7ddfb95e89fa73eae672423bfbbe5b64a9626d30ee5797a49b31a46dcea377a24e02bc1a000bc09ebe03c1c7417379957cdadd93f3830e912d18c6ba302a41e5bc5127a482c9b426afa53f30302b9e1ebbaf4c85e42b418f89afc5515cfcb0b29143785e4c2146424335e16769ff526e57d419ce9742521748539371e1ac32a7d0eeff94fb07704e0d58e26c2206f1309c8d326952de382b3d8485442019730b1e2a504dd04131e7eae0e1776b8799d5f8844c90d596104dd235834e92ef086995e0e02b3472a9d264313a851ddc9f21e715cea39cafd31345caf1dc2a53e425f5bb41894285a339bcf6f233f2a9584e291bf6c047e57c0b2fba8d56f0452c9984f31f743f", 0x5c2, 0xffffffffffffffff) keyctl$read(0xb, r6, &(0x7f0000001b40)=""/4096, 0x1000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3d}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xeaf}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044810}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0x3, 0x2001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c000004000600140001800600060008000000080014"], 0x2c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) listen(r2, 0x1) 192.455439ms ago: executing program 0 (id=7103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x200420c4}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r5 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB="400000020a000600aaaaaabaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x48911}, 0x200000c0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 191.748481ms ago: executing program 0 (id=7104): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES32], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4e5e8fef853a1ad7}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x24}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x48}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd0}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 85.595824ms ago: executing program 0 (id=7105): shutdown(0xffffffffffffffff, 0x1) (async) shutdown(0xffffffffffffffff, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={r3, 0x2, 0x0, 0x3, &(0x7f0000000180)=[{0x9, 0x7, 0x4, 0xca70}, {0x9, 0x2, 0xfff0, 0xdb7}, {0x1, 0x9, 0x2, 0xae4d}]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000001c0)={r3, 0x2, 0x0, 0x3, &(0x7f0000000180)=[{0x9, 0x7, 0x4, 0xca70}, {0x9, 0x2, 0xfff0, 0xdb7}, {0x1, 0x9, 0x2, 0xae4d}]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x2, [0x2, r4, r4, r4], [0x810003, 0x0, 0x4], [0x8000, 0x0, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0x6]}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x28, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x40080) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000150005007980c77f9c889055ce75972f83fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f0002e3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/229, 0x7ce2917715dedfc}, {&(0x7f00000002c0)="c509e655895bcf66b503401f711451ed6b41c55d522d5b6e5768283884f5649ea6ce7180c8a88c44822213a2f903049a3c694ff7f88edf9292f6e941b19bf75fa69970145a1617489f43a57b281a670ce887528aaa4d8325d1cdcc2078679ddc139d14e817e876ead9d3d4af651af964bdf83fed64d8c17e31f0ac3eabdfb5753fc522b19589ce83cd471c891e8b7328b1ead1ef21c75498c04f48d855ada39feda56ba4e324baec1a8f41a3dc24d6d2ac707ba0cf99ed9eea7e5e3fbe6db8d2e0ce66674b4d5bac7c3489e5835d2d8b77cb83a253ae18fc4d2937efa052dc45d109472a49c5b6b92c7b99880328555670c85811c3ff7497fbc5ae11e73045e183b05d5cb633ab6bbd643bddb06c17290b5dd773a8ffb6aa21176571d9935788f97e91cf1a777a5ca8dc04f26e8330", 0xae}, {&(0x7f0000000000)="e007", 0x2}, {&(0x7f0000000600)="c764aba175cc657a55ee1e0653f0a07055e331abccd799a38539302de00adac74fed820ebd672919ca14d6fe84873c14d9b62f716200ab74f0f5b28eae75f22c4e691938aa7945df34fc1dac2a8f752dec41b30083d9da28a73d4d32a91c1dc9c1340899c78eed2d1da329e67cf4618fa5523ad665df563b8595723de6afe392a12ccc2e4f11c063a6489084d55ee96257738fa5", 0x94}], 0x4}, 0x48002) (async) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000150005007980c77f9c889055ce75972f83fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f0002e3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/229, 0x7ce2917715dedfc}, {&(0x7f00000002c0)="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", 0xae}, {&(0x7f0000000000)="e007", 0x2}, {&(0x7f0000000600)="c764aba175cc657a55ee1e0653f0a07055e331abccd799a38539302de00adac74fed820ebd672919ca14d6fe84873c14d9b62f716200ab74f0f5b28eae75f22c4e691938aa7945df34fc1dac2a8f752dec41b30083d9da28a73d4d32a91c1dc9c1340899c78eed2d1da329e67cf4618fa5523ad665df563b8595723de6afe392a12ccc2e4f11c063a6489084d55ee96257738fa5", 0x94}], 0x4}, 0x48002) gettid() 85.420585ms ago: executing program 0 (id=7106): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe}, 0xc) close(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x840) syz_emit_ethernet(0x16, &(0x7f0000000700)={@empty, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x88f7, 0x4, 0x1, 0x3}}, {@generic={0x6002}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x3f, 0x1d1427, 0x7, 0xfffffffb, 0x0, 0x1, 0x8, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 0s ago: executing program 0 (id=7107): timer_create(0x9, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="eedc578ab5586831e43446a2efc27b244c8249880f2fbbadc79569bb974d16f2795a054d3a09765ad425494592a92cbc08033010bf3521ed4fe63af793d551b79d", 0x41) timer_settime(0x0, 0x0, &(0x7f0000000700)={{}, {0x77359400}}, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x4b, 0x0, 0x0, 0x2e}) 0s ago: executing program 0 (id=7108): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000140)=0xffffffc0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='target PC'], 0x13) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async, rerun: 64) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0xc5, 0x114}, 0x48) kernel console output (not intermixed with test programs): 138595][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.142006][ T24] usb 12-1: Product: syz [ 590.143772][ T24] usb 12-1: Manufacturer: syz [ 590.145900][ T24] usb 12-1: SerialNumber: syz [ 590.150598][T24779] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 590.152931][T24779] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 590.362802][ T24] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 590.373037][ T24] usb 12-1: USB disconnect, device number 35 [ 591.154420][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 591.221064][T24802] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 591.684806][T19163] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 591.839134][T19163] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 591.843688][T19163] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 591.847766][T19163] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 591.851357][T19163] usb 13-1: config 1 interface 0 has no altsetting 0 [ 591.856053][T19163] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.858913][T19163] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.861967][T19163] usb 13-1: Product: syz [ 591.863703][T19163] usb 13-1: Manufacturer: syz [ 591.865825][T19163] usb 13-1: SerialNumber: syz [ 591.870260][T24814] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 591.874967][T24814] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 592.088028][T19163] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 592.097940][T19163] usb 13-1: USB disconnect, device number 16 [ 592.194442][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 592.349236][ T6031] usb 8-1: usb_control_msg returned -71 [ 592.350987][ T6031] usbtmc 8-1:16.0: can't read capabilities [ 592.369607][ T6031] usb 8-1: USB disconnect, device number 55 [ 592.389892][T24818] tipc: Enabled bearer , priority 0 [ 592.424872][ T34] usb 12-1: new high-speed USB device number 36 using dummy_hcd [ 592.529462][T24830] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 592.575980][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.579339][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.582321][ T34] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 592.585534][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.595311][ T34] usb 12-1: config 0 descriptor?? [ 593.007347][ T34] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 593.009625][ T34] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 593.023995][ T34] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0D8C:0022.0014/input/input39 [ 593.044925][ T34] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 593.229882][ T24] usb 12-1: USB disconnect, device number 36 [ 593.244404][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 593.522808][T24851] tty tty2: ldisc open failed (-12), clearing slot 1 [ 593.567425][T24856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6426'. [ 593.589830][T24856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 593.694058][T24861] afs: Unknown parameter 'dyn ' [ 593.755215][T24864] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 594.036210][T24876] netlink: 'syz.8.6434': attribute type 4 has an invalid length. [ 594.039413][T24876] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6434'. [ 594.064704][ T24] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 594.231686][ T24] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 594.237957][ T24] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 594.241038][ T24] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 594.243991][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 594.248166][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.251678][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.254295][ T24] usb 8-1: Product: syz [ 594.255676][ T24] usb 8-1: Manufacturer: syz [ 594.257137][ T24] usb 8-1: SerialNumber: syz [ 594.260389][T24868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.264848][T24868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.284492][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 594.469631][T24892] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 594.479458][ T24] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 594.487034][ T24] usb 8-1: USB disconnect, device number 56 [ 594.531731][T24894] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 594.709791][T24901] binder: Bad value for 'max' [ 594.890137][T10367] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 594.961498][T24918] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 595.167262][T24922] /dev/sr0: Can't open blockdev [ 595.314557][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 595.450313][ T8702] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 595.457432][T24936] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 595.541378][T24944] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6457'. [ 595.582779][T24936] syz.3.6454 (24936): drop_caches: 2 [ 595.609688][T24946] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.670848][T24948] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 595.865049][ T9] usb 12-1: new high-speed USB device number 37 using dummy_hcd [ 596.021131][ T40] audit: type=1400 audit(596.850:8390): avc: denied { read } for pid=5344 comm="acpid" name="event4" dev="devtmpfs" ino=3814 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 596.034788][ T40] audit: type=1400 audit(596.850:8391): avc: denied { open } for pid=5344 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3814 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 596.041369][ T40] audit: type=1400 audit(596.850:8392): avc: denied { ioctl } for pid=5344 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3814 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 596.050096][ T9] usb 12-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 596.053922][ T9] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 596.061210][ T9] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 596.067147][ T9] usb 12-1: config 1 interface 0 has no altsetting 0 [ 596.072216][ T9] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.076685][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.079969][ T9] usb 12-1: Product: syz [ 596.081866][ T9] usb 12-1: Manufacturer: syz [ 596.083825][ T9] usb 12-1: SerialNumber: syz [ 596.096231][T24946] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 596.099269][T24946] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 596.311110][ T9] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 596.317346][ T9] usb 12-1: USB disconnect, device number 37 [ 596.354425][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 596.740538][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.749454][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 596.754034][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.759609][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.763104][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.910071][T24967] chnl_net:caif_netlink_parms(): no params data found [ 596.964496][ T24] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 597.003292][T24980] openvswitch: netlink: IP tunnel dst address not specified [ 597.018056][T24982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6467'. [ 597.021827][T24967] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.024860][T24967] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.027072][T24967] bridge_slave_0: entered allmulticast mode [ 597.029693][T24967] bridge_slave_0: entered promiscuous mode [ 597.032991][T24967] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.036657][T24967] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.038889][T24967] bridge_slave_1: entered allmulticast mode [ 597.041421][T24967] bridge_slave_1: entered promiscuous mode [ 597.063813][T24986] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 597.109001][T24967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.114212][T24967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.147596][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.150876][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.153709][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.157760][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.160426][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.163971][ T24] usb 8-1: config 0 descriptor?? [ 597.172284][T24967] team0: Port device team_slave_0 added [ 597.178605][T24967] team0: Port device team_slave_1 added [ 597.219795][T24967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.222674][T24967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.233853][T24967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.240349][T24967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.242481][T24967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.251628][T24967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.289969][T24995] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.325489][T24967] hsr_slave_0: entered promiscuous mode [ 597.328635][T24967] hsr_slave_1: entered promiscuous mode [ 597.331584][T24967] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.337711][T24967] Cannot create hsr debugfs directory [ 597.394504][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 597.511631][T24967] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 597.516330][T24967] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 597.520092][T24967] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 597.523798][T24967] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 597.534518][T24481] usb 12-1: new high-speed USB device number 38 using dummy_hcd [ 597.572370][ T24] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 597.583758][ T24] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 597.587435][T24967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.616630][T24967] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.626862][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.629132][T10367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.636143][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.638985][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.687760][T24481] usb 12-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 597.692282][T24481] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 597.696664][T24481] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 597.700765][T24481] usb 12-1: config 1 interface 0 has no altsetting 0 [ 597.707027][T24481] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.709830][T24481] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.712301][T24481] usb 12-1: Product: syz [ 597.713628][T24481] usb 12-1: Manufacturer: syz [ 597.715177][T24481] usb 12-1: SerialNumber: syz [ 597.719459][T24995] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 597.721940][T24995] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 597.801545][T24967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.941728][T24481] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 597.947816][T24481] usb 12-1: USB disconnect, device number 38 [ 597.997143][T24967] veth0_vlan: entered promiscuous mode [ 598.001879][T24967] veth1_vlan: entered promiscuous mode [ 598.019847][T24967] veth0_macvtap: entered promiscuous mode [ 598.023836][T24967] veth1_macvtap: entered promiscuous mode [ 598.033315][T24967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.040258][T24967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.047303][T24967] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.049925][T24967] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.052436][T24967] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.056188][T24967] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.106502][ T8689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.112469][ T8689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.127566][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.130013][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.177792][T25031] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 598.434498][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 598.569615][T25047] team0: No ports can be present during mode change [ 598.743379][T25053] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6485'. [ 598.834736][ T63] Bluetooth: hci2: command tx timeout [ 598.903739][T25062] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 599.123294][T25071] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.195011][T25073] netlink: 'syz.8.6491': attribute type 39 has an invalid length. [ 599.384514][ T5982] usb 12-1: new high-speed USB device number 39 using dummy_hcd [ 599.400095][T25079] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 599.403292][T25079] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 599.484497][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 599.532323][T25094] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 599.532851][ T40] audit: type=1804 audit(600.360:8393): pid=25093 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.6496" name="file0" dev="ramfs" ino=106909 res=1 errno=0 [ 599.548392][ T5982] usb 12-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 599.552019][T25093] geneve2: entered promiscuous mode [ 599.552260][ T5982] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 599.553946][T25093] geneve2: entered allmulticast mode [ 599.557212][ T5982] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 599.564201][ T5982] usb 12-1: config 1 interface 0 has no altsetting 0 [ 599.570952][ T5982] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.574125][ T5982] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.576526][ T5982] usb 12-1: Product: syz [ 599.577890][ T5982] usb 12-1: Manufacturer: syz [ 599.579592][ T5982] usb 12-1: SerialNumber: syz [ 599.582987][T25071] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 599.587878][T25071] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 599.597547][ T6031] usb 8-1: USB disconnect, device number 57 [ 599.765517][T25111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25111 comm=syz.9.6501 [ 599.771601][T25111] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6501'. [ 599.782114][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6501'. [ 599.787291][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6501'. [ 599.799475][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6501'. [ 599.810183][ T5982] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 599.810940][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6501'. [ 599.819972][ T5982] usb 12-1: USB disconnect, device number 39 [ 599.837952][T17146] udevd[17146]: setting mode of /dev/bus/usb/012/039 to 020664 failed: No such file or directory [ 599.842198][T17146] udevd[17146]: setting owner of /dev/bus/usb/012/039 to uid=0, gid=0 failed: No such file or directory [ 599.964280][T25126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6506'. [ 600.008417][T25129] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 600.061703][T25132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25132 comm=syz.3.6508 [ 600.065914][T25127] kvm: faulting far call emulation tainted memory [ 600.384058][T25148] geneve2: entered promiscuous mode [ 600.387624][T25148] geneve2: entered allmulticast mode [ 600.409699][ T1055] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 600.514448][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 600.527839][T25157] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 600.659043][T25170] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.729540][T25175] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 600.797594][ T8675] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 600.914584][ T63] Bluetooth: hci2: command tx timeout [ 600.915198][ T837] usb 12-1: new high-speed USB device number 40 using dummy_hcd [ 601.080690][ T837] usb 12-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 601.085390][ T837] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 601.089508][ T837] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 601.093464][ T837] usb 12-1: config 1 interface 0 has no altsetting 0 [ 601.098226][ T837] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.102062][ T837] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.105502][ T837] usb 12-1: Product: syz [ 601.107210][ T837] usb 12-1: Manufacturer: syz [ 601.109167][ T837] usb 12-1: SerialNumber: syz [ 601.123378][T25170] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 601.126541][T25170] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 601.340421][ T837] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 601.345726][ T837] usb 12-1: USB disconnect, device number 40 [ 601.543609][T25193] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 601.554658][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 601.591785][T25196] netlink: 'syz.3.6527': attribute type 1 has an invalid length. [ 601.593330][T25197] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6528'. [ 601.597205][T25196] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6527'. [ 601.630517][T25199] mkiss: ax0: crc mode is auto. [ 601.703100][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6530'. [ 602.001460][ T40] audit: type=1400 audit(602.830:8394): avc: denied { setopt } for pid=25215 comm="syz.7.6536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 602.101768][T25233] comedi comedi3: comedi_config --init_data is deprecated [ 602.147753][T25225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6536'. [ 602.594455][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 602.644787][ T9] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 602.796715][ T9] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 602.806046][ T9] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 602.810092][ T9] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 602.814085][ T9] usb 13-1: config 1 interface 0 has no altsetting 0 [ 602.819898][ T9] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.823706][ T9] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.830010][ T9] usb 13-1: Product: syz [ 602.831929][ T9] usb 13-1: Manufacturer: syz [ 602.833937][ T9] usb 13-1: SerialNumber: syz [ 602.863330][T25255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6546'. [ 602.866144][T25249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 602.866289][T25249] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 602.912910][T25258] netlink: 'syz.3.6548': attribute type 1 has an invalid length. [ 602.917831][T25260] comedi comedi3: comedi_config --init_data is deprecated [ 602.995068][ T63] Bluetooth: hci2: command tx timeout [ 603.050997][T25269] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 603.056299][T25269] Error validating options; rc = [-22] [ 603.080763][ T9] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 603.086142][ T9] usb 13-1: USB disconnect, device number 17 [ 603.125692][T25280] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 603.128045][T25280] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 603.130725][T25280] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6554'. [ 603.248414][T25289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6558'. [ 603.289560][T25292] comedi comedi3: comedi_config --init_data is deprecated [ 603.319433][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6561'. [ 603.594878][ T9] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 603.644460][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 603.766141][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.769673][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.773269][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.777136][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.781580][ T9] usb 8-1: config 0 descriptor?? [ 603.994467][T24481] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 604.124472][T24481] usb 13-1: device descriptor read/64, error -71 [ 604.340379][T25307] dlm: non-version read from control device 20 [ 604.344542][T25307] dlm: Unknown command passed to DLM device : 9 [ 604.344542][T25307] [ 604.374402][T24481] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 604.515304][T24481] usb 13-1: device descriptor read/64, error -71 [ 604.624949][T24481] usb usb13-port1: attempt power cycle [ 604.646973][T24168] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 604.684429][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 604.984492][T24481] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 605.005359][T24481] usb 13-1: device descriptor read/8, error -71 [ 605.075618][ T63] Bluetooth: hci2: command tx timeout [ 605.254518][T24481] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 605.285161][T24481] usb 13-1: device descriptor read/8, error -71 [ 605.395501][T24481] usb usb13-port1: unable to enumerate USB device [ 605.661134][T25322] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6569'. [ 605.708235][T25324] comedi comedi3: comedi_config --init_data is deprecated [ 605.725716][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 605.781049][T25329] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 605.786156][T25329] bond0: (slave lo): Error: Device can not be enslaved while up [ 606.380851][ T836] usb 8-1: USB disconnect, device number 58 [ 606.686091][T25350] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6580'. [ 606.729279][T25352] comedi comedi3: comedi_config --init_data is deprecated [ 606.754406][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 606.826337][T25358] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6584'. [ 606.876360][T25364] 9pnet_virtio: no channels available for device syz [ 606.905088][ T836] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 607.059186][ T836] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.063405][ T836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.068663][ T836] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.072382][ T836] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 607.078533][ T836] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 607.082179][ T836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.092676][ T836] usb 8-1: config 0 descriptor?? [ 607.141825][T25374] ata1.00: invalid multi_count 128 ignored [ 607.322824][T25376] NILFS (nbd9): device size too small [ 607.333770][ T40] audit: type=1400 audit(608.160:8395): avc: denied { ioctl } for pid=25375 comm="syz.9.6589" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 607.337909][T25376] fuse: Unknown parameter '00000000000000000000004017777777777777777777770000000000000000000000601777777777777777777777u [ 607.337909][T25376] 61–†Œˆò+m^Øà°çØc?L­ó°ÐïðIŽ«>òÖËL|7ùoøÒåºàø¾6ó5åJŠD«nvþÍhã^QúûäBHtIÐpÐM׸¾I.î"X:À' [ 607.545128][T25380] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6591'. [ 607.727797][ T836] usbhid 8-1:0.0: can't add hid device: -71 [ 607.730283][ T836] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 607.746356][T25388] comedi comedi3: comedi_config --init_data is deprecated [ 607.751026][ T836] usb 8-1: USB disconnect, device number 59 [ 607.804429][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 607.847615][ T8689] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 607.882760][ T40] audit: type=1400 audit(608.710:8396): avc: denied { create } for pid=25395 comm="syz.3.6596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 607.892054][ T40] audit: type=1400 audit(608.720:8397): avc: denied { mounton } for pid=25395 comm="syz.3.6596" path="/441/file1/file0" dev="autofs" ino=107269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 607.900050][T25398] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 608.113433][T25413] comedi comedi3: comedi_config --init_data is deprecated [ 608.663002][T25447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6612'. [ 608.722349][T25455] 9pnet_virtio: no channels available for device syz [ 608.733536][T25455] 9pnet_virtio: no channels available for device syz [ 608.961231][T25475] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.965285][T25475] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.970326][T25475] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.973747][T25475] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.049710][T25481] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6622'. [ 609.094791][T25485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25485 comm=syz.7.6624 [ 609.100198][T25485] netlink: 'syz.7.6624': attribute type 1 has an invalid length. [ 609.132634][T25487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.138633][T25487] bond2: (slave bond3): making interface the new active one [ 609.142081][T25487] bond2: (slave bond3): Enslaving as an active interface with an up link [ 609.318652][T25497] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 609.817895][T25507] block device autoloading is deprecated and will be removed. [ 609.884435][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 609.914290][T25519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6633'. [ 609.998992][T25531] NILFS (nbd8): device size too small [ 610.011348][ T8675] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 610.123988][T25533] kvm: kvm [25528]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000007) = 0x0 [ 610.311511][T25543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6642'. [ 610.489518][T25556] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6645'. [ 610.519115][ T40] audit: type=1326 audit(611.350:8398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25557 comm="syz.9.6646" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1df3b8e9a9 code=0x0 [ 610.914478][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 610.925797][ T40] audit: type=1400 audit(611.760:8399): avc: denied { lock } for pid=25560 comm="syz.8.6647" path="socket:[111632]" dev="sockfs" ino=111632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 610.986487][ T8689] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 611.228137][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.231854][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.236300][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.239626][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.243010][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.246772][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.251245][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.255170][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.257979][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.260573][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.263059][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.266572][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.269109][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.271578][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.274013][T25569] overlay: filesystem on ./bus not supported as upperdir [ 611.338563][T25573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.415584][T25574] tipc: Enabled bearer , priority 0 [ 611.642682][ T40] audit: type=1400 audit(612.470:8400): avc: denied { write } for pid=25590 comm="syz.9.6654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 611.670878][T25593] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6655'. [ 611.718318][T25595] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.964455][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 611.964490][T22783] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 612.069699][T25601] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 612.136654][T22783] usb 14-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 612.141279][T22783] usb 14-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 612.145921][T22783] usb 14-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 612.150067][T22783] usb 14-1: config 1 interface 0 has no altsetting 0 [ 612.155355][T22783] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.159207][T22783] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.162600][T22783] usb 14-1: Product: syz [ 612.164492][T22783] usb 14-1: Manufacturer: syz [ 612.166494][T22783] usb 14-1: SerialNumber: syz [ 612.172352][T25595] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 612.175738][T25595] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 612.386040][T22783] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -71 [ 612.394186][T22783] usb 14-1: USB disconnect, device number 2 [ 612.457058][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6664'. [ 612.462614][T25615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6664'. [ 612.495722][T25617] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6665'. [ 612.641671][T25625] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 612.786051][T25632] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6669'. [ 612.788880][T25632] ip6gretap0: entered promiscuous mode [ 612.791282][T25632] netlink: 176 bytes leftover after parsing attributes in process `syz.8.6669'. [ 612.819240][ T8687] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 612.982759][T25643] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6673'. [ 612.994677][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 613.095432][T25653] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 613.118897][T25656] tipc: Enabled bearer , priority 0 [ 613.121741][T25656] syzkaller0: entered promiscuous mode [ 613.123721][T25656] syzkaller0: entered allmulticast mode [ 613.139286][T25656] tipc: Resetting bearer [ 613.142961][T25655] tipc: Resetting bearer [ 613.154163][T25655] tipc: Disabling bearer [ 613.199227][T25660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 613.524411][T22783] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 613.686582][T22783] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 613.690185][T22783] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 613.693323][T22783] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 613.696830][T22783] usb 13-1: config 1 interface 0 has no altsetting 0 [ 613.700860][T22783] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 613.703699][T22783] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.706628][T22783] usb 13-1: Product: syz [ 613.708447][T22783] usb 13-1: Manufacturer: syz [ 613.710435][T22783] usb 13-1: SerialNumber: syz [ 613.715508][T25662] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 613.718724][T25662] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 613.934086][T22783] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 613.942404][T22783] usb 13-1: USB disconnect, device number 22 [ 614.017405][T25677] nvme_fabrics: missing parameter 'transport=%s' [ 614.019729][T25677] nvme_fabrics: missing parameter 'nqn=%s' [ 614.044857][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 614.192626][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6687'. [ 614.545773][T25714] ata1.00: invalid multi_count 128 ignored [ 614.556900][ T8675] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 614.625929][T25716] ata1.00: invalid multi_count 1 ignored [ 614.713157][T25720] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6697'. [ 615.074467][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 615.211658][T25737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6705'. [ 615.215075][T25737] netlink: 'syz.8.6705': attribute type 14 has an invalid length. [ 615.217576][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6705'. [ 615.272461][ T8702] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 615.320068][T25749] syz.8.6707: attempt to access beyond end of device [ 615.320068][T25749] sr0: rw=0, sector=0, nr_sectors = 8 limit=0 [ 615.325276][T25749] hpfs: hpfs_map_sector(): read error [ 615.370908][T25753] netlink: 'syz.9.6709': attribute type 2 has an invalid length. [ 615.373344][T25753] netlink: 'syz.9.6709': attribute type 1 has an invalid length. [ 615.592144][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.596695][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.599387][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.600077][ T40] audit: type=1400 audit(616.430:8401): avc: denied { accept } for pid=25765 comm="syz.7.6713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 615.613431][T25776] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 615.640045][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.643501][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.646900][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.650029][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.653162][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.656617][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.659732][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.662792][T25776] xfrm0 speed is unknown, defaulting to 1000 [ 615.801020][T10366] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 616.114457][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 617.155142][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 617.694198][T25804] overlayfs: workdir and upperdir must be separate subtrees [ 617.781478][ T1055] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x53 [ 618.194525][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 618.547184][ T40] audit: type=1326 audit(619.380:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25828 comm="syz.9.6731" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df3b8e9a9 code=0x0 [ 618.782426][T25840] overlayfs: maximum fs stacking depth exceeded [ 618.793964][ T40] audit: type=1400 audit(619.610:8403): avc: denied { mounton } for pid=25839 comm="syz.8.6734" path="/584/file0" dev="hugetlbfs" ino=112795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 618.822206][T25842] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 619.174472][ T5982] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 619.244478][T22783] usb 12-1: new high-speed USB device number 41 using dummy_hcd [ 619.355825][ T5982] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 619.359330][ T5982] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 619.362660][ T5982] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 619.365973][ T5982] usb 13-1: config 1 interface 0 has no altsetting 0 [ 619.369825][ T5982] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.372853][ T5982] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.374498][T22783] usb 12-1: device descriptor read/64, error -71 [ 619.375520][ T5982] usb 13-1: Product: syz [ 619.379392][ T5982] usb 13-1: Manufacturer: syz [ 619.380968][ T5982] usb 13-1: SerialNumber: syz [ 619.384938][T25851] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 619.387230][T25851] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 619.597004][ T5982] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 619.602049][ T5982] usb 13-1: USB disconnect, device number 23 [ 619.614477][T22783] usb 12-1: new high-speed USB device number 42 using dummy_hcd [ 619.754483][T22783] usb 12-1: device descriptor read/64, error -71 [ 619.875595][T22783] usb usb12-port1: attempt power cycle [ 620.234440][T22783] usb 12-1: new high-speed USB device number 43 using dummy_hcd [ 620.255225][T22783] usb 12-1: device descriptor read/8, error -71 [ 620.284409][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 620.472386][T25880] geneve2: entered promiscuous mode [ 620.474082][T25880] geneve2: entered allmulticast mode [ 620.505123][T22783] usb 12-1: new high-speed USB device number 44 using dummy_hcd [ 620.525265][T22783] usb 12-1: device descriptor read/8, error -71 [ 620.603336][T25888] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 620.611587][T25886] sp0: Synchronizing with TNC [ 620.634713][T22783] usb usb12-port1: unable to enumerate USB device [ 620.878673][T25894] netlink: 'syz.9.6751': attribute type 10 has an invalid length. [ 620.881753][T25894] macvlan0: entered promiscuous mode [ 620.883404][T25894] macvlan0: entered allmulticast mode [ 620.887784][T25894] veth1_vlan: entered allmulticast mode [ 620.890946][T25894] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 621.314433][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 621.317846][T25915] FAULT_INJECTION: forcing a failure. [ 621.317846][T25915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.323150][T25915] CPU: 3 UID: 0 PID: 25915 Comm: syz.8.6755 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 621.323174][T25915] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 621.323185][T25915] Call Trace: [ 621.323193][T25915] [ 621.323200][T25915] dump_stack_lvl+0x16c/0x1f0 [ 621.323242][T25915] should_fail_ex+0x512/0x640 [ 621.323279][T25915] _copy_from_user+0x2e/0xd0 [ 621.323299][T25915] do_handle_open+0x500/0xb70 [ 621.323325][T25915] ? __fget_files+0x20e/0x3c0 [ 621.323343][T25915] ? __pfx_do_handle_open+0x10/0x10 [ 621.323379][T25915] ? ksys_write+0x1ac/0x250 [ 621.323414][T25915] ? do_syscall_64+0xcd/0x4c0 [ 621.323430][T25915] do_syscall_64+0xcd/0x4c0 [ 621.323451][T25915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.323469][T25915] RIP: 0033:0x7fb44bf8e9a9 [ 621.323485][T25915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.323503][T25915] RSP: 002b:00007fb44cdd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 621.323522][T25915] RAX: ffffffffffffffda RBX: 00007fb44c1b6160 RCX: 00007fb44bf8e9a9 [ 621.323535][T25915] RDX: 0000000000008082 RSI: 0000200000000080 RDI: 0000000000000004 [ 621.323548][T25915] RBP: 00007fb44cdd1090 R08: 0000000000000000 R09: 0000000000000000 [ 621.323560][T25915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.323571][T25915] R13: 0000000000000000 R14: 00007fb44c1b6160 R15: 00007ffceafd0f78 [ 621.323595][T25915] [ 622.267115][T25931] __nla_validate_parse: 1 callbacks suppressed [ 622.267129][T25931] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6759'. [ 622.275907][T25931] Invalid option length (1048180) for dns_resolver key [ 622.354544][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 622.827740][ T40] audit: type=1400 audit(623.660:8404): avc: denied { unmount } for pid=19158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 623.394416][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 623.396997][T24969] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 623.405259][T24969] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 623.416233][T24969] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 623.421114][T24969] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 623.423924][T24969] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.528367][T20798] bond0: (slave syz_tun): Releasing backup interface [ 623.565357][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6770'. [ 623.569163][T25963] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 623.572164][T25953] xfrm0 speed is unknown, defaulting to 1000 [ 623.572398][T25963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.579039][T25957] tipc: Started in network mode [ 623.580699][T25957] tipc: Node identity 2ae0881672b5, cluster identity 4711 [ 623.583069][T25957] tipc: Enabled bearer , priority 0 [ 623.686603][ T1055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.690020][ T1055] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.748875][T25953] chnl_net:caif_netlink_parms(): no params data found [ 623.769585][ T1055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.773821][ T1055] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.865166][ T5999] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 623.877263][ T1055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.881717][ T1055] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.918150][T25953] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.921173][T25953] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.924179][T25953] bridge_slave_0: entered allmulticast mode [ 623.928401][T25953] bridge_slave_0: entered promiscuous mode [ 623.933037][T25953] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.944303][T25953] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.947584][T25953] bridge_slave_1: entered allmulticast mode [ 623.950400][T25953] bridge_slave_1: entered promiscuous mode [ 623.969040][ T1055] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.972270][ T1055] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.007273][T25953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.011918][T25953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.026672][ T5999] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 624.030198][ T5999] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 624.033372][ T5999] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 624.039943][ T5999] usb 13-1: config 1 interface 0 has no altsetting 0 [ 624.043603][ T5999] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.046894][ T5999] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.049437][ T5999] usb 13-1: Product: syz [ 624.050791][ T5999] usb 13-1: Manufacturer: syz [ 624.052328][ T5999] usb 13-1: SerialNumber: syz [ 624.060255][T25953] team0: Port device team_slave_0 added [ 624.061394][T25968] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 624.063859][T25953] team0: Port device team_slave_1 added [ 624.066137][T25968] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 624.095114][T25953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.097356][T25953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.106057][T25953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.110385][T25953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.112582][T25953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.120553][T25953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.217679][ T1055] bridge_slave_1: left allmulticast mode [ 624.219558][ T1055] bridge_slave_1: left promiscuous mode [ 624.221600][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.227026][ T1055] bridge_slave_0: left allmulticast mode [ 624.228840][ T1055] bridge_slave_0: left promiscuous mode [ 624.230705][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.275094][ T5999] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 624.281612][ T5999] usb 13-1: USB disconnect, device number 24 [ 624.434427][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 624.694450][ T9] tipc: Node number set to 1482000406 [ 624.708680][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.711626][ T1055] bond_slave_0: left promiscuous mode [ 624.720098][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.723769][ T1055] bond_slave_1: left promiscuous mode [ 624.729436][ T1055] bond0 (unregistering): Released all slaves [ 624.847150][ T1055] bond1 (unregistering): (slave veth3): Releasing backup interface [ 624.851526][ T1055] bond1 (unregistering): Released all slaves [ 624.862100][ T1055] bond2 (unregistering): Released all slaves [ 624.872185][T25953] hsr_slave_0: entered promiscuous mode [ 624.876398][T25953] hsr_slave_1: entered promiscuous mode [ 624.878598][T25953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.881072][T25953] Cannot create hsr debugfs directory [ 624.883604][T25956] tipc: Resetting bearer [ 625.474432][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 625.475534][T24969] Bluetooth: hci5: command tx timeout [ 626.373727][T25956] tipc: Disabling bearer [ 626.407552][ T1055] tipc: Disabling bearer [ 626.409707][ T1055] tipc: Disabling bearer [ 626.411396][ T1055] tipc: Disabling bearer [ 626.413212][ T1055] tipc: Left network mode [ 626.421726][T25957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.486864][ T40] audit: type=1400 audit(627.320:8405): avc: denied { setopt } for pid=25983 comm="syz.9.6774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 626.505979][T25986] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 626.516929][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 626.774446][ T60] usb 12-1: new high-speed USB device number 45 using dummy_hcd [ 626.799626][ T1055] hsr_slave_0: left promiscuous mode [ 626.802866][ T1055] hsr_slave_1: left promiscuous mode [ 626.807035][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.810385][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.814317][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.817610][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.871830][ T1055] veth1_macvtap: left promiscuous mode [ 626.874419][ T1055] veth0_macvtap: left promiscuous mode [ 626.876856][ T1055] veth1_vlan: left promiscuous mode [ 626.879126][ T1055] veth0_vlan: left promiscuous mode [ 626.926484][ T60] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.930472][ T60] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.933910][ T60] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 626.937676][ T60] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.941756][ T60] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.944588][ T60] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.948851][ T60] usb 12-1: config 0 descriptor?? [ 627.000041][T25995] FAULT_INJECTION: forcing a failure. [ 627.000041][T25995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.004594][T25995] CPU: 1 UID: 0 PID: 25995 Comm: syz.8.6778 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 627.004610][T25995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 627.004618][T25995] Call Trace: [ 627.004622][T25995] [ 627.004627][T25995] dump_stack_lvl+0x16c/0x1f0 [ 627.004641][T25995] should_fail_ex+0x512/0x640 [ 627.004672][T25995] _copy_from_user+0x2e/0xd0 [ 627.004685][T25995] do_handle_open+0x61b/0xb70 [ 627.004702][T25995] ? __pfx_do_handle_open+0x10/0x10 [ 627.004720][T25995] ? ksys_write+0x1ac/0x250 [ 627.004741][T25995] ? do_syscall_64+0xcd/0x4c0 [ 627.004751][T25995] do_syscall_64+0xcd/0x4c0 [ 627.004762][T25995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.004774][T25995] RIP: 0033:0x7fb44bf8e9a9 [ 627.004783][T25995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.004794][T25995] RSP: 002b:00007fb44cdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 627.004805][T25995] RAX: ffffffffffffffda RBX: 00007fb44c1b6080 RCX: 00007fb44bf8e9a9 [ 627.004812][T25995] RDX: 0000000000008082 RSI: 0000200000000080 RDI: 0000000000000004 [ 627.004819][T25995] RBP: 00007fb44cdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 627.004840][T25995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.004846][T25995] R13: 0000000000000000 R14: 00007fb44c1b6080 R15: 00007ffceafd0f78 [ 627.004860][T25995] [ 627.379842][ T60] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 627.556122][T24969] Bluetooth: hci5: command tx timeout [ 627.564405][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 627.923454][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 628.027184][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 628.604445][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.823896][ T40] audit: type=1400 audit(629.650:8406): avc: denied { read } for pid=26016 comm="syz.9.6783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 628.994120][T26022] FAULT_INJECTION: forcing a failure. [ 628.994120][T26022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.003273][T26022] CPU: 1 UID: 0 PID: 26022 Comm: syz.8.6786 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 629.003302][T26022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 629.003313][T26022] Call Trace: [ 629.003319][T26022] [ 629.003327][T26022] dump_stack_lvl+0x16c/0x1f0 [ 629.003350][T26022] should_fail_ex+0x512/0x640 [ 629.003378][T26022] _copy_to_user+0x32/0xd0 [ 629.003398][T26022] simple_read_from_buffer+0xcb/0x170 [ 629.003427][T26022] proc_fail_nth_read+0x197/0x270 [ 629.003455][T26022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.003482][T26022] ? rw_verify_area+0xcf/0x680 [ 629.003504][T26022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.003527][T26022] vfs_read+0x1e1/0xc60 [ 629.003571][T26022] ? __pfx___mutex_lock+0x10/0x10 [ 629.003592][T26022] ? __pfx_vfs_read+0x10/0x10 [ 629.003623][T26022] ? __fget_files+0x20e/0x3c0 [ 629.003646][T26022] ksys_read+0x12a/0x250 [ 629.003669][T26022] ? __pfx_ksys_read+0x10/0x10 [ 629.003702][T26022] do_syscall_64+0xcd/0x4c0 [ 629.003723][T26022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.003739][T26022] RIP: 0033:0x7fb44bf8d3bc [ 629.003754][T26022] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 629.003792][T26022] RSP: 002b:00007fb44ce13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.003810][T26022] RAX: ffffffffffffffda RBX: 00007fb44c1b5fa0 RCX: 00007fb44bf8d3bc [ 629.003823][T26022] RDX: 000000000000000f RSI: 00007fb44ce130a0 RDI: 0000000000000005 [ 629.003833][T26022] RBP: 00007fb44ce13090 R08: 0000000000000000 R09: 0000000000000000 [ 629.003845][T26022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.003855][T26022] R13: 0000000000000000 R14: 00007fb44c1b5fa0 R15: 00007ffceafd0f78 [ 629.003877][T26022] [ 629.021101][T25953] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.099704][T25953] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.110423][T25953] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.150701][T25953] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 629.161980][T26029] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6788'. [ 629.206074][T25953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.212410][T26038] program syz.7.6789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.215828][T25953] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.222007][T26040] netlink: 536 bytes leftover after parsing attributes in process `syz.7.6789'. [ 629.234781][T25953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 629.238277][T25953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.243895][ T8675] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.246407][ T8675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.246497][T26036] FAULT_INJECTION: forcing a failure. [ 629.246497][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.250222][ T8675] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.253457][T26036] CPU: 0 UID: 0 PID: 26036 Comm: syz.8.6787 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 629.253481][T26036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 629.253493][T26036] Call Trace: [ 629.253499][T26036] [ 629.253507][T26036] dump_stack_lvl+0x16c/0x1f0 [ 629.253530][T26036] should_fail_ex+0x512/0x640 [ 629.253562][T26036] _copy_to_user+0x32/0xd0 [ 629.253583][T26036] simple_read_from_buffer+0xcb/0x170 [ 629.253611][T26036] proc_fail_nth_read+0x197/0x270 [ 629.253638][T26036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.253665][T26036] ? rw_verify_area+0xcf/0x680 [ 629.253687][T26036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.253713][T26036] vfs_read+0x1e1/0xc60 [ 629.253741][T26036] ? __pfx___mutex_lock+0x10/0x10 [ 629.253759][T26036] ? __pfx_vfs_read+0x10/0x10 [ 629.253790][T26036] ? __fget_files+0x20e/0x3c0 [ 629.253815][T26036] ksys_read+0x12a/0x250 [ 629.253840][T26036] ? __pfx_ksys_read+0x10/0x10 [ 629.253873][T26036] do_syscall_64+0xcd/0x4c0 [ 629.253893][T26036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.253911][T26036] RIP: 0033:0x7fb44bf8d3bc [ 629.253926][T26036] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 629.253944][T26036] RSP: 002b:00007fb44cdf2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.253967][T26036] RAX: ffffffffffffffda RBX: 00007fb44c1b6080 RCX: 00007fb44bf8d3bc [ 629.253979][T26036] RDX: 000000000000000f RSI: 00007fb44cdf20a0 RDI: 0000000000000005 [ 629.253990][T26036] RBP: 00007fb44cdf2090 R08: 0000000000000000 R09: 0000000000000000 [ 629.254000][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.254011][T26036] R13: 0000000000000000 R14: 00007fb44c1b6080 R15: 00007ffceafd0f78 [ 629.254034][T26036] [ 629.312207][ T8675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.349942][ T838] usb 12-1: USB disconnect, device number 45 [ 629.360190][ T1055] IPVS: stop unused estimator thread 0... [ 629.363517][ T40] audit: type=1400 audit(630.190:8407): avc: denied { map } for pid=26046 comm="syz.7.6791" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.380733][ T40] audit: type=1400 audit(630.190:8408): avc: denied { execute } for pid=26046 comm="syz.7.6791" path="/dev/loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.388535][ T40] audit: type=1400 audit(630.210:8409): avc: denied { ioctl } for pid=26046 comm="syz.7.6791" path="socket:[113697]" dev="sockfs" ino=113697 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 629.398354][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.429759][T25953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.460548][T25953] veth0_vlan: entered promiscuous mode [ 629.462761][T26055] netlink: 'syz.7.6794': attribute type 4 has an invalid length. [ 629.467257][T26055] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6794'. [ 629.467532][T25953] veth1_vlan: entered promiscuous mode [ 629.479272][T26055] : renamed from bond0 (while UP) [ 629.499071][T25953] veth0_macvtap: entered promiscuous mode [ 629.502692][T25953] veth1_macvtap: entered promiscuous mode [ 629.511039][T25953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.518195][T25953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.522116][T25953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.524960][T25953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.527643][T25953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.530731][T25953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.587984][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.593005][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.610511][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.613016][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.626979][T26063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6796'. [ 629.634519][T24969] Bluetooth: hci5: command tx timeout [ 629.659369][T26065] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.826408][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6800'. [ 629.826413][T26074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6800'. [ 629.826439][T26074] bond0: option use_carrier: invalid value (196) [ 629.834438][T26075] bond0: option use_carrier: invalid value (196) [ 629.914888][ T6031] usb 12-1: new high-speed USB device number 46 using dummy_hcd [ 629.975620][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6804'. [ 630.066311][ T6031] usb 12-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 630.069892][ T6031] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 630.073248][ T6031] usb 12-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 630.076902][ T6031] usb 12-1: config 1 interface 0 has no altsetting 0 [ 630.080953][ T6031] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.083937][ T6031] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.087164][ T6031] usb 12-1: Product: syz [ 630.088653][ T6031] usb 12-1: Manufacturer: syz [ 630.090356][ T6031] usb 12-1: SerialNumber: syz [ 630.094026][T26065] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 630.097572][T26065] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 630.210661][T26095] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8924, magic 89 != 6b] [ 630.308203][ T6031] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 630.313468][ T6031] usb 12-1: USB disconnect, device number 46 [ 630.555158][ T836] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 630.674473][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 630.705453][ T836] usb 14-1: too many configurations: 151, using maximum allowed: 8 [ 630.717724][ T836] usb 14-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 630.720494][ T836] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 630.723039][ T836] usb 14-1: Product: syz [ 630.724916][ T836] usb 14-1: Manufacturer: syz [ 630.726598][ T836] usb 14-1: SerialNumber: syz [ 630.731973][ T836] usb 14-1: config 0 descriptor?? [ 630.937398][T26098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6808'. [ 630.944088][ T836] usb 14-1: USB disconnect, device number 3 [ 630.980706][T26107] netlink: 'syz.7.6812': attribute type 64 has an invalid length. [ 630.983938][T26107] netlink: 'syz.7.6812': attribute type 4 has an invalid length. [ 630.987817][T26107] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6812'. [ 631.000126][T26109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6813'. [ 631.109335][T26123] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.355149][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 631.506744][ T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 631.511280][ T9] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 631.515799][ T9] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 631.519730][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 631.524641][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.527485][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.529982][ T9] usb 5-1: Product: syz [ 631.531331][ T9] usb 5-1: Manufacturer: syz [ 631.532892][ T9] usb 5-1: SerialNumber: syz [ 631.537156][T26123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 631.539575][T26123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 631.585101][T26135] mkiss: ax0: crc mode is auto. [ 631.714475][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 631.714547][T24969] Bluetooth: hci5: command tx timeout [ 631.750634][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 631.757977][ T9] usb 5-1: USB disconnect, device number 9 [ 632.535450][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.549163][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.552818][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.568197][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.576871][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.764422][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 633.562789][T26160] xfrm0 speed is unknown, defaulting to 1000 [ 633.623031][ T40] audit: type=1400 audit(634.450:8410): avc: denied { remount } for pid=26162 comm="syz.0.6830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 633.684079][T26160] chnl_net:caif_netlink_parms(): no params data found [ 633.794443][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 633.832421][T26183] futex_wake_op: syz.9.6833 tries to shift op by 32; fix this program [ 633.887069][T26160] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.889751][T26160] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.892684][T26160] bridge_slave_0: entered allmulticast mode [ 633.897666][T26160] bridge_slave_0: entered promiscuous mode [ 633.902053][T26160] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.905784][T26160] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.908771][T26160] bridge_slave_1: entered allmulticast mode [ 633.912640][T26160] bridge_slave_1: entered promiscuous mode [ 633.965659][T26160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.972754][T26160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.023013][T26160] team0: Port device team_slave_0 added [ 634.030505][T26160] team0: Port device team_slave_1 added [ 634.078289][T26160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.081025][T26160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.090633][T26160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.112933][T26160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.115303][T26160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.123223][T26160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.177137][T26160] hsr_slave_0: entered promiscuous mode [ 634.180250][T26160] hsr_slave_1: entered promiscuous mode [ 634.183002][T26160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.188119][T26160] Cannot create hsr debugfs directory [ 634.310766][T26160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.314256][T26160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.328147][T26205] __nla_validate_parse: 3 callbacks suppressed [ 634.328159][T26205] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6842'. [ 634.408272][T26160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.411540][T26160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.423532][T26209] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 634.454867][ T6031] usb 12-1: new high-speed USB device number 47 using dummy_hcd [ 634.484042][T26160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.488293][T26160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.499839][T26211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6845'. [ 634.568982][T26160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.573284][T26160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.604479][ T6031] usb 12-1: Using ep0 maxpacket: 32 [ 634.609081][ T6031] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.612508][ T6031] usb 12-1: config 0 has no interface number 0 [ 634.617761][ T6031] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 634.621784][ T6031] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.625896][ T6031] usb 12-1: Product: syz [ 634.627757][ T6031] usb 12-1: Manufacturer: syz [ 634.629865][ T6031] usb 12-1: SerialNumber: syz [ 634.635256][ T6031] usb 12-1: config 0 descriptor?? [ 634.644001][ T6031] usb 12-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 634.648384][ T6031] usb 12-1: selecting invalid altsetting 1 [ 634.652191][ T6031] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 634.658971][ T6031] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 634.662531][ T6031] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 634.665549][ T6031] usb 12-1: media controller created [ 634.675492][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.684813][ T63] Bluetooth: hci0: command tx timeout [ 634.756371][T26160] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 634.761183][T26160] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 634.776634][T26160] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 634.786539][T26160] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 634.844525][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 634.848331][T26160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.863851][T26160] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.870411][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.872715][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.882763][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.885045][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.896378][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6840'. [ 634.982263][T26231] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.010107][T26160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.163302][T26160] veth0_vlan: entered promiscuous mode [ 635.171826][T26160] veth1_vlan: entered promiscuous mode [ 635.192770][T26160] veth0_macvtap: entered promiscuous mode [ 635.198168][T26160] veth1_macvtap: entered promiscuous mode [ 635.207851][T26160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.216209][T26160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.222762][T26160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.224783][T12358] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 635.225779][T26160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.231656][T26160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.237223][T26160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.290916][ T8689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.293970][ T8689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.310775][ T8687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.313355][ T8687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.385779][T12358] usb 14-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 635.389388][T12358] usb 14-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 635.392551][T12358] usb 14-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 635.414924][T12358] usb 14-1: config 1 interface 0 has no altsetting 0 [ 635.420401][T12358] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.424105][T12358] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.435017][T12358] usb 14-1: Product: syz [ 635.436851][T12358] usb 14-1: Manufacturer: syz [ 635.438829][T12358] usb 14-1: SerialNumber: syz [ 635.444246][T26249] fuse: Unknown parameter 'f°0x0000000000000003' [ 635.459488][T26231] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 635.465533][T26231] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 635.490947][T26252] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6853'. [ 635.673942][ T8689] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 635.688183][T12358] cdc_ether 14-1:1.0: probe with driver cdc_ether failed with error -71 [ 635.699687][T12358] usb 14-1: USB disconnect, device number 4 [ 635.805176][ T6031] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 635.808804][ T6031] zl10353_read_register: readreg error (reg=127, ret==-110) [ 635.815617][ T6031] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 635.838760][ T6031] usb 12-1: USB disconnect, device number 47 [ 635.874512][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 636.217497][ T40] audit: type=1400 audit(637.050:8411): avc: denied { relabelfrom } for pid=26268 comm="syz.9.6857" name="NETLINK" dev="sockfs" ino=114935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 636.226296][ T40] audit: type=1400 audit(637.050:8412): avc: denied { relabelto } for pid=26268 comm="syz.9.6857" name="NETLINK" dev="sockfs" ino=114935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 636.330300][ T40] audit: type=1400 audit(637.160:8413): avc: denied { mounton } for pid=26279 comm="syz.0.6861" path="mnt:[4026534402]" dev="nsfs" ino=4026534402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 636.362066][T26285] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6863'. [ 636.493832][T26298] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 636.499862][T26298] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 636.754653][ T63] Bluetooth: hci0: command tx timeout [ 636.914573][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.269788][T26297] overlayfs: statfs failed on './file0' [ 637.272188][T26298] overlayfs: statfs failed on './file0' [ 637.389858][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.392647][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.397270][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.405792][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.408300][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.410708][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.418165][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.418679][T26313] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6873'. [ 637.421923][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.431254][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.434168][T26310] ip6t_srh: unknown srh invflags 7D00 [ 637.468317][ T40] audit: type=1400 audit(638.300:8414): avc: denied { map } for pid=26316 comm="syz.8.6875" path="/proc/24/net/pfkey" dev="proc" ino=4026534505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 637.550325][ T40] audit: type=1400 audit(638.380:8415): avc: denied { read } for pid=26321 comm="syz.8.6877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 637.592769][T26330] fuse: Bad value for 'fd' [ 637.807870][T26346] lo speed is unknown, defaulting to 1000 [ 637.820401][T26346] lo speed is unknown, defaulting to 1000 [ 637.829377][T26346] lo speed is unknown, defaulting to 1000 [ 637.889677][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6886'. [ 637.898857][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6886'. [ 637.964407][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.983727][T26346] infiniband syz0: set active [ 637.990058][T26346] infiniband syz0: added lo [ 638.004907][ T34] lo speed is unknown, defaulting to 1000 [ 638.038580][T26346] RDS/IB: syz0: added [ 638.040667][T26346] smc: adding ib device syz0 with port count 1 [ 638.042641][T26346] smc: ib device syz0 port 1 has pnetid [ 638.047508][T12358] lo speed is unknown, defaulting to 1000 [ 638.051532][T26346] lo speed is unknown, defaulting to 1000 [ 638.163666][ T40] audit: type=1400 audit(638.990:8416): avc: denied { append } for pid=26367 comm="syz.8.6890" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 638.167153][T26346] lo speed is unknown, defaulting to 1000 [ 638.284160][T26346] lo speed is unknown, defaulting to 1000 [ 638.380937][T26346] lo speed is unknown, defaulting to 1000 [ 638.431882][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6900'. [ 638.471781][T26408] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6901'. [ 638.507933][T26346] lo speed is unknown, defaulting to 1000 [ 638.612336][T26346] lo speed is unknown, defaulting to 1000 [ 638.718817][T26414] loop4: detected capacity change from 0 to 7 [ 638.726762][T17146] Dev loop4: unable to read RDB block 7 [ 638.728589][T17146] loop4: AHDI p3 p4 [ 638.730086][T17146] loop4: partition table partially beyond EOD, truncated [ 638.732695][T17146] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 638.734674][T26346] lo speed is unknown, defaulting to 1000 [ 638.750812][T26414] Dev loop4: unable to read RDB block 7 [ 638.752664][T26414] loop4: AHDI p3 p4 [ 638.753941][T26414] loop4: partition table partially beyond EOD, truncated [ 638.757294][T26414] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 638.842503][T26346] lo speed is unknown, defaulting to 1000 [ 638.845887][ T63] Bluetooth: hci0: command tx timeout [ 638.916523][ T60] hid-generic 07FF:18000:0003.0017: item fetching failed at offset 0/4 [ 638.919838][ T60] hid-generic 07FF:18000:0003.0017: probe with driver hid-generic failed with error -22 [ 638.994465][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 638.998505][T26346] lo speed is unknown, defaulting to 1000 [ 639.256207][T26422] QAT: Invalid ioctl -2144835806 [ 639.297709][T26427] netlink: 'syz.7.6906': attribute type 6 has an invalid length. [ 639.305882][T26427] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.447601][T26433] netlink: 'syz.9.6909': attribute type 21 has an invalid length. [ 639.463042][T26439] ceph: No mds server is up or the cluster is laggy [ 639.572515][T26454] netlink: 'syz.9.6912': attribute type 21 has an invalid length. [ 639.576494][T26454] __nla_validate_parse: 2 callbacks suppressed [ 639.576507][T26454] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6912'. [ 639.708718][T26459] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 639.776701][T26470] cgroup: Unknown subsys name 'hash' [ 639.861056][T26476] random: crng reseeded on system resumption [ 639.888833][T26478] ip6tnl1: entered promiscuous mode [ 639.890988][T26478] ip6tnl1: entered allmulticast mode [ 640.062415][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.065514][T26491] IPv6: NLM_F_CREATE should be set when creating new route [ 640.072089][T26495] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6926'. [ 640.073116][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.079699][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.082144][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.087255][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.089781][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.092187][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.098076][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.101252][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.108084][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.111259][T26491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 640.279790][ T40] audit: type=1400 audit(641.110:8417): avc: denied { map } for pid=26504 comm="syz.8.6929" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 640.290252][ T40] audit: type=1400 audit(641.110:8418): avc: denied { execute } for pid=26504 comm="syz.8.6929" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 640.317150][ T40] audit: type=1400 audit(641.150:8419): avc: denied { ioctl } for pid=26511 comm="syz.9.6932" path="socket:[114436]" dev="sockfs" ino=114436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 640.469915][T26525] No such timeout policy "syz0" [ 640.537224][T26513] pimreg: entered allmulticast mode [ 640.809761][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6941'. [ 640.813277][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6941'. [ 640.817845][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6941'. [ 640.818926][T26543] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 640.821335][T26542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6941'. [ 640.829038][T26542] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6941'. [ 640.910732][T26547] FAULT_INJECTION: forcing a failure. [ 640.910732][T26547] name failslab, interval 1, probability 0, space 0, times 0 [ 640.917277][ T63] Bluetooth: hci0: command tx timeout [ 640.920357][T26547] CPU: 0 UID: 0 PID: 26547 Comm: syz.9.6942 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 640.920383][T26547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 640.920395][T26547] Call Trace: [ 640.920402][T26547] [ 640.920409][T26547] dump_stack_lvl+0x16c/0x1f0 [ 640.920446][T26547] should_fail_ex+0x512/0x640 [ 640.920481][T26547] ? fs_reclaim_acquire+0xae/0x150 [ 640.920505][T26547] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 640.920524][T26547] should_failslab+0xc2/0x120 [ 640.920544][T26547] __kmalloc_noprof+0xd2/0x510 [ 640.920576][T26547] tomoyo_realpath_from_path+0xc2/0x6e0 [ 640.920599][T26547] ? tomoyo_profile+0x47/0x60 [ 640.920622][T26547] tomoyo_path_number_perm+0x245/0x580 [ 640.920647][T26547] ? tomoyo_path_number_perm+0x237/0x580 [ 640.920675][T26547] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 640.920703][T26547] ? find_held_lock+0x2b/0x80 [ 640.920749][T26547] ? find_held_lock+0x2b/0x80 [ 640.920772][T26547] ? hook_file_ioctl_common+0x145/0x410 [ 640.920799][T26547] ? __fget_files+0x20e/0x3c0 [ 640.920822][T26547] security_file_ioctl+0x9b/0x240 [ 640.920843][T26547] __x64_sys_ioctl+0xb7/0x210 [ 640.920868][T26547] do_syscall_64+0xcd/0x4c0 [ 640.920889][T26547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.920908][T26547] RIP: 0033:0x7f1df3b8e9a9 [ 640.920924][T26547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.920942][T26547] RSP: 002b:00007f1df4a96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 640.920959][T26547] RAX: ffffffffffffffda RBX: 00007f1df3db5fa0 RCX: 00007f1df3b8e9a9 [ 640.920972][T26547] RDX: 0000200000000380 RSI: 000000004070aea0 RDI: 0000000000000004 [ 640.920984][T26547] RBP: 00007f1df4a96090 R08: 0000000000000000 R09: 0000000000000000 [ 640.920995][T26547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.921006][T26547] R13: 0000000000000000 R14: 00007f1df3db5fa0 R15: 00007ffd43386d18 [ 640.921031][T26547] [ 640.921040][T26547] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.084498][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 641.228704][T26572] xt_hashlimit: size too large, truncated to 1048576 [ 641.376886][T26577] fuse: Unknown parameter '00000000000000000000003' [ 641.604521][T26584] can0: slcan on ttyS3. [ 641.675501][T26584] can0 (unregistered): slcan off ttyS3. [ 641.778632][T26590] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6956'. [ 641.783688][T26590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6956'. [ 641.844079][T26592] FAULT_INJECTION: forcing a failure. [ 641.844079][T26592] name failslab, interval 1, probability 0, space 0, times 0 [ 641.849413][T26592] CPU: 2 UID: 0 PID: 26592 Comm: syz.7.6957 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 641.849437][T26592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 641.849448][T26592] Call Trace: [ 641.849454][T26592] [ 641.849461][T26592] dump_stack_lvl+0x16c/0x1f0 [ 641.849481][T26592] should_fail_ex+0x512/0x640 [ 641.849505][T26592] ? fs_reclaim_acquire+0xae/0x150 [ 641.849532][T26592] ? tomoyo_encode2+0x100/0x3e0 [ 641.849550][T26592] should_failslab+0xc2/0x120 [ 641.849567][T26592] __kmalloc_noprof+0xd2/0x510 [ 641.849597][T26592] tomoyo_encode2+0x100/0x3e0 [ 641.849617][T26592] tomoyo_encode+0x29/0x50 [ 641.849631][T26592] tomoyo_realpath_from_path+0x18f/0x6e0 [ 641.849649][T26592] ? tomoyo_profile+0x47/0x60 [ 641.849672][T26592] tomoyo_path_number_perm+0x245/0x580 [ 641.849699][T26592] ? tomoyo_path_number_perm+0x237/0x580 [ 641.849725][T26592] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.849749][T26592] ? find_held_lock+0x2b/0x80 [ 641.849798][T26592] ? find_held_lock+0x2b/0x80 [ 641.849818][T26592] ? hook_file_ioctl_common+0x145/0x410 [ 641.849846][T26592] ? __fget_files+0x20e/0x3c0 [ 641.849868][T26592] security_file_ioctl+0x9b/0x240 [ 641.849885][T26592] __x64_sys_ioctl+0xb7/0x210 [ 641.849908][T26592] do_syscall_64+0xcd/0x4c0 [ 641.849926][T26592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.849943][T26592] RIP: 0033:0x7f432a38e9a9 [ 641.849956][T26592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.849974][T26592] RSP: 002b:00007f432b1ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.849993][T26592] RAX: ffffffffffffffda RBX: 00007f432a5b5fa0 RCX: 00007f432a38e9a9 [ 641.850007][T26592] RDX: 0000200000000380 RSI: 000000004070aea0 RDI: 0000000000000004 [ 641.850016][T26592] RBP: 00007f432b1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 641.850026][T26592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.850036][T26592] R13: 0000000000000000 R14: 00007f432a5b5fa0 R15: 00007ffc6baaa068 [ 641.850059][T26592] [ 641.850077][T26592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.056115][T26595] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 642.114461][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 642.301058][T26609] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6963'. [ 642.358718][T26612] netlink: 'syz.8.6964': attribute type 2 has an invalid length. [ 642.363727][T26612] nbd: must specify a device to reconfigure [ 642.408918][T26612] xfrm0 speed is unknown, defaulting to 1000 [ 642.412634][T26612] lo speed is unknown, defaulting to 1000 [ 642.443050][ T40] audit: type=1400 audit(643.270:8420): avc: denied { read } for pid=26611 comm="syz.8.6964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 643.114890][T26632] netlink: 'syz.7.6969': attribute type 12 has an invalid length. [ 643.154592][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 643.239196][T26634] xfrm0 speed is unknown, defaulting to 1000 [ 643.249624][T26634] lo speed is unknown, defaulting to 1000 [ 643.376754][ T40] audit: type=1326 audit(644.210:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26633 comm="syz.7.6970" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f432a38e9a9 code=0x0 [ 643.949706][ T40] audit: type=1400 audit(644.780:8422): avc: denied { map } for pid=26663 comm="syz.8.6979" path="socket:[117769]" dev="sockfs" ino=117769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 643.998831][T26666] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 644.161274][T26672] comedi: valid board names for 8255 driver are: [ 644.163848][T26672] 8255 [ 644.165747][T26672] comedi: valid board names for vmk80xx driver are: [ 644.168470][T26672] vmk80xx [ 644.169811][T26672] comedi: valid board names for usbduxsigma driver are: [ 644.173148][T26672] usbduxsigma [ 644.175334][T26672] comedi: valid board names for usbduxfast driver are: [ 644.178285][T26672] usbduxfast [ 644.179819][T26672] comedi: valid board names for usbdux driver are: [ 644.180552][T26674] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.182441][T26672] usbdux [ 644.186668][T26672] comedi: valid board names for ni6501 driver are: [ 644.189374][T26672] ni6501 [ 644.190642][T26672] comedi: valid board names for dt9812 driver are: [ 644.193481][T26672] dt9812 [ 644.195874][T26672] comedi: valid board names for ni_labpc_cs driver are: [ 644.198438][T26672] ni_labpc_cs [ 644.199531][T26672] comedi: valid board names for ni_daq_700 driver are: [ 644.201673][T26672] ni_daq_700 [ 644.202853][T26672] comedi: valid board names for labpc_pci driver are: [ 644.204463][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 644.206210][T26672] labpc_pci [ 644.208815][T26672] comedi: valid board names for adl_pci9118 driver are: [ 644.211638][T26672] pci9118dg [ 644.213043][T26672] pci9118hg [ 644.215125][T26672] pci9118hr [ 644.216627][T26672] comedi: valid board names for 8255_pci driver are: [ 644.219407][T26672] 8255_pci [ 644.220767][T26672] comedi: valid board names for s526 driver are: [ 644.226715][T26672] s526 [ 644.227740][T26672] comedi: valid board names for multiq3 driver are: [ 644.230186][T26672] multiq3 [ 644.231503][T26672] comedi: valid board names for pcmuio driver are: [ 644.234229][T26672] pcmuio48 [ 644.236321][T26672] pcmuio96 [ 644.237699][T26672] comedi: valid board names for pcmmio driver are: [ 644.240430][T26672] pcmmio [ 644.241699][T26672] comedi: valid board names for pcmda12 driver are: [ 644.245078][T26672] pcmda12 [ 644.246401][T26672] comedi: valid board names for pcmad driver are: [ 644.249026][T26672] pcmad12 [ 644.250360][T26672] pcmad16 [ 644.251750][T26672] comedi: valid board names for ni_labpc driver are: [ 644.255182][T26672] lab-pc-1200 [ 644.256674][T26672] lab-pc-1200ai [ 644.258225][T26672] lab-pc+ [ 644.259551][T26672] comedi: valid board names for atmio16 driver are: [ 644.262275][T26672] atmio16 [ 644.263572][T26672] atmio16d [ 644.265125][T26672] comedi: valid board names for ni_at_ao driver are: [ 644.267918][T26672] at-ao-6 [ 644.269283][T26672] at-ao-10 [ 644.270640][T26672] comedi: valid board names for ni_at_a2150 driver are: [ 644.273474][T26672] ni_at_a2150 [ 644.275406][T26672] comedi: valid board names for adq12b driver are: [ 644.277464][T26672] adq12b [ 644.278408][T26672] comedi: valid board names for mpc624 driver are: [ 644.280436][T26672] mpc624 [ 644.281373][T26672] comedi: valid board names for c6xdigio driver are: [ 644.283428][T26672] c6xdigio [ 644.284538][T26672] comedi: valid board names for aio_iiro_16 driver are: [ 644.286697][T26672] aio_iiro_16 [ 644.287798][T26672] comedi: valid board names for aio_aio12_8 driver are: [ 644.289985][T26672] aio_aio12_8 [ 644.291067][T26672] aio_ai12_8 [ 644.292154][T26672] aio_ao12_4 [ 644.293211][T26672] comedi: valid board names for fl512 driver are: [ 644.295694][T26672] fl512 [ 644.296581][T26672] comedi: valid board names for dmm32at driver are: [ 644.298619][T26672] dmm32at [ 644.299642][T26672] comedi: valid board names for dt282x driver are: [ 644.301668][T26672] dt2821 [ 644.302610][T26672] dt2821-f [ 644.303641][T26672] dt2821-g [ 644.305187][T26672] dt2823 [ 644.306140][T26672] dt2824-pgh [ 644.307204][T26672] dt2824-pgl [ 644.308264][T26672] dt2825 [ 644.309208][T26672] dt2827 [ 644.310203][T26672] dt2828 [ 644.311097][T26672] dt2829 [ 644.312030][T26672] dt21-ez [ 644.313024][T26672] dt23-ez [ 644.314017][T26672] dt24-ez [ 644.315428][T26672] dt24-ez-pgl [ 644.316529][T26672] comedi: valid board names for dt2817 driver are: [ 644.318541][T26672] dt2817 [ 644.319508][T26672] comedi: valid board names for dt2815 driver are: [ 644.321542][T26672] dt2815 [ 644.322488][T26672] comedi: valid board names for dt2814 driver are: [ 644.324935][T26672] dt2814 [ 644.325883][T26672] comedi: valid board names for dt2811 driver are: [ 644.327912][T26672] dt2811-pgh [ 644.328999][T26672] dt2811-pgl [ 644.330083][T26672] comedi: valid board names for dt2801 driver are: [ 644.332101][T26672] dt2801 [ 644.333030][T26672] comedi: valid board names for das6402 driver are: [ 644.335486][T26672] das6402-12 [ 644.336556][T26672] das6402-16 [ 644.337623][T26672] comedi: valid board names for das1800 driver are: [ 644.339696][T26672] das-1701st [ 644.340761][T26672] das-1701st-da [ 644.341901][T26672] das-1702st [ 644.342942][T26672] das-1702st-da [ 644.344095][T26672] das-1702hr [ 644.345605][T26672] das-1702hr-da [ 644.346748][T26672] das-1701ao [ 644.347833][T26672] das-1702ao [ 644.348897][T26672] das-1801st [ 644.349986][T26672] das-1801st-da [ 644.351174][T26672] das-1802st [ 644.352237][T26672] das-1802st-da [ 644.353330][T26672] das-1802hr [ 644.354792][T26672] das-1802hr-da [ 644.356076][T26672] das-1801hc [ 644.357154][T26672] das-1802hc [ 644.358238][T26672] das-1801ao [ 644.359317][T26672] das-1802ao [ 644.360417][T26672] comedi: valid board names for das800 driver are: [ 644.362432][T26672] das-800 [ 644.363429][T26672] cio-das800 [ 644.364952][T26672] das-801 [ 644.365937][T26672] cio-das801 [ 644.367004][T26672] das-802 [ 644.368021][T26672] cio-das802 [ 644.369087][T26672] cio-das802/16 [ 644.370294][T26672] comedi: valid board names for isa-das08 driver are: [ 644.372409][T26672] isa-das08 [ 644.373447][T26672] das08-pgm [ 644.374930][T26672] das08-pgh [ 644.376013][T26672] das08-pgl [ 644.377322][T26672] das08-aoh [ 644.378386][T26672] das08-aol [ 644.379437][T26672] das08-aom [ 644.380497][T26672] das08/jr-ao [ 644.381573][T26672] das08jr-16-ao [ 644.382710][T26672] pc104-das08 [ 644.383819][T26672] das08jr/16 [ 644.385303][T26672] comedi: valid board names for das16m1 driver are: [ 644.387360][T26672] das16m1 [ 644.388372][T26672] comedi: valid board names for dac02 driver are: [ 644.390362][T26672] dac02 [ 644.391281][T26672] comedi: valid board names for rti802 driver are: [ 644.393318][T26672] rti802 [ 644.394265][T26672] comedi: valid board names for rti800 driver are: [ 644.396718][T26672] rti800 [ 644.397667][T26672] rti815 [ 644.398636][T26672] comedi: valid board names for pcm3724 driver are: [ 644.400818][T26672] pcm3724 [ 644.401793][T26672] comedi: valid board names for pcl818 driver are: [ 644.403828][T26672] pcl818l [ 644.405225][T26672] pcl818h [ 644.406206][T26672] pcl818hd [ 644.407190][T26672] pcl818hg [ 644.408218][T26672] pcl818 [ 644.409167][T26672] pcl718 [ 644.410146][T26672] pcm3718 [ 644.411139][T26672] comedi: valid board names for pcl816 driver are: [ 644.413178][T26672] pcl816 [ 644.414124][T26672] pcl814b [ 644.415645][T26672] comedi: valid board names for pcl812 driver are: [ 644.417669][T26672] pcl812 [ 644.418613][T26672] pcl812pg [ 644.419649][T26672] acl8112pg [ 644.420701][T26672] acl8112dg [ 644.421746][T26672] acl8112hg [ 644.422788][T26672] a821pgl [ 644.423848][T26672] a821pglnda [ 644.425346][T26672] a821pgh [ 644.426331][T26672] a822pgl [ 644.427323][T26672] a822pgh [ 644.428329][T26672] a823pgl [ 644.429323][T26672] a823pgh [ 644.430296][T26672] pcl813 [ 644.431223][T26672] pcl813b [ 644.432213][T26672] acl8113 [ 644.433219][T26672] iso813 [ 644.434172][T26672] acl8216 [ 644.435606][T26672] a826pg [ 644.436566][T26672] comedi: valid board names for pcl730 driver are: [ 644.438576][T26672] pcl730 [ 644.439530][T26672] iso730 [ 644.440480][T26672] acl7130 [ 644.441462][T26672] pcm3730 [ 644.442450][T26672] pcl725 [ 644.443407][T26672] p8r8dio [ 644.444810][T26672] acl7225b [ 644.444870][ T838] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 644.445811][T26672] p16r16dio [ 644.445825][T26672] pcl733 [ 644.445830][T26672] pcl734 [ 644.445834][T26672] opmm-1616-xt [ 644.445838][T26672] pearl-mm-p [ 644.445842][T26672] ir104-pbf [ 644.445846][T26672] comedi: valid board names for pcl726 driver are: [ 644.445852][T26672] pcl726 [ 644.445856][T26672] pcl727 [ 644.445860][T26672] pcl728 [ 644.445864][T26672] acl6126 [ 644.445868][T26672] acl6128 [ 644.445872][T26672] comedi: valid board names for pcl724 driver are: [ 644.445877][T26672] pcl724 [ 644.445881][T26672] pcl722 [ 644.445885][T26672] pcl731 [ 644.445889][T26672] acl7122 [ 644.445893][T26672] acl7124 [ 644.445897][T26672] pet48dio [ 644.445901][T26672] pcmio48 [ 644.445905][T26672] onyx-mm-dio [ 644.445909][T26672] comedi: valid board names for pcl711 driver are: [ 644.445914][T26672] pcl711 [ 644.445919][T26672] pcl711b [ 644.445923][T26672] acl8112hg [ 644.445927][T26672] acl8112dg [ 644.445931][T26672] comedi: valid board names for amplc_pc263 driver are: [ 644.445936][T26672] pc263 [ 644.445940][T26672] comedi: valid board names for amplc_pc236 driver are: [ 644.445946][T26672] pc36at [ 644.445950][T26672] comedi: valid board names for amplc_dio200 driver are: [ 644.445955][T26672] pc212e [ 644.445959][T26672] pc214e [ 644.445963][T26672] pc215e [ 644.445967][T26672] pc218e [ 644.445971][T26672] pc272e [ 644.445974][T26672] comedi: valid board names for comedi_parport driver are: [ 644.445980][T26672] comedi_parport [ 644.445984][T26672] comedi: valid board names for comedi_test driver are: [ 644.445989][T26672] comedi_test [ 644.445993][T26672] comedi: valid board names for comedi_bond driver are: [ 644.445999][T26672] comedi_bond [ 644.655919][ T838] usb 13-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1935, setting to 1024 [ 644.659692][ T838] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 644.662983][ T838] usb 13-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 644.666366][ T838] usb 13-1: config 1 interface 0 has no altsetting 0 [ 644.670401][ T838] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.673433][ T838] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.676183][ T838] usb 13-1: Product: syz [ 644.677585][ T838] usb 13-1: Manufacturer: syz [ 644.679204][ T838] usb 13-1: SerialNumber: syz [ 644.686178][T26674] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 644.688662][T26674] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 644.901541][ T838] cdc_ether 13-1:1.0: probe with driver cdc_ether failed with error -71 [ 644.910335][ T838] usb 13-1: USB disconnect, device number 25 [ 645.102137][ T40] audit: type=1400 audit(645.930:8423): avc: denied { accept } for pid=26676 comm="syz.7.6984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 645.104315][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 645.114950][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 645.114978][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 645.114993][ T63] Workqueue: hci1 hci_rx_work [ 645.115016][ T63] Call Trace: [ 645.115023][ T63] [ 645.115032][ T63] dump_stack_lvl+0x16c/0x1f0 [ 645.115053][ T63] sysfs_warn_dup+0x7f/0xa0 [ 645.115096][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 645.115128][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 645.115156][ T63] ? find_held_lock+0x2b/0x80 [ 645.115184][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 645.115205][ T63] kobject_add_internal+0x2c4/0x9b0 [ 645.115231][ T63] kobject_add+0x16e/0x240 [ 645.115252][ T63] ? __pfx_kobject_add+0x10/0x10 [ 645.115272][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 645.115288][ T63] ? kobject_put+0xab/0x5a0 [ 645.115314][ T63] device_add+0x288/0x1a70 [ 645.115338][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 645.115385][ T63] ? __pfx_device_add+0x10/0x10 [ 645.115408][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 645.115443][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 645.115466][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 645.115503][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 645.115528][ T63] ? hci_event_packet+0x459/0x11c0 [ 645.115564][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 645.115597][ T63] hci_le_meta_evt+0x357/0x5e0 [ 645.115639][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 645.115672][ T63] hci_event_packet+0x682/0x11c0 [ 645.115698][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 645.115718][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 645.115749][ T63] ? kcov_remote_start+0x3c9/0x6d0 [ 645.115772][ T63] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.115807][ T63] hci_rx_work+0x2c5/0x16b0 [ 645.115827][ T63] ? rcu_is_watching+0x12/0xc0 [ 645.115853][ T63] process_one_work+0x9cf/0x1b70 [ 645.115887][ T63] ? __pfx_process_one_work+0x10/0x10 [ 645.115914][ T63] ? assign_work+0x1a0/0x250 [ 645.115930][ T63] worker_thread+0x6c8/0xf10 [ 645.115960][ T63] ? __pfx_worker_thread+0x10/0x10 [ 645.115977][ T63] kthread+0x3c5/0x780 [ 645.115992][ T63] ? __pfx_kthread+0x10/0x10 [ 645.116011][ T63] ? rcu_is_watching+0x12/0xc0 [ 645.116035][ T63] ? __pfx_kthread+0x10/0x10 [ 645.116056][ T63] ret_from_fork+0x5d4/0x6f0 [ 645.116092][ T63] ? __pfx_kthread+0x10/0x10 [ 645.116111][ T63] ret_from_fork_asm+0x1a/0x30 [ 645.116148][ T63] [ 645.116199][ T63] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 645.220904][ T63] Bluetooth: hci1: failed to register connection device [ 645.234464][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 645.403532][ C3] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 645.407312][ C3] sr 2:0:0:0: [sr0] tag#29 CDB: Test Unit Ready [ 645.428703][ T40] audit: type=1400 audit(646.260:8424): avc: denied { read write } for pid=26160 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.438713][ T40] audit: type=1400 audit(646.260:8425): avc: denied { open } for pid=26160 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.452108][ T40] audit: type=1400 audit(646.260:8426): avc: denied { ioctl } for pid=26160 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=666 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.460533][ T40] audit: type=1400 audit(646.290:8427): avc: denied { accept } for pid=26679 comm="syz.7.6985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.468473][ T40] audit: type=1400 audit(646.290:8428): avc: denied { create } for pid=26681 comm="syz.8.6986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 645.475979][ T40] audit: type=1400 audit(646.290:8429): avc: denied { write } for pid=26679 comm="syz.7.6985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 645.699649][T26698] overlay: Unknown parameter 'euid' [ 645.844680][T26702] ./cgroup: Can't lookup blockdev [ 645.845339][ T6031] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 646.038538][ T6031] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.043165][ T6031] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.053347][ T6031] usb 13-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 646.057058][ T6031] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.063910][ T6031] usb 13-1: config 0 descriptor?? [ 646.170835][T26727] binder: 26726:26727 ioctl c0306201 2000000004c0 returned -14 [ 646.174636][T26727] binder: 26726:26727 ioctl c0306201 2000000001c0 returned -14 [ 646.179090][T26727] binder: 26726:26727 ioctl c0306201 200000000580 returned -14 [ 646.302572][ T6031] usbhid 13-1:0.0: can't add hid device: -71 [ 646.303832][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 646.313372][ T6031] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 646.325665][ T6031] usb 13-1: USB disconnect, device number 26 [ 646.490158][T26740] fuse: Unknown parameter 'r' [ 646.717563][ T5999] usb 12-1: new high-speed USB device number 48 using dummy_hcd [ 646.860447][ T5999] usb 12-1: device descriptor read/64, error -71 [ 647.143240][ T5999] usb 12-1: new high-speed USB device number 49 using dummy_hcd [ 647.287840][ T5999] usb 12-1: device descriptor read/64, error -71 [ 647.405080][ T5999] usb usb12-port1: attempt power cycle [ 647.415567][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 647.466611][T26766] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 647.515335][T26772] Bluetooth: MGMT ver 1.23 [ 647.522520][T26772] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 647.527472][T26772] SET target dimension over the limit! [ 647.565749][ T40] kauditd_printk_skb: 117 callbacks suppressed [ 647.565761][ T40] audit: type=1400 audit(648.299:8547): avc: denied { getopt } for pid=26773 comm="syz.9.7018" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 647.604915][ T40] audit: type=1400 audit(648.327:8548): avc: denied { create } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.612574][ T40] audit: type=1400 audit(648.336:8549): avc: denied { create } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 647.618432][ T40] audit: type=1400 audit(648.336:8550): avc: denied { bind } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 647.627361][ T40] audit: type=1400 audit(648.336:8551): avc: denied { setopt } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 647.635496][ T40] audit: type=1400 audit(648.336:8552): avc: denied { getopt } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 647.641907][ T40] audit: type=1400 audit(648.336:8553): avc: denied { write } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.647855][ T40] audit: type=1400 audit(648.336:8554): avc: denied { nlmsg_write } for pid=26777 comm="syz.9.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 647.790445][ T5999] usb 12-1: new high-speed USB device number 50 using dummy_hcd [ 647.812551][ T5999] usb 12-1: device descriptor read/8, error -71 [ 647.875883][ T836] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 648.036377][ T836] usb 13-1: Using ep0 maxpacket: 8 [ 648.044458][ T836] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 648.048472][ T836] usb 13-1: config 0 has no interface number 0 [ 648.051075][ T836] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 648.055467][ T836] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 648.064115][ T836] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.068081][ T5999] usb 12-1: new high-speed USB device number 51 using dummy_hcd [ 648.069239][ T836] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 648.075036][ T836] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 648.081245][ T836] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 648.085079][ T836] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.091056][ T836] usb 13-1: config 0 descriptor?? [ 648.094330][ T5999] usb 12-1: device descriptor read/8, error -71 [ 648.105900][T26797] fuse: Bad value for 'fd' [ 648.106495][ T836] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 648.108919][ T40] audit: type=1400 audit(648.795:8555): avc: denied { create } for pid=26796 comm="syz.9.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 648.117509][ T40] audit: type=1400 audit(648.795:8556): avc: denied { getopt } for pid=26796 comm="syz.9.7025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 648.210254][T26804] 9pnet_virtio: no channels available for device syz [ 648.218620][ T5999] usb usb12-port1: unable to enumerate USB device [ 648.244544][T26804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 648.312338][T26780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.316965][T26780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.321287][T26780] ldusb 13-1:0.55: Couldn't submit interrupt_in_urb -90 [ 648.538108][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 649.639243][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 649.707264][T26838] __nla_validate_parse: 6 callbacks suppressed [ 649.707282][T26838] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7037'. [ 649.713826][T26838] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 649.979993][T26861] netlink: 'syz.0.7043': attribute type 8 has an invalid length. [ 650.021084][T26863] trusted_key: encrypted_key: master key parameter is missing [ 650.102458][T26858] FAULT_INJECTION: forcing a failure. [ 650.102458][T26858] name failslab, interval 1, probability 0, space 0, times 0 [ 650.106883][T26858] CPU: 1 UID: 0 PID: 26858 Comm: syz.7.7042 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 650.106899][T26858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 650.106906][T26858] Call Trace: [ 650.106910][T26858] [ 650.106915][T26858] dump_stack_lvl+0x16c/0x1f0 [ 650.106930][T26858] should_fail_ex+0x512/0x640 [ 650.106947][T26858] ? fs_reclaim_acquire+0xae/0x150 [ 650.106962][T26858] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 650.106974][T26858] should_failslab+0xc2/0x120 [ 650.106984][T26858] __kmalloc_noprof+0xd2/0x510 [ 650.107004][T26858] tomoyo_realpath_from_path+0xc2/0x6e0 [ 650.107016][T26858] ? tomoyo_profile+0x47/0x60 [ 650.107043][T26858] tomoyo_path_number_perm+0x245/0x580 [ 650.107058][T26858] ? tomoyo_path_number_perm+0x237/0x580 [ 650.107075][T26858] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 650.107092][T26858] ? find_held_lock+0x2b/0x80 [ 650.107119][T26858] ? find_held_lock+0x2b/0x80 [ 650.107132][T26858] ? hook_file_ioctl_common+0x145/0x410 [ 650.107148][T26858] ? __fget_files+0x20e/0x3c0 [ 650.107161][T26858] security_file_ioctl+0x9b/0x240 [ 650.107173][T26858] __x64_sys_ioctl+0xb7/0x210 [ 650.107189][T26858] do_syscall_64+0xcd/0x4c0 [ 650.107201][T26858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.107213][T26858] RIP: 0033:0x7f432a38e9a9 [ 650.107233][T26858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.107245][T26858] RSP: 002b:00007f432b1ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.107256][T26858] RAX: ffffffffffffffda RBX: 00007f432a5b5fa0 RCX: 00007f432a38e9a9 [ 650.107263][T26858] RDX: 0000200000000000 RSI: 00000000c0606610 RDI: 0000000000000003 [ 650.107269][T26858] RBP: 00007f432b1ab090 R08: 0000000000000000 R09: 0000000000000000 [ 650.107276][T26858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.107282][T26858] R13: 0000000000000000 R14: 00007f432a5b5fa0 R15: 00007ffc6baaa068 [ 650.107296][T26858] [ 650.107503][T26858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.227507][T26877] xt_TPROXY: Can be used only with -p tcp or -p udp [ 650.234352][T26878] netlink: 'syz.9.7048': attribute type 10 has an invalid length. [ 650.247140][T26878] team0: Device hsr_slave_0 failed to register rx_handler [ 650.255633][T26881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7050'. [ 650.625331][T26891] openvswitch: netlink: Flow key attribute not present in set flow. [ 650.702781][T26894] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7054'. [ 650.706035][T26894] netlink: 'syz.7.7054': attribute type 6 has an invalid length. [ 650.709162][T26894] netlink: 'syz.7.7054': attribute type 5 has an invalid length. [ 650.711964][T26894] netlink: 'syz.7.7054': attribute type 4 has an invalid length. [ 650.852837][T22783] usb 13-1: USB disconnect, device number 27 [ 650.860737][T22783] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 650.885578][T26902] ntfs3(nbd8): try to read out of volume at offset 0x0 [ 650.979948][T26908] ip6t_srh: unknown srh match flags 4000 [ 651.038346][T26912] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7062'. [ 651.209146][T26926] fuse: Bad value for 'fd' [ 651.243111][T26875] comedi comedi1: reset error (fatal) [ 651.245695][T26932] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 651.325740][ T836] hid-generic 0006:0003:0012.0018: collection stack underflow [ 651.329943][ T836] hid-generic 0006:0003:0012.0018: item 0 2 0 12 parsing failed [ 651.333549][ T836] hid-generic 0006:0003:0012.0018: probe with driver hid-generic failed with error -22 [ 651.430117][T26946] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7073'. [ 651.489078][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7075'. [ 651.493812][T26951] smc: net device bond0 applied user defined pnetid SYZ1 [ 651.502612][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7075'. [ 651.637961][T26951] team0: Port device team_slave_0 removed [ 651.822499][T26967] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 651.832722][T26970] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7082'. [ 651.864304][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 651.873538][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 651.879251][T26975] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 651.926398][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7079'. [ 651.968870][T26980] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.974947][T26980] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 652.035738][T26984] netlink: 200328 bytes leftover after parsing attributes in process `syz.0.7085'. [ 652.800443][T26977] overlayfs: statfs failed on './file0' [ 652.802913][T26980] overlayfs: statfs failed on './file0' [ 652.953001][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 652.953018][ T40] audit: type=1400 audit(653.322:8625): avc: denied { mounton } for pid=27009 comm="syz.8.7095" path="/71/file1" dev="tmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 652.966851][ T40] audit: type=1400 audit(653.341:8626): avc: denied { setopt } for pid=27009 comm="syz.8.7095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 652.973106][T27013] netlink: 'syz.0.7096': attribute type 25 has an invalid length. [ 652.977648][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 653.074580][T27017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27017 comm=syz.0.7097 [ 653.078778][T27017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27017 comm=syz.0.7097 [ 653.086889][ T40] audit: type=1400 audit(653.453:8627): avc: denied { read } for pid=27016 comm="syz.0.7097" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 653.096912][ T40] audit: type=1400 audit(653.453:8628): avc: denied { open } for pid=27016 comm="syz.0.7097" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 653.106352][ T40] audit: type=1400 audit(653.453:8629): avc: denied { ioctl } for pid=27016 comm="syz.0.7097" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 653.218378][T27017] hsr_slave_1 (unregistering): left promiscuous mode [ 653.257969][ T40] audit: type=1400 audit(653.612:8630): avc: denied { getopt } for pid=27028 comm="syz.8.7102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 653.316402][ T40] audit: type=1400 audit(653.668:8631): avc: denied { ioctl } for pid=27028 comm="syz.8.7102" path="socket:[118541]" dev="sockfs" ino=118541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 653.317506][ T6031] usb 14-1: new low-speed USB device number 5 using dummy_hcd [ 653.326039][T27032] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 653.331271][T27030] openvswitch: netlink: Key type 4372 is out of range max 32 [ 653.334049][T27030] netlink: 'syz.8.7102': attribute type 5 has an invalid length. [ 653.342414][T27030] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.345167][T27030] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.347895][T27030] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.350672][T27030] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.355700][T27030] vxlan0: entered promiscuous mode [ 653.364102][ T40] audit: type=1400 audit(653.715:8632): avc: denied { listen } for pid=27028 comm="syz.8.7102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 653.387658][T27034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27034 comm=syz.0.7104 [ 653.425360][ T40] audit: type=1400 audit(653.771:8633): avc: denied { bind } for pid=27035 comm="syz.0.7105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 653.465379][ T40] audit: type=1400 audit(653.808:8634): avc: denied { bind } for pid=27038 comm="syz.0.7106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 653.488403][ T6031] usb 14-1: Invalid ep0 maxpacket: 16 [ 653.513320][T27041] xt_l2tp: v2 doesn't support IP mode [ 653.627588][ T6031] usb 14-1: new low-speed USB device number 6 using dummy_hcd [ 653.729123][T27045] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN NOPTI [ 653.733035][T27045] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 653.737661][T27045] CPU: 3 UID: 0 PID: 27045 Comm: syz.0.7108 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) [ 653.742773][T27045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 653.747223][T27045] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 653.749346][T27045] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 5a 3c 4f f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 653.757069][T27045] RSP: 0018:ffffc900006efbf0 EFLAGS: 00010293 [ 653.759587][T27045] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff886cabca [ 653.762851][T27045] RDX: ffff88804aa9a440 RSI: ffffffff886cac16 RDI: 0000000000000005 [ 653.766147][T27045] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 653.769416][T27045] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900006efd88 [ 653.772689][T27045] R13: ffffc900006efd88 R14: 0000000000000001 R15: ffff88805ca07000 [ 653.775953][T27045] FS: 00007f82c844d6c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 653.779643][T27045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.782369][T27045] CR2: 00007f82c844cf98 CR3: 000000003f711000 CR4: 0000000000352ef0 [ 653.785697][T27045] Call Trace: [ 653.787108][T27045] [ 653.788384][T27045] ? __pfx_bcsp_recv+0x10/0x10 [ 653.790421][T27045] hci_uart_tty_receive+0x254/0x7e0 [ 653.792603][T27045] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 653.794975][T27045] tty_ioctl+0x583/0x1640 [ 653.796773][T27045] ? __pfx_tty_ioctl+0x10/0x10 [ 653.798789][T27045] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 653.801639][T27045] ? hook_file_ioctl_common+0x145/0x410 [ 653.803971][T27045] ? selinux_file_ioctl+0x180/0x270 [ 653.806167][T27045] ? selinux_file_ioctl+0xb4/0x270 [ 653.808328][T27045] ? __pfx_tty_ioctl+0x10/0x10 [ 653.810353][T27045] __x64_sys_ioctl+0x18e/0x210 [ 653.812384][T27045] do_syscall_64+0xcd/0x4c0 [ 653.814314][T27045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.816781][T27045] RIP: 0033:0x7f82c758e9a9 [ 653.818651][T27045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.826575][T27045] RSP: 002b:00007f82c844d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.829962][T27045] RAX: ffffffffffffffda RBX: 00007f82c77b6080 RCX: 00007f82c758e9a9 [ 653.833207][T27045] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000004 [ 653.836386][T27045] RBP: 00007f82c7610d69 R08: 0000000000000000 R09: 0000000000000000 [ 653.839667][T27045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.842945][T27045] R13: 0000000000000000 R14: 00007f82c77b6080 R15: 00007ffc995ebc58 [ 653.846244][T27045] [ 653.847602][T27045] Modules linked in: [ 653.851082][T27045] ---[ end trace 0000000000000000 ]--- [ 653.854519][T27045] RIP: 0010:bcsp_recv+0x10a/0x17f0 [ 653.856274][T27045] Code: 18 48 c1 e8 03 48 01 e8 48 89 04 24 48 8d 83 78 01 00 00 48 89 44 24 28 48 c1 e8 03 48 89 44 24 08 e8 5a 3c 4f f9 48 8b 04 24 <80> 38 00 0f 85 d1 12 00 00 4c 8b ab 08 01 00 00 31 ff 4c 89 ee e8 [ 653.862359][T27045] RSP: 0018:ffffc900006efbf0 EFLAGS: 00010293 [ 653.864358][T27045] RAX: dffffc0000000021 RBX: 0000000000000000 RCX: ffffffff886cabca [ 653.866858][T27045] RDX: ffff88804aa9a440 RSI: ffffffff886cac16 RDI: 0000000000000005 [ 653.869378][T27045] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 653.871870][T27045] R10: 0000000000000001 R11: 0000000000000001 R12: ffffc900006efd88 [ 653.873291][ T6031] usb 14-1: Invalid ep0 maxpacket: 16 [ 653.874671][T27045] R13: ffffc900006efd88 R14: 0000000000000001 R15: ffff88805ca07000 [ 653.876864][ T6031] usb usb14-port1: attempt power cycle [ 653.879102][T27045] FS: 00007f82c844d6c0(0000) GS:ffff8880d6920000(0000) knlGS:0000000000000000 [ 653.879127][T27045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.886388][T27045] CR2: 0000555586114808 CR3: 000000003f711000 CR4: 0000000000352ef0 [ 653.888859][T27045] Kernel panic - not syncing: Fatal exception [ 653.891437][T27045] Kernel Offset: disabled [ 653.892796][T27045] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:16:09 Registers: info registers vcpu 0 CPU#0 RAX=0000000000ada984 RBX=0000000000000000 RCX=ffffffff8b868c99 RDX=ffffed100d486646 RSI=ffffffff8c1573e0 RDI=ffffffff81920e61 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a94050 R15=0000000000000000 RIP=ffffffff8b8677ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82c846df98 CR3=00000000241d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000818181f8 Opmask01=00000000003fffff Opmask02=0000000003bfffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556225c6ee00 0000556225c6ee00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556225cc7420 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556225c56f70 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f48c57f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffff0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c3bb60c5163 73730c3bb60c5163 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373735c02 7373737373730a07 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003078 303d4e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d45 0d004e4f53414552 5f4b434f4c425f57 485f4c4c494b4652 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b998376498fd823a 0000556773e733e0 0000000000000021 0000000000000039 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002f71 0000000000007974 000033746e003300 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3061722c3343 322c3243322c3143 322c3043322c4533 312c4433312c4333 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c4233312c4133 312c3733312c3633 312c3433312c3333 312c3133312c3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316b2c35312c332c 312c30652d303030 3065343030307042 4132317633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000055 0000000000000000 0000000000001011 00004e4f53414552 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffff88806a53a394 RDX=ffff88802777a568 RSI=ffff88802777a4c0 RDI=ffff88802777a568 RBP=ffff88806a53a2c0 RSP=ffffc900033ef9a8 R8 =ffff88806a53a2c0 R9 =fffffbfff215280a R10=ffffffff90a94057 R11=0000000000000000 R12=ffff88802777a4c0 R13=ffff88802777a4c0 R14=0000000000000008 R15=0000000000000005 RIP=ffffffff818ec996 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555558761500 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82c844dd58 CR3=0000000032c09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000004144 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558789700 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558791511 0000555558790980 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555587744a8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555587875a3 0000555558787200 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000ac0e210001080 809210000c808080 100004808080040c 0141d80002000724 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01080004a80304a8 080004a003038a08 0004980304908008 0004900300080004 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff ffffffffffdf0804 b80300080004b003 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004f80300080004 f00300080004e803 01080004e0030008 0004d80300000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000048004001000 060102ba00080005 9803000800059003 0010000580030008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101901000048004 001000060102ba00 0800059803000800 0590030010000580 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080004f80300 080004f003000800 04e80301080004e0 0300080004d80300 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ffffffffffffffff df0804b803000800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04b00301080004a8 0304a8080004a003 038a080004980304 9080080004900300 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000915b0c RBX=0000000000000002 RCX=ffffffff8b868c99 RDX=ffffed100d4c6646 RSI=ffffffff8c1573e0 RDI=ffffffff81920e61 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a94050 R15=0000000000000000 RIP=ffffffff8b8677ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555586114808 CR3=000000003eabe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc995ebfe0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff855a56e5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc900006ef540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b0b9e20 R15=ffffffff9b0ba0e0 RIP=ffffffff855a570f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f82c844d6c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f82c844cf98 CR3=000000003f711000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000014 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7786488 00007f82c7786480 00007f82c7786478 00007f82c7786450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c82ed100 00007f82c7786440 00007f82c7786458 00007f82c77864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f82c7786498 00007f82c7786490 00007f82c7786488 00007f82c7786480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000